Data Privacy and Cookies Policy
Last update: 10 August 2021
1. About this policy
DOCENT, a simplified joint-stock company ('société par actions simplifiée') with a share capital of 5,000.00 euros, with its head office at 52, avenue de Breteuil, 75007 Paris, reg-istered in the companies register of Paris under the number 891 899 148 ('DOCENT', 'we', 'us', 'our'), is the data controller of your Personal Data.
We are committed to providing you with professional and valuable products and services whilst safeguarding your privacy.
It also tells you how you can access and update your information and make choices about how your information is used.
Please note that when data is anonymised i.e. the Data Subject is not or no longer identi-fiable, the provisions and principles of the Regulation no longer apply.
2. How is your data collected?
Your Personal Data is collected directly from you in the context of your personal account and profile or when you seek to contact us.
Technical information (e.g. IP address, information on your browser, etc.) is also transmit-ted to us by your terminal when you use our application.
3. What data do we process and why?
3.1 Categories of Personal Data
If you are a collector, or more broadly a user, through your personal account and profile, we collect the following Personal Data:
- civil status;
- first name, last name;
- date of birth;
- email address;
- phone number;
- city of residence (if disclosed);
- your preferences and knowledge in art (e.g. your likes on a work of art, your prices preference).
If you are a gallery owner, through your personal account and profile, we collect the follow-ing Personal Data:
- civil status;
- first name, last name;
- email address;
- name and information on the gallery;
- any other information provided by you through your use of our application (e.g. your position at the gallery, contact information for collectors).
We also collect information related to your browsing activity on the application, e.g.:
- the type of terminal you use (smartphone, computer, tablet...);
- the operating system of your terminal;
- your internet service provider;
- the browser used;
- the IP address of your terminal;
- the geolocation of your terminal;
- your language preferences.
3.2 Purposes and legal basis
The purposes for which we collect your Personal Data and the associated legal bases for processing, include:
4. If you do not provide your personal data
If you choose not to provide the Personal Data we request, we may not be able to provide you with our services e.g. if you do not express your preferences, you may not be able to provide you with relevant recommendations.
5. How and when do we share data with third parties?
- We can share your Personal Data with our employees authorized by virtue of their functions and bound by an obligation of confidentiality;
- We can share your Personal Data with other users (collectors and galleries) when you request to make an appointment;
- We can share your Personal Data with third party service providers, whom we en-gage to provide various services e.g. services related to our application, IT ser-vices and solutions, etc. We have carefully selected these service providers and taken steps to ensure that your Personal Data is adequately protected. All of our service providers are bound by written contract to process Personal Data provided to them only for the purpos-es of providing the specific service to us and to maintain appropriate security measures to protect your Personal Data.
- As a collector, your Personal Data can be transmitted to a gallery when you want to meet with this gallery because you have interests for one of its artworks.
We may also share your Personal Data with:
- our accountants, auditors, lawyers or similar advisers when we ask them to provide us with professional advice;
- any other third party if we are under a duty to disclose or share your Personal Data in order to comply with any legal obligation, or to protect the rights, property and/or safety of DOCENT, its personnel and others;
- any other third party for the purposes of acting in accordance with the require-ments of a court, regulator or government agency, for example, complying with a court order or acting in accordance with an applicable law or regulation; or
- investors and other relevant third parties in the event of a potential sale or other corporate transaction related to DOCENT.
Last, we can use anonymised and aggregated data to make statistics on users and collec-tors’ preferences e.g. statistics on sales, on the number of likes for one artwork or one art-ist. The Regulation does not apply in this situation.
6. International Transfers of Data
The transfer of your Personal Data to and between us and the galleries potentially located all over the world, service providers or other recipients may involve your Personal Data be-ing sent outside of the European Economic Area (“EEA”), to locations that may not pro-vide the same level of protection as those within the EEA countries, including to third countries that are not covered by an adequacy decision of the European Commission.
However, we may only transfer your Personal Data outside of the EEA:
- where the transfer is to a place or by a method or in circumstances that is regard-ed by the European Commission as providing adequate protection for your Per-sonal Data;
- where you have explicitly consented to the transfer by ticking a specific box in your personal account and after having been informed of the possible risks of such transfers.
You can request further details about the safeguards that we have in place in respect of transfers of Personal Data outside of the EEA by contacting us at: email@example.com.
7. How long do we store data?
It is our policy to retain your Personal Data for the length of time required for the specific purpose or purposes for which it was collected (e.g., for the fulfilment of an agreement – Terms and conditions of use - with you). However, we may be obliged to store some Per-sonal Data for a longer time, taking into account factors including:
- legal obligation(s) under applicable law to retain data for a certain period of time (e.g. compliance with tax and accountancy requirements);
- the establishment, exercise or defence of legal claims (e.g. for the purposes of a potential dispute).
Mainly, we retain the Personal Data:
- complaints, questions, queries: 3 years following a complaint, question or query that has been closed;
- contact form: 3 years after your request;
- subscription to a newsletter: as long as the Data Subject does not unsubscribe;
- personal account creation: until your account is deleted;
- contract: when we have concluded a contract with you (gallery) as long as the con-tract between you and us is in force and up to 5 years after its termination.
If you would like to have more specification on retention period of your Personal Data for a particular purpose, you can contact us at: firstname.lastname@example.org.
8. How do we protect your data?
We have implemented technological and operational security measures in order to protect your Personal Data from loss, misuse, or unauthorised alteration or destruction. Such measures include the use of firewalls, encryption, proper access rights management processes, careful selection of processors and other technically and commercially reasonable measures to provide appropriate protection for your Personal Data. Where appropriate, we may also make backup copies and use other such means to prevent accidental damage to or destruction of your Personal Data. These measures ensure an appropriate level of security in relation to the risks inherent in the processing and the na-ture of the Personal Data to be protected.
Please note however that where you are transmitting information to us over the internet this can never be guaranteed to be 100% secure.
We will notify you promptly in the event of any breach of your Personal Data that might expose you to serious risk.
9. Links to Third Party Websites
10. Your rights
The following section explains your rights that you may exercise. The various rights are not absolute and each is subject to certain exceptions or qualifications in accordance with the Regulation.
- The right to rectification – you can ask us to take measures to correct your Per-sonal Data if it is inaccurate or incomplete (e.g., if we have the wrong name or ad-dress for you).
- The right to erasure – this is also known as the ‘right to be forgotten’ and, in sim-ple terms, enables you to request the deletion or removal of your Personal Data where, for example, there is no compelling reason for us to keep using it or its use is unlawful. This is however not a general right to erasure and there are some ex-ceptions, e.g. where we need to use the information in defence of a legal claim or to be able to comply with a legal obligation.
- The right to restrict processing – you have the right to ‘block’ or suppress the further use of your Personal Data when we are assessing a request for rectification or as an alternative to erasure. When processing is restricted, we can still store your Personal Data, but may not use it further.
- The right to data portability – you have the right to obtain and reuse certain Per-sonal Data for your own purposes across different organisations (being separate data controllers). This only applies to your Personal Data that you have provided to us that we are processing with your consent and for the purposes of contract fulfilment, which is being processed by automated means. In such a case we will provide you with a copy of your data in a structured, commonly used and machine-readable format or (where technically feasible) we may transmit your data directly to a separate data controller.
- The right to object – you have the right to object to certain types of processing, on grounds relating to your particular situation, at any time insofar as that pro-cessing takes place for the purposes of legitimate interests pursued by DOCENT, any of the Affiliates, or by a data recipient. We will be allowed to continue to pro-cess the Personal Data if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or we need this for the establishment, exercise or defence of legal claims. If you object to the pro-cessing of your Personal Data for direct marketing purposes, we will no longer pro-cess your Personal Data for such purposes.
- The right to withdraw consent – where we process your Personal Data on the basis of your consent, you have the right to withdraw your consent at any time. However, such withdrawal does not affect the lawfulness of the processing that occurred prior to such withdrawal.
- The right to provide us with directives regarding the use of your personal in-formation after your death – you have the right to provide us with instructions on the management (e.g., retention, erasure and disclosure) of your personal infor-mation after your death. You can change or revoke your instructions at any time.
- The right to lodge a complaint – if you believe that we do not comply with appli-cable data protection laws, you have the right to lodge a complaint before any competent data protection authority.
11. How to exercise your rights
If you wish to request further information or exercise any of the above rights, or if you are unhappy with how we have handled your Personal Data, contact our privacy correspond-ent at: email@example.com or send us a letter at: 52, avenue de Breteuil, 75007 Paris.
Before assessing your request, we may request additional information in order to identify you. If you do not provide the requested information and, as a result, we are not in a po-sition to identify you, we may refuse to action your request.
We will generally respond to your request within one month of receiving your request. We can extend this period by an additional two months if this is necessary taking into account the complexity and number of requests that you have submitted.
We will not charge you for such communications or actions we take, unless:
- you request additional copies of your Personal Data undergoing processing, in which case we may charge for our reasonable administrative costs, or
- you submit manifestly unfounded or excessive requests, in particular because of their repetitive character, in which case we may either charge for our reasonable administrative costs or refuse to act on the request.
If you are not satisfied with our response to your complaint or believe our processing of your Personal Data does not comply with data protection law, you can file a complaint to the relevant data protection authority, the French Commission Nationale de l’Informatique et des Libertés (“CNIL”).
When you visit or interact with our application, we (or our third-party providers) may use 'cookies' or other similar technologies to personalize and enhance your experience. A “cookie” is a small piece of information sent to a visitor’s computer or other Internet-connected devices to uniquely identify the visitor’s browser or to store information or set-tings in the browser. Cookies are used in particular to make our application work, or work more efficiently, as well as to provide data to the application owners. Our application use required cookies, functional and preference cookies, advertising cookies, social networks cookies then analytics and performance cookies.
When your prior consent is required for their use, the period of validity of the consent to the deposit of cookies is six (6) months. At the end of this period, we will ask for your con-sent again.
When your prior consent is not required, the analytics cookies lifetime is limited to thirteen (13) months (this period is enough for a relevant comparison of audience measure) and in-formation collected through the cookies is retained for a maximum of twenty-five (25) months.
Our application uses:
- Required cookies. They enable you to move from page to page and to use fea-tures on our websites while your browser remains open. If a user blocks these cookies via the browser then we cannot guarantee how the application will per-form. For example, remembering the user is not a first time user to the application,
- Functional and preference cookies. For example, functional cookies may be used to recognize you as a previous visitor in order to provide a more personalized experience (remembering the preferred language etc.). They are stored in your computer, device, or browser until you choose to delete them.
- Advertising cookies. They are used to show you advertisements or to send you information based on your interests in connection with your use of the application as you browse the Internet outside our application. In particular, they are used to limit the number of times you see an advertisement and to help measure the effec-tiveness of an advertising campaign. These cookies are mainly controlled by ad-vertising agencies and we do not always control their use.
- Social network cookies. They allow our content to be displayed or shared with others, including on social networks such as Facebook, Twitter, LinkedIn, Insta-gram, etc. Even if you do not use these sharing buttons or applications, social networks may track your browsing on our application if your account or session is enabled on your computer at that time.
- Analytics and performance cookies. They allow us to collect data concerning the applications, including the number of visitors, where the visitors have come from, and the length of time visitors spend on the applications, which allows us or third-party service providers to analyse how our applications are used and how our applications are performing. We use this information to improve our application and provide a better user experience. These can be enabled/disabled at any time by the user.
Either during your first visit to our application, you will be asked for your consent to the use of your data by cookies via a cookies banner displayed at the bottom of the page.
Either the majority of web browsers accept cookies and similar files, but you can usually change your browser settings to prevent this. If for any reason you decide that you do not like our use of certain cookies, you can simply change your settings at any time. However, if you do so, some functionality of our applications may be lost.
The setting of each browser is different. It is described in the browser's help menu.
Click the access Menu button and then choose 'Options' Choose 'Privacy & Security' Set the History Section on 'Use custom settings for History” Uncheck the box 'Accept cookies from websites' All changes you have made will be automatically saved.
- Internet Explorer:
Select the Tool button, then Internet Options Select Privacy Tab, and then under Settings, move the cursor to the top to block all cookies or to the bottom to allow cookies, then click on OK
- Google Chrome:
Select the Chrome menu icon Click on 'Settings' At the bottom, click on 'Advanced' Under 'Privacy and security,' click on 'Content settings' Click on 'Cookies' Turn 'Allow sites to save and read cookie data' on or off.
https://support.apple.com/en-gb/guide/safari/sfri11471/mac Click on 'Settings' - 'Safari' - 'Privacy' - 'Cookies and website data' Then select 'always block cookies'
- Opera: http://help.opera.com/Windows/10.20/en/cookies.html
13. Our Contact
14. Modification of this policy