Datas protection policy

This policy sets out the various measures taken by CULTURESPACES to ensure the protection of the personal data you may provide in the situations listed below. This is done in compliance with French Law No. 78-17 (the Data Protection Act of 6 January 1978) and the General Data Protection Regulation (GDPR), adopted by the European Parliament on 14 April 2016:

  • When visiting our website or our online sales platform
  • When purchasing a ticket online
  • When voluntarily sharing data to receive information about our services (newsletter, customer service, etc.) or to apply for a position

1. Collection of your personal data

1.1 Who is responsible for collecting and processing data?

As the data controller, CULTURESPACES, a French company registered with the Paris Trade and Companies Register under number 8 378 955 116, headquartered at 5 rue Catherine de la Rochefoucauld 75009 Paris, France, places great importance on protecting and respecting your privacy.

1.2 What are the purposes of processing your data?

In line with the principle of data minimisation, we only collect the personal data required for the intended purposes. We use this personal information solely to provide the services you have agreed to.

It is necessary to process your personal data in the following situations: 

  • When you browse our site.
  • When you purchase a ticket.
  • When you create an account.
  • When you contact us for assistance using the after‑sales service form.
  • When you attend a marketing event and/or when we exchange business cards and you provide us with your personal data.
  • To fulfil our contractual obligations to you and provide you with our services, safeguard our legitimate interests and comply with the applicable regulatory obligations (legal and financial).
  • To process bookings for groups.
  • When we process your job application submitted via our website.

Below is a summary of the processing operations, their legal basis and the data we collect for the stated purpose:

  • Responding to an information request submitted via the customer service section of our website
    Legal basis: Legitimate interest
    Personal data concerned: First name, last name, email address. Any information you choose to provide us with.
  • Purchasing a ticket (including the delivery of a personalised ticket by email)
    Legal basis: Performance of a contract
    Personal data concerned: First name, last name, email address, payment details.
  • Accounting, invoicing and monitoring of the Platform’s activity
    Legal basis: Legitimate interest / performance of a contract
    Personal data concerned: Details of financial transactions / purchase history.
  • Creating an account
    Legal basis: Consent
    Personal data concerned: First name, last name, email address, date of birth, country, postcode.
  • Sending newsletters, promotional offers and invitations to events
    Legal basis: Consent
    Personal data concerned: First name, last name, email address, country, postcode.
  • Reporting (analysing behaviour: number of tickets purchased, geographical origin, etc.)
    Legal basis: Legitimate interest
    Personal data concerned: Gender, age, postcode.
  • Processing a job application (applying for a job through our website)
    Legal basis: Performance of an employment contract
    Personal data concerned: First name, last name, date and place of birth, postal address, gender, photograph, email address, telephone number, information included in a CV.
  • Marketing, analysis and market research to improve our website
    Legal basis: Consent and legitimate interest
    Personal data concerned: Cookies and other trackers placed on our website and applications, geolocation data, IP address and other information relating to your activity on the Site.
  • Keeping records of consent obtained
    Legal basis: Legal obligation

When collecting information that may be used to keep you informed about our products and services, and after obtaining your consent, you will always be given the opportunity to accept or refuse the use of this information for direct marketing purposes. Furthermore, each email we send includes an unsubscribe link that allows you to automatically opt out of such communications. If you choose to unsubscribe, you will be removed from the relevant mailing list within a reasonable timeframe based on our technical systems. The email addresses you may be asked to enter in other forms (including “Contact”) are used solely to send the relevant message and are not stored.

1.3 Data retention period

Data relating to the management of our commercial relationship:
- Your personal data will not be retained beyond the period strictly necessary for managing our commercial relationship.
- For any potential prospecting activities, your data may be kept for three years from the end of the commercial relationship. When this three‑year period expires, we may contact you again to ask whether you would like to continue receiving marketing communications.

Data regarding your credit/debit cards:
- Financial transactions relating to payments and fees via the platform are handled by a payment service provider responsible for their proper processing and security, namely Adyen. The provider collects and retains your personal data regarding your credit/debit card numbers for as long as you remain registered on the platform, and at the very least until you make your final transaction, acting in our name and on our behalf. We do not have access to this data. By ticking the dedicated checkbox on the platform, you expressly consent to our retaining your credit/debit card details.
- Data concerning the card security code or CVV2 printed on the back of your card is not stored.

Data relating to the after-sales service form:
This data is retained for as long as necessary to process your request. It may subsequently be archived for the period required to handle any potential disputes or to protect our rights in legal proceedings, in accordance with applicable limitation periods.

Data regarding job applications:
If your job application is unsuccessful, your data will be retained for a period of two years from the date of our last contact with you, unless you object or request deletion. With your consent, this data may be kept in order to offer you other opportunities that match your profile.

2. Who can access this data? 

Personal data regarding ticket purchases is processed by the CULTURESPACES accounting department and the following partners:

  • Fever (payment platform operator)
  • Vivenu (payment platform operator)
  • CM (payment platform operator)
  • Adyen (online payment service provider)
  • Tech4Team (provider of our CRM solution)
  • Redpill (service provider specialising in data marketing)
  • Notilus (service provider specialising in data and AI)

This list is subject to change based on updates from our service providers and partners. This policy is then updated accordingly.

The data you consent to share with us in order to receive information about our events may be transmitted to companies in the CULTURESPACES group for marketing purposes or internal analysis.

The data may also be transmitted to the following partners for the following purposes.

The personal data collected through our sites will under no circumstances be disseminated, transferred, leased or exchanged with third parties by CULTURESPACES without your consent.

In certain exceptional cases, your personal data may be transmitted to the competent authorities in order to comply with our legal or regulatory obligations.  

3. Right of access, rectification and objection

You may, at any time:

  • Request access to your personal data and obtain a copy of the personal information you have voluntarily provided to us in a structured, standard and machine-readable format (right to data portability).
  • Request that we correct your personal data.
  • Request that we delete your personal information (provided that this does not prevent the proper performance of our contractual relationship or compliance with CULTURESPACES' legal obligations).
  • Notify us of your objection to the processing of your personal data.  
  • Request that we restrict one or more uses of your personal data. 

Furthermore, you have the right to object to the processing of your personal data under the conditions set out in the regulations, as well as the right to lodge a complaint with a supervisory authority.

Please note, however, that these rights are not absolute and may be limited by our own legitimate interests and regulatory requirements. 

If you wish to exercise any of the aforementioned rights or receive additional information, you may contact us by sending a written request to culturespaces@culturespaces.com or by letter to the following address:
CULTURESPACES 
Correspondant Informatique et Libertés 
5 rue Catherine de la Rochefoucauld 
75009 Paris

If, after contacting us, you consider that your request has not been satisfactorily addressed, you have the option of filing a complaint with the French Data Protection Authority (CNIL) or initiating legal proceedings.

4. Cookies

4.1 What is a cookie?

Together with our trusted partners, we use cookies and similar technologies across our related services, including when you visit our website or access our services. This means that cookies are placed on your computer, mobile phone or tablet when you access our websites.

A “cookie” is a small piece of information that a website places on your device when you visit the site. Cookies are very useful and may serve different purposes, including helping you browse efficiently from one page to another, enabling the automatic activation of certain features, remembering your preferences and allowing you to interact with our services more quickly and easily.

Cookies are also intended to collect information about your browsing activity on our websites and to provide you with personalised services and tailored advertisements.

Furthermore, cookies are employed to ensure that the advertising you see matches your interests and is personalised accordingly, as well as to gather statistical data on your use of our services. 

4.2 Categories of cookie issuers

Culturespaces cookies

These are cookies placed on your device by CULTURESPACES for the purpose of browsing our sites and for optimising and personalising the services we offer.

Third-party cookies

These are cookies placed by third-party companies (such as advertising networks or partners) to measure traffic on our sites or to identify your interests based on the products you browse or purchase, as well as to personalise the advertising that is sent to you on or outside our sites. CULTURESPACES has no control over cookies placed by advertising networks operating independently. 

We use certain Google services, in particular, to measure audience, assess advertising performance and personalise ads, subject to your consent where required. To learn more about how Google processes personal data, please visit: https://business.safety.google/privacy/

However, you may refuse these cookies through a cookie-management platform.

4.3 Accepting or declining cookies

You have several options for managing cookies: 

This Charter may be updated, in which case the date of the latest revision will be indicated at the bottom of the document. Your consent will always be required if any update to this Privacy Statement affects, in any way, the rights governing the use of your personal information compared with the provisions set out in this Charter at the time the information was originally collected.

4.4 Automatically collected data

We record usage data when you access our platform and services (or use them in any way). Each time you visit our platform, we may collect, in accordance with applicable legislation and, where required, with your consent, information about the devices you use to access our services and the networks through which you connect to them. This information may include your IP address, connection data, the type and version of the internet browser you use, the type and version of your browser plugins, your operating system and platform, as well as information about your browsing activity on our platform, including the pages you visit (URLs) and the content you access or view.

Last update: September 2026