How we handle your information

Who is behind this

Luminart is a museum at 18 Rue de Rivoli, 75004 Paris, and we are the ones who decide how your information is used when you buy a ticket, write to us, or visit this website. When this page says "we", it means Luminart. If you want to reach a person about any of this, the last section tells you how.

What we store

We keep only what we need to let you in and to answer you. That means the name and email you give when booking a ticket, the details your card provider passes back to confirm a payment, and anything you write in a message to us. When you browse the site, our servers record the ordinary technical traces every website sees — the kind of browser you use and the pages you open — so the site keeps working.

We do not ask for anything we have no use for, and we do not build a profile of you for its own sake.

Why we are allowed to

We handle your information for clear reasons. We use booking details because we have a contract with you — your ticket. We answer your messages because it is in our legitimate interest to run a museum that replies to people. We keep records for a set time because the law on tax and accounting tells us to. Where we set cookies that are not strictly necessary, we only do so once you have agreed.

Who sees it

Your information stays with us and with a small number of services that work on our behalf — the company that processes card payments, the service that sends our ticket confirmations, and the firm that hosts this website. Each of them is bound by a contract to use your data only for the task we give them, and never for themselves.

We do not sell your information, and we do not hand it to anyone for advertising. We would only pass it to a public authority if the law genuinely required it.

Where it is held

Your information is stored on servers within the European Union. If a service we rely on ever needed to move data outside the EU, we would make sure the transfer rested on the safeguards that European law demands, so your protection travels with the data.

How long it stays

We do not keep things forever. Booking and payment records are held for as long as tax and accounting rules require, which is normally several years. Messages you send us are kept while we deal with your question and for a short while after, in case you come back to it. The technical traces from the website are cleared on a rolling basis within a few months. Once a reason to hold something is gone, the information is deleted.

How we keep it safe

We protect your information with the usual, sensible measures — encrypted connections for the website, access limited to the staff who need it, and payment handling left entirely to a certified provider so that full card numbers never reach us. No system is perfect, but we work to keep the risk small and to notice quickly if something goes wrong.

What you can ask for

The information is yours, and you have real say over it. You can ask us for a copy of what we hold, ask us to correct anything wrong, or ask us to delete it where we have no lasting reason to keep it. You can object to some of our uses, ask us to pause while we check something, or request your details in a portable form. Where we rely on your consent, you can take it back at any time. We will not treat you differently for exercising any of these.

About children

Our website is meant for adults making bookings. We do not knowingly collect information from children on their own, and tickets for under-eighteens are arranged by a parent, a teacher or another responsible adult. If you believe a child has sent us information directly, tell us and we will remove it.

When this changes

If we change how we handle your information, we will update this page and move the date at the top. When a change is significant, we will say so more plainly rather than leaving you to notice. The version on this page is always the one that applies.

If something is not right

If you have a question about your information, or you think we have got something wrong, write to us at visit@luminart.paris or call 01 42 68 53 17. You can also reach us by post at Luminart, 18 Rue de Rivoli, 75004 Paris. We would always rather you came to us first, but you also have the right to complain to the French data protection authority, the CNIL.