Musée-Conservatoire des Tres Cantous is committed to protecting the privacy of its website users. This privacy policy explains how we collect, use and protect your personal data.

1. Data controller

The data controller is:
Musée-Conservatoire des Tres Cantous
85 Rte des Très Cantous, 81600 Broze, France
Email: info@museedestrescantous.com

2. Data collected

We collect the following data through our forms:

Contact form: name, email, phone (optional), subject, message
Booking form: name, email, phone, preferred date, number of visitors, visit type, message
Online payment: banking details are processed directly by Stripe and are never stored on our servers

3. Purposes of processing

Your data is collected to:

Respond to your contact requests
Process your booking requests
Send you information about your visit
Produce anonymous traffic statistics (Umami, without collecting personal data)

4. Legal basis for processing

The processing of your data is based on your consent when submitting the form and on the performance of pre-contractual measures (booking request).

5. Data recipients

Your data is accessible to Musée-Conservatoire des Tres Cantous staff authorised to process your requests. It is never shared with third parties for commercial purposes.

For the operation of the website, some data is transmitted to our technical subprocessors:

Stripe Inc. — secure payment processing (banking details, name, email)
Resend Inc. — transactional email delivery (name, email)
Umami Cloud — anonymous traffic analytics (no personal data collected)

These providers comply with the GDPR and only process your data according to our instructions.

6. Data retention period

Your data is retained for 3 years from your last interaction with us, in accordance with CNIL recommendations.

7. Your rights

Under the GDPR, you have the following rights regarding your data:

Right of access: obtain confirmation that your data is being processed and receive a copy
Right to rectification: request correction of inaccurate data
Right to erasure: request deletion of your data
Right to restriction: request limitation of processing
Right to object: object to the processing of your data
Right to data portability: receive your data in a structured format

To exercise these rights, contact us at: info@museedestrescantous.com

8. Cookies

Our website only uses strictly necessary technical cookies for its operation:

Session cookie for navigation
Language preference cookie
Umami: a privacy-friendly analytics tool that works without cookies and without collecting personal data
Stripe: technical cookies placed only during the payment process to secure the transaction

These cookies do not collect any personal data for advertising or tracking purposes.

9. Security

We implement appropriate security measures to protect your data against unauthorised access, modification, disclosure or destruction:

Secure HTTPS connection
Restricted access to personal data
Secure hosting
Payment data encryption compliant with PCI-DSS standards (via Stripe)

10. Transactions and terms of sale

For any information regarding admission ticket sales conditions, pricing, payment methods and cancellation policies, please refer to our Terms and conditions of sale.

11. Complaints

If you believe your rights are not being respected, you can file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr

12. Changes

This privacy policy may be updated at any time. The last update date is shown below.

Last updated: March 2026

Privacy policy