1. Who we are
The Site https://piano4etoiles.fr/ (“Site”) is operated by Association Ste des Grands Interprètes, 69 Bis Boulevard de Courcelles, 75008 Paris, France (SIRET 428 438 188 00024).
email: ass.grandinterpretes@free.fr.
We act as the data controller under the EU General Data Protection Regulation (“GDPR”) and French Data-Protection Act.
Heading 3
2. What data we collect and why
2.1 Identification data – your name and email address collected via Flodesk signup forms.
Purpose: sending newsletters and concert information.
Legal basis: your explicit consent (GDPR Art 6-1-a).
2.2 Technical and usage data – IP address, browser type, pages visited, clicks, scroll depth collected through Google Analytics 4.
Purpose: site security, performance analytics and improvement.
Legal basis: our legitimate interest in running and optimising the Site (Art 6-1-f).
2.3 Interaction data – session recordings and heat-maps generated by Hotjar.
Purpose: understanding navigation issues and enhancing user experience.
Legal basis: legitimate interest.
2.4 Transaction-related data – when you click “Buy Tickets” you are redirected to a partner ticketing platform; any purchase details are processed solely by that partner, not by us.
Purpose: enabling ticket sales.
Legal basis: not applicable to us because we do not process this data.
3. Cookies & similar technologies
When you first visit the Site a banner lets you accept, refuse or customise cookies. We use:
- Essential cookies needed for core functionality;
- Analytics cookies (Google Analytics 4) to measure traffic;
- Experience cookies (Hotjar) for anonymous UX insights.
You can change your choice at any time via “Manage Consent” in the footer or by clearing browser cookies.
4. Email communications
We use Flodesk to manage the mailing list.
You will receive concert announcements and occasional news.
Every email includes an Unsubscribe link. Opt-out takes immediate effect.
5. Sharing and international transfers
We never sell or rent personal data. We share it only with trusted service providers:
- Google Ireland Ltd. / Google LLC (USA) – analytics; protected by EU Standard Contractual Clauses (SCCs) and IP-anonymisation.
- Hotjar Ltd. (Malta) – UX analytics; data stored in the EU with SCCs.
- Flodesk Inc. (USA) – email delivery; SCCs plus additional technical safeguards.
- Ticketing partners – independent controllers; you leave our Site before any purchase data is collected.
6. Data retention
Newsletter subscriber details are kept until you unsubscribe, then two additional years on a suppression list.
Google Analytics data is deleted automatically after 14 months; Hotjar data after 365 days.
Server security logs are stored for 12 months.
7. Your rights
Under GDPR you can: access, rectify, erase or port your data; restrict or object to processing; withdraw consent at any time; and lodge a complaint with the CNIL (www.cnil.fr).
Write to us by post or email (see Section 1). We will answer within one month (extendable to two in complex cases).
8. Security measures
We protect your data through HTTPS encryption, strong access controls, least-privilege principles, regular audits of our Webflow infrastructure and contractual security obligations with processors.
9. Children
The Site is not intended for children under 18. If we learn we have collected data from a minor without parental consent, we will delete it promptly.
10. Third-party websites
Links to ticketing sites are provided for your convenience. Once you leave our domain, their own privacy notices apply and we have no control over their practices.
11. Changes to this policy
We may update this notice to reflect legal or operational changes. A new version will be posted with a revised “Last updated” date, and significant changes will be highlighted on the Site or via email if you are subscribed.
12. Contacts
Questions about privacy?
Email: ass.grandinterpretes@free.fr
Post: Association Ste des Grands Interprètes – Attn: Data Protection Officer, 69 Bis Boulevard de Courcelles, 75008 Paris, France.