Privacy policy

This page explains what personal data is collected on museoscience.fr, why, how long it is kept, and how you can exercise your rights.

Data controller

Contact: contact

Free guide and newsletter

Data collected. When you request the guide “Creating or hosting an exhibition”, through the bar at the top of the page, the sign-up window or the box at the end of a blog article, I collect your email address and a record of your consent (checkbox).

Purpose. This data is used only to send you the guide, a short series of welcome emails, and then the MuseoScience newsletter. It is never sold or passed on.

Legal basis. Your consent, given by ticking the checkbox (Art. 6(1)(a) GDPR).

Tool used. Email addresses are managed with ActiveCampaign (ActiveCampaign, LLC, Chicago, USA), acting as a processor for sending emails.

Retention period. Your data is kept until you unsubscribe, and at the latest three years after your last active contact (for example replying to an email or writing to me). After that, it is deleted.

Unsubscribing. You can unsubscribe at any time, in one click, using the link at the bottom of every email.

Contact and hosting

Email contact. When you contact me by email, the information you provide (email address, name, content of your message) is processed solely to respond to your enquiry and is not shared with third parties. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries).

Hosting. Server logs (IP address, pages visited, date and time) are retained for technical purposes by OVH SAS (Roubaix, France). Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a technically sound website).

Cookies and local storage

Google Analytics. This website uses Google Analytics (Google LLC, United States) to measure its audience. These cookies are only placed with your consent, which you can give or refuse on your first visit and withdraw at any time via the Cookie settings link at the bottom of each page. Legal basis: Art. 6(1)(a) GDPR (consent). Google LLC is certified under the EU-US Data Privacy Framework, which ensures an adequate level of protection in accordance with Art. 45 GDPR.

Your choice (accept or decline) is kept for 6 months, after which you are asked again.

Local storage (browsing comfort). The website also saves a few technical details in your browser: your cookie choice, the date on which you closed the sign-up window or bar, and the fact that you have subscribed, so that they are not shown to you again. This information contains no personal data, is not sent to anyone, and can be deleted at any time in your browser settings.

YouTube videos. Some pages embed videos hosted by YouTube (Google LLC). These videos are initially displayed as a local thumbnail; no data is sent to YouTube before you click to start playback. Videos load in enhanced privacy mode via youtube-nocookie.com. Legal basis: Art. 6(1)(a) GDPR (consent).

Your rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access (Art. 15): you may request information about the personal data I process about you.
• Right to rectification (Art. 16): you may request the correction of inaccurate data.
• Right to erasure (Art. 17): you may request the deletion of your data, unless a legal retention obligation applies.
• Right to restriction of processing (Art. 18): you may request that processing be restricted in certain circumstances.
• Right to data portability (Art. 20): you have the right to receive your data in a structured, machine-readable format.
• Right to object (Art. 21): you may object to processing based on legitimate interests.
• Withdrawal of consent (Art. 7(3)): you may withdraw any previously given consent at any time, without affecting the lawfulness of prior processing.

For the newsletter, the simplest way is to use the unsubscribe link in every email. To exercise your other rights, please write to the address given in the Data controller section above.

Right to lodge a complaint

If you believe that the processing of your personal data does not comply with the GDPR, you have the right to lodge a complaint with the French data protection authority (CNIL):

Last updated: October 2026