Legal Notice
Definitions
User: Any person accessing the www.musip.fr website and using its content or features.
Content: All elements constituting the information presented on the Site, including texts, images, graphics, and videos.
Personal Data: Any information relating to an identified or identifiable natural person.
The terms “personal data,” “data subject,” “processor,” and “sensitive data” have the meaning defined by Regulation (EU) 2016/679 (GDPR).
1. Website Presentation
Pursuant to Article 6 of French Law No. 2004-575 of June 21, 2004, on Confidence in the Digital Economy, users of the www.musip.fr website are informed of the identity of the various parties involved in its creation and monitoring:
Owner: ASSOCIATION MUSÉE DE L’INFO ET DE LA PRESSE – 13 rue Poissonnière, 75002 Paris, France
Publication Manager: Antoine Mariotti, Founding President. Email: bonjour@musip.fr
- Art direction and visual identity: Ophéline GAUDET – Substance studio
Webmaster / Technical Production: Aline CONSALVO – https://www.alineconsalvo.com – contact@alineconsalvo.com
Hosting Provider: IONOS SARL – 7 Place de la Gare, 57200 Sarreguemines, France – Phone: +33 9 70 80 89 11
Contact for questions regarding personal data: bonjour@musip.fr
2. General Terms of Use of the Site and Services Offered
The Site constitutes an intellectual work protected by the provisions of the French Intellectual Property Code and applicable regulations. The User may not reuse, assign, or exploit for their own account all or part of the elements or works of the Site without authorization.
Use of the www.musip.fr website implies full acceptance of these terms of use. They may be modified or supplemented at any time; the applicable version is the one accessible on the Site.
The site is normally accessible at all times. However, interruptions may occur, notably for technical maintenance. MUSIP endeavors to keep the published information up to date.
3. Description of Services Provided
The www.musip.fr website is intended to present the project, activities, content, and news of the association MUSÉE DE L’INFO ET DE LA PRESSE.
MUSIP strives to provide information that is as accurate and up-to-date as possible. However, it cannot guarantee the completeness or absence of errors in the published information, particularly when it originates from third-party partners.
The information featured on the Site is subject to change.
4. Technical Data and Availability
The Site uses web technologies necessary for its operation. MUSIP cannot be held liable for any incompatibility related to equipment, browser, or configuration that prevents the normal display of the Site.
The Site relies in particular on the following technologies and services:
WordPress, content management system (CMS);
Elementor, design and layout tools;
Polylang, for managing the site in French and English;
Complianz, for cookie consent management;
Matomo, for audience measurement, hosted on the Site’s servers;
Wordfence, for Site security;
Brevo, for the newsletter subscription form;
YouTube, for embedded videos;
HTML5, CSS3, and JavaScript, for page structure, presentation, and interactions.
The Site is hosted by the service provider identified in Article 1.
Temporary interruptions may occur for maintenance or technical incidents.
5. Intellectual Property and Counterfeiting
Unless otherwise stated, MUSIP owns the rights or necessary authorizations for all elements accessible on the Site, including texts, images, graphics, logos, and videos. Any reproduction, representation, modification, publication, or adaptation of all or part of these elements is prohibited without prior written authorization from MUSIP, subject to exceptions provided by law.
Any unauthorized exploitation may constitute an infringement of copyright under the French Intellectual Property Code.
6. Limitations of Liability
MUSIP acts as the publisher of the Site and is responsible for the content it publishes, subject to content and services provided by third parties.
MUSIP cannot be held liable for damages resulting from use of the Site that does not comply with its intended purpose, or from technical incompatibilities beyond its control.
7. Personal Data Management
MUSIP processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act (“Loi Informatique et Libertés”) as amended.
7.1 Data Controller
The controller for personal data collected via the Site is the association MUSÉE DE L’INFO ET DE LA PRESSE, 13 rue Poissonnière, 75002 Paris, France.
The association is represented by Antoine Mariotti, Founding President.
MUSIP determines the purposes and legal bases of the processing activities it implements and ensures that data subjects are provided with information in compliance with regulations.
7.2 Purposes and Legal Bases of Collected Data
Ensuring the security and proper technical operation of the Site: strictly necessary technical data (e.g., technical logs / IP address when required).
Hosting
The Site is hosted by IONOS. Server technical logs may contain information regarding connections and requests made to the Site, as well as technical information about the browser and operating system used. IP addresses are anonymized according to IONOS logging procedures. These logs are retained for a maximum of 8 weeks.
Security
The Site also uses Wordfence to ensure its security and to detect or prevent malicious activities. Traffic data recorded for this purpose is retained for a maximum of 30 days.
Site Audience Measurement
MUSIP uses Matomo, an audience measurement tool hosted on the Site’s servers, to understand visitor traffic: pages viewed, country of origin, clicked links. Matomo is configured so that it does not require consent: IP addresses are anonymized, no data is transmitted to third parties, the cookies used have a maximum lifespan of 13 months, and data is retained for a maximum of 25 months.
You can opt out of this tracking by unchecking the box below. Some browsers automatically delete this choice if you do not return to the Site for a certain period: please check this during your future visits.
You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.
MUSIP also uses Google Search Console to monitor the Site’s presence in Google search engine results. This tool does not place any trackers on visitors’ devices and does not constitute an audience measurement tool (see 7.5).
Newsletter Subscription and Delivery Management
Email addresses are voluntarily provided by the User via the subscription form. Subscriptions are confirmed via a validation email (double opt-in). Subscriptions and mailings are managed exclusively via Brevo as the technical service provider.
7.3 Rights of Data Subjects
In accordance with applicable regulations, data subjects may, under the conditions set forth by the GDPR, exercise their rights of access, rectification, erasure, restriction, objection, and, where applicable, data portability. When processing is based on consent, such consent may be withdrawn at any time.
To exercise these rights: bonjour@musip.fr
MUSIP may request additional information to verify the applicant’s identity only when necessary regarding the request.
Every data subject also has the right to lodge a complaint with the CNIL (the French data protection authority).
7.4 Recipients, Processors, and Transfers
Data may be accessible to authorized personnel within MUSIP and, when necessary, to its technical service providers acting on its behalf:
IONOS SARL: Hosting of the Site, its backups, and the audience measurement tool (European Union);
Brevo (Sendinblue SAS): Newsletter management (European Union);
Defiant, Inc. (Wordfence): Protection of the Site against attacks (United States);
Cloudflare, Inc.: Anti-robot verification for the subscription form via Turnstile service (United States);
YouTube videos embedded on the Site are provided by Google Ireland Limited, which processes data for its own account and not as a processor for MUSIP (see 7.5).
Some of these providers (Cloudflare, Wordfence, Google) may transfer data to the United States. These transfers are governed by the European Commission’s adequacy decision regarding the Data Privacy Framework and/or standard contractual clauses adopted by the European Commission.
When data is transferred outside the European Economic Area, MUSIP ensures that such transfers rely on an appropriate legal mechanism and informs individuals when required by regulations.
7.5 Types of Data and Retention Periods
Email address provided for newsletter subscription via Brevo
Data: Last name, first name, email address, and your choice regarding mailing audience measurement.
Purposes: To send you the museum’s newsletter and, if you have consented, to measure email opens and link clicks to improve our mailings.
Legal basis: Your consent, collected via the subscription form and confirmed by a validation email (double opt-in). Consent for mailing audience measurement is separate and optional.
Provider: Brevo (data hosted in the European Union).
Retention period: Until unsubscription, which is possible at the click of a link present in every email. Inactive subscriber data is deleted after 3 years without interaction, in accordance with CNIL recommendations. You can withdraw your consent to audience measurement at any time via the link provided in each mailing.
Audience Measurement
Data: Pages viewed, date and time of visit, referral site (without parameters), approximate country and city, device type, operating system, browser, screen resolution, outbound link clicks and downloads, anonymized IP address (last two octets removed).
Purpose: To produce anonymous traffic statistics to improve the content and usability of the Site.
Legal basis: The museum’s legitimate interest in measuring its site’s audience. This measurement is exempt from consent in accordance with CNIL recommendations. You can object to it at any time using the module provided in Article 7.2.
Provider: Matomo is hosted on the Site’s servers (European Union), and no data is transmitted to third parties.
Retention period: Cookies valid for a maximum of 13 months; visit data retained for a maximum of 25 months, then kept solely as aggregated and anonymous statistics.
Site Security and Newsletter Protection
Data: IP address, browser and device type, requested pages, date and time, identifier entered during login attempts to the administration area.
Purposes: To protect the site against cyberattacks, intrusion attempts, and automated sign-ups (bots) on the newsletter form.
Legal basis: The museum’s legitimate interest in ensuring the security of its site.
Providers: Defiant, Inc. (Wordfence) for site protection; Cloudflare, Inc. (Turnstile) for anti-robot form verification. Transfers to the United States are possible (see 7.4).
Retention period: Only security-related traffic is logged (login attempts, blocked requests) for a maximum of 30 days. IP address blocks are automatically lifted after their expiration duration. Data processed by Cloudflare Turnstile is used exclusively for verification at the time the form is submitted.
Embedded Videos
The site embeds videos hosted by YouTube, a service provided by Google Ireland Limited. These videos are only loaded with your consent. When accepted, YouTube may set cookies and collect browsing data (IP address, device data, video interactions), which it processes for its own account and in accordance with its privacy policy. Transfers to the United States are possible. You can withdraw your consent at any time using the “Manage Consent” tab displayed at the bottom of each page.
Search Engine Optimization (SEO)
The museum uses Google Search Console to monitor the site’s presence in Google search results. This tool does not place any cookies or other trackers on your device. It only provides access to aggregated statistics that do not identify internet users: search queries that triggered the site, number of impressions and clicks, average position in results, concerned pages, countries, and device types. It also provides technical information regarding the crawling and indexing of site pages.
Links to Third-Party Sites
The site contains links to the museum’s pages on social media (Facebook, Instagram, LinkedIn, YouTube) and to its crowdfunding campaign on Ulule. These are simple links: no data is transmitted to these services until you click on them. Once on those sites, your data is processed by their respective publishers in accordance with their own privacy policies.
Technical Data and Cookies Strictly Necessary for WordPress / Hosting Operation
Strictly Necessary Cookies: Some cookies are essential for the site to function and do not require your consent:
Remembering your cookie choices (Complianz): retained for 6 months, after which your choice is requested again;
Remembering the selected language (Polylang): retained for 1 year;
Session and security cookies for the administration area (WordPress, Wordfence): placed only for individuals logging into site administration, and deleted at the end of the session or after a few hours;
Temporary storage used to check emoji display (WordPress): deleted when the tab is closed, containing no personal data;
Matomo audience measurement cookies: exempt from consent, see “Audience Measurement (Matomo).”
Hosting Technical Logs
Like any web server, the server hosting the site (IONOS) automatically records technical data during each visit: IP address, connection date and time, requested page, and browser type. These logs serve to ensure the proper operation and security of the hosting based on the museum’s legitimate interest. They are retained for a limited duration set by the hosting provider.
8. Security and Incident Notification
In the event of a personal data breach, MUSIP complies with documentation obligations and, where regulatory conditions are met, notification obligations to the CNIL and/or communication to affected individuals.
MUSIP and its technical service providers implement appropriate technical and organizational measures to protect personal data against loss, unauthorized access, disclosure, alteration, or destruction.
Encryption of communications between the browser and the site (HTTPS protocol): IONOS
Regular updates of the content management system and its extensions: WordPress
Web application firewall and regular scans to detect malicious files or behaviors: Wordfence
Form protection against automated registrations: Cloudflare
9. Hyperlinks and Cookies
The Site may contain links to third-party sites. MUSIP exercises no control over the content or practices of these third-party sites and accepts no responsibility for them.
9.1 Cookies and Other Trackers
Trackers strictly necessary for the operation of the Site may be placed without consent when they meet regulatory conditions. Any tracker subject to consent may only be placed or read after a positive choice by the User.
Continued browsing does not constitute consent.
Users can manage their choices directly via the cookie management module available on the Site. They can modify or withdraw their consent at any time.
Cookie management is handled by the Complianz tool. During the first visit, a banner allows users to accept or refuse consent-based trackers with equal simplicity (“Accept”, “Reject”, and “Manage Preferences” buttons), or to choose by category (Functional, Statistics, Marketing).
The choice can be modified or withdrawn at any time via the “Manage Consent” tab permanently displayed at the bottom of each page. The detailed list of cookies and trackers, including their lifespan, can be found on the Cookie Management & Preferences page.
The following trackers are subject to prior User consent: YouTube (embedded videos), by Google Ireland Limited: video content playback.
Audience measurement performed with Matomo is exempt from consent (see Article 7.2). Links to social media (Facebook, Instagram, LinkedIn, YouTube) are simple hyperlinks and do not place any trackers on the Site.
9.2 Internet Tags / Pixels
As of the launch date, the Site does not integrate any tags, pixels, or marketing tools other than the Matomo audience measurement tool described in Article 7.2.
10. Governing Law
This Site and its legal notice are subject to French law. In the event of a dispute, competent jurisdictions shall be determined in accordance with applicable common law rules.
