1. The Lyon Opera is commited to protecting your data

For many years, the Lyon Opera has processed, managed and stored your data in accordance with current legislation. As part of this approach, it has drawn up a Personal Data Protection Charter which is available to the public.

This charter, which concerns personal data held by the Lyon Opera, explains in a simple, clear and precise manner how the Lyon Opera processes that data. It helps you understand what information and personal data the Lyon Opera collects and how it is used to provide you with new services on a daily basis while respecting your rights. Whatever the sales or contact channel you use, the Lyon Opera is committed, in accordance with the European General Data Protection Regulation, to protecting your privacy by ensuring the personal data you provide remains confidential and secure.

The main principles of data protection are as follows:

Personal data is defined as any information relating to an identified or identifiable individual.

Your name, your email address, your location and username can all be considered personal data.

Transparency: the Lyon Opera provides all the necessary information on the purpose and recipients of your collected data and on how to exercise your rights;
Explicit and legitimate purposes for the use of data: the Lyon Opera only collects data necessary for the purposes declared in its charter;
Confidentiality, integrity and security: the Lyon Opera implements all reasonable technical and organisational measures to protect your personal data against disclosure, loss, alteration or access by unauthorised third parties. It does not distribute your data to third parties without your prior consent (except in the specific circumstances requiring it: see below);
Updating and storage: the Lyon Opera ensures that the data is accurate, appropriate (that is, that is does not include data unrelated to the service offered) and up-to-date. It only keeps your personal data for as long as is necessary for the purposes of processing or the service in question and for a given period, in compliance with the regulations;
The right to access, correct and delete your data: the Lyon Opera offers you the possibility to access, modify and correct your personal data directly via the personal spaces on its various sites. The Lyon Opera is also at your disposal to help you exercise your right to modify and delete your data under the terms set out below (see paragraph 4).

2. The Lyon Opera and your personal data

2.1 When do we collect your personal data?

Your personal data may be collected:

When you browse the Lyon Opera websites and online ticketing site;
When you create a personal account on the Opera's online ticketing service, at the box office or by telephone;
From online, email or telephone enquiries about events organised at or by the Lyon Opera, or about our corporate offers;
When you subscribe to our waiting lists;
From your commercial relationship with the Opera (order tracking, information about your purchases, etc.) and, more generally, your contacts with the Opera's sales department;
From your relationship with the Opera and, more generally, your contact with the services of the Lyon Opera, within the framework of service provision contracts or otherwise;
When you purchase tickets for shows and/or services online, at the box office or by telephone;
When you purchase services reserved for companies;
When you connect to your personal account via Facebook and through possible sharing of information about your Lyon Opera purchases on your wall;
When you subscribe to our various newsletters (Opéra de Lyon, Opéra Underground, Guichet n°8 and Carte Blanche) and/or information about our news/promotional offers;
When you subscribe to our season programme;
When you take part in competitions at the box office or online;
Through any contact via online forms with the various departments of the Lyon Opera.

2.2 What type of data is collected?

Declared personal data is what you provide as part of your relationship with the Lyon Opera's services or partner theatres.

The personal data necessary for audience member, partner or commercial relationships is indicated as "obligatory" by an asterisk on the online collection media and by the Lyon Opera's sales team, on the telephone and at the box office.

In order to benefit from the services of the Lyon Opera, it is necessary, except in special cases, to collect the following information: title, surname, first name, country, postal address, email address, and price charged.

In order to provide the best possible support, the Lyon Opera may also collect the following data:

Landline or mobile telephone number, date of birth, language;
Information relating to the amount and nature of your purchases (type of show, services - parking, dinner during the interval, visits, special seats, Opera programme, loyalty scheme), the frequency of these purchases and your visits to the Lyon Opera;
Subscriptions to one or more of the Opera's newsletters, promotional offers and information, and mailings of the season programme;
Information relating to browsing the Opera's websites (pages consulted, connection time, etc.) - see paragraph 3 on cookies;
Activity history (account creation date, modification date);
Activity on social networks (in case you share your purchases on your Facebook wall);
With your consent, data related to disability-related placement constraints.

Forms used to contact the various departments of the Opera include mandatory data for replies and a free text field. You may provide other personal data about yourself in your message or as an attachment. The provision of such personal data is voluntary on your part.

In providing this data, you agree to our processing of the information. Your contact details may be used to reply to your message. However, we will not pass on this data to other parties without your prior consent.

In accordance with the law, the Lyon Opera does not under any circumstances collect special categories of personal data revealing an individual’s racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, personal genetic data, biometric data, personal data concerning health, sexual activity or orientation.

These particular categories of personal data are never collected or processed by the Lyon Opera.

2.3 Why does the Opera collect your data and for what purposes?

The Lyon Opera is a major venue for the creation and dissemination of works in various artistic fields, particularly opera, dance and concerts. It is a major player in the cultural policies implemented in the region by various local authorities and the Ministry of Culture, and, therefore, naturally strives to introduce, support and promote this artistic programme to all audience members and citizens. The Lyon Opera is committed on a daily basis, through its sales and marketing and cultural development departments, to providing access for as many people as possible to the works on offer.

In this context, the personal data collected is used as follows:

A. Commercial relations:

The Lyon Opera is equipped with a ticketing and customer relations programme, Secutix 360°, which allows us to collect personal data from our audiences. The fields to be filled in (2.2) are limited to the data necessary for the audience member and partner relationship.

This data is used to:

Communicate with you about your orders, invoices, products, services and promotional offers;
Manage your loyalty programme (subscription, Carte Blanche);
Offer Lyon Opera services, process your purchases and orders;
Deliver products and services;
Inform you of schedule changes, cancellations, postponements of shows, etc.

B. Promotion of the shows and services:

As part of the promotion of its shows and services, the Lyon Opera may be required to :

Communicate about the programme and services offered;
Propose additional or promotional services and/or offers. These proposals may be based on booking and attendance history; if necessary, they may be adapted and personalised, particularly when the Lyon Opera's programme or services change;
Carry out advertising campaigns on the web (display or adwords) targeted at your centres of interest.

C. Analysis of the data collected in order to improve services to the public:

The data collected is used to monitor and analyse the evolution and practices of the Lyon Opera's audiences. This data is used to enrich statistics and to develop steering, measurement and reporting tools.

Some of this analysis and these tools may be carried out in partnership with external service providers. In this case, the data transmitted and studied are made anonymous and the external service providers do not keep them.

2.4 Who sees your personal data?

The Lyon Opera ensures that only authorised personnel have access to your personal data, and that the data is strictly limited to that necessary for customer relations.

The Lyon Opera's service providers may also receive personal data that is necessary for the services they have been entrusted with. For example: your first and last name when you are welcomed in a partner theatre or by Lyon Opéra Restauration for dinner during the interval. Once these services have been provided, Lyon Opera's partners do not keep your data.

Lyon Opera staff do not have access to unencrypted payment card data. However, following a purchase, with your consent, it may be stored in a secure, encrypted manner for subsequent purchases. By default, this storage feature is deactivated.

2.5 How your personal data is stored: privacy and security

Respecting your right to keep personal data protected, secure and confidential is a priority for the Lyon Opera.

The data is stored by the Lyon Opera's partner (Secutix - ticketing and customer relations software), in compliance with French legislation and European regulations. It complies with ISO/IEC 27001:2013 and PCI DSS standards.

All operations with a third-party recipient of your data are supervised in order to ensure that your data is protected and that your rights are respected.

In the event of a data transfer to a country outside the European Union, technical and organisational rules have been put in place to ensure the protection and security of this information (duplicate data for back-up, secure servers, encryption, manual change logs, etc.).

As part of our ongoing concern about data security and protection, we would encourage you to be careful to prevent any unauthorised access to your personal data and to protect your terminals (computer, telephone/mobile terminal, tablet) against any unwanted or even malicious access, by using a strong password, which we recommend you change regularly. If you share a terminal, we recommend that you log out after each use.

3. What are cookies and how to manage them?

3.1 What is a cookie?

A cookie is a small text file that is transferred to your computer, mobile phone/terminal or tablet through your web browser. Cookies are stored on the hard drive of your computer, mobile phone or tablet when you visit our website. Cookies enable the Lyon Opera to recognise you on subsequent visits to the site.

Cookies are either temporary (session cookies) or persistent. Session cookies are only active for the duration of your visit and are deleted when you close the browser. Persistent cookies remain on your terminal's hard drive when you leave the site and remain there until you manually delete them or the browser purges them after a certain period of time.

3.2 Use of cookies

Lyon Opera uses performance analysis cookies to monitor the performance of its websites, for example to determine the number of times a page is consulted and the number of unique users to its website. Web analytics services may be developed and operated by third parties. The information provided by these cookies is used to analyse patterns of user behaviour and optimise the user experience or to identify areas of the website that may require maintenance or improvement. The information is anonymous and is used for statistical purposes only.

The Lyon Opera uses third-party solutions (in particular, Google Analytics) to collect information (browsing, authentication and location data) about visitors to the website, thanks to these cookies. This information may be used by the providers of these solutions.

The Lyon Opera uses cookies and similar technologies, such as web beacons, pixels and mobile equipment identifiers. It may also authorise its commercial partners to use these tracking technologies on the Lyon Opera website, or subscribe to third-party services to track your behaviour on its behalf.

Some pages of the site provide our content from social media platforms in an embedded format, such as videos or links to external platforms like Deezer. Cookies from social media platforms, such as YouTube, are used on some of our web pages to enable us to provide these services.

If you have any questions about the use of these third-party cookies, we recommend that you read the cookie policies provided on their respective websites.

3.3 How long do you keep cookies?

We use cookies on the website which may be stored for different periods of time, depending on the type of cookie:

Session cookies: these are deleted when you close your browser;
Persistent cookies: these remain on your device for a predefined period of time after which they expire.

3.4 How to manage and disable cookies

Most browsers are set to accept cookies used on our websites. However, you can adjust these settings to disable cookies. The following links will explain how to adjust your browser's cookie settings:

When you disable cookies, some graphics may not display correctly and you may not be able to use certain applications.

4. How to exercise your right to access, modify and delete your personal data?

5. Data Protection Officer

6. Exercising your rights

6.1 How to contact us to exercise your rights?
To exercise these rights or for any questions regarding the processing of your data under this scheme, you can contact us at the following email address: dpo@opera-lyon.com

or by post at Data Protection - Operations Department
Opéra de Lyon
1 place de la Comédie
69 001 Lyon

6.2 What rights do you have?

You have the following rights::

A right to information (articles 13 and 14 of the GDPR): you can exercise your right to information to find out what personal data is processed by the Opera, for whom this information is intended, what the purpose of processing it is, how long your data is kept and what your rights are.
A right of access (article 15 of the GDPR): you can exercise your right of access to know the personal data concerning you. In this case, you may be asked to provide proof of your identity in order to verify its accuracy.
A right to rectification (article 16 of the GDPR): if the personal data held is inaccurate, you may request that your information be updated..
A right to erasure or "right to be forgotten" (article 17 of the GDPR): you can request the deletion of your personal data.
A right to restriction of processing (article 18 of the GDPR): you have the right to request a restriction of the processing of your personal data in accordance with the assumptions set out in Article 18 of the GDPR and to provide for instructions concerning their fate in the event of death.
A right to data portability (article 20 of the GDPR): you can ask the Lyon Opera to give your data to you so that it can be transmitted to a third party.
A right to object (article 21 of the GDPR): you may object to your data being processed in accordance with the hypotheses set out in article 21 of the GPDR.

6.3 How to make a complaint to the CNIL?
You have the right to make a complaint to France’s National Commission for Information Technology and Civil Liberties (CNIL), in particular • If you believe, after having contacted the data protection department, that your rights regarding your data are not being respected. • In the event of a violation of rights noted in the processing of your personal data

Posted May 3, 2022