Personal data
Culture For Causes Network publishes three services — this site, Museum Voices and Enquêtes — and manages a network of museum professionals. This page explains what data we process, why, with whom it is shared, how long it is retained, and how to regain control at any time.
Last update: September 14, 2026
Brouillon — ne pas publier en l'état. Les passages encadrés en orange attendent une information ou une décision. La liste complète figure dans CHECKPOINT_C4C.md, point E6.
In brief. The institutional site does not ask you for any data. Enquêtes is reserved for logged-in users with a Museum Voices account and records no additional data. On Museum Voices, you only appear in the directory if you have explicitly accepted it, your email address is never shown to other members without your consent, given request by request, and you can at any time download all your data or delete your account from your personal space.
Culture For Causes Network, a nonprofit association under the French Law of 1901 registered under number W751238407, with its headquarters located at 39 quai Gallieni, 94500 Champigny-sur-Marne, France — for all three services as well as for contacts within its network.
For any questions regarding your personal data, or to exercise your rights: contact@museum-week.org.
The association has not appointed a data protection officer: its main activity does not involve large-scale tracking or processing of sensitive data as defined in Article 9 of the GDPR. Your requests are handled directly at the address above.
Each department has its own section below; a final section concerns people we know outside these departments. A common rule: what you do not fill in is not processed, and almost all fields are optional.
This site contains no forms and does not create any accounts. Apart from the audience measurement described below, two external services receive your IP address when you visit: Google, which provides fonts, and YouTube, only if you play one of the presented videos — they load only at that moment.
| What we cover | Why | Legal basis |
|---|---|---|
| Identity and professional profile — name, email, institution, position, country, photo, public links | Create and manage your account, authenticate yourself, enable you to use the service | Execution of the service you requested (art. 6.1.b) |
| Publication in the members directory | Make yourself visible and reachable by your peers | Your consent (art. 6.1.a) — dedicated box, revocable at any time |
| Expertise, offers, needs, collaboration intentions | Calculate suggestions of complementarity between members and explain why a profile is proposed to you | Service execution (art. 6.1.b) |
| Interests offered at the launch of the service | Making networking useful from day one: interests were suggested to each member based on the professional information in their profile — institution, country, museum type and size, position, ICOM domains —, never their name or email address. Operation performed once, with the help of OpenAI (see below). You can modify or delete them at any time | Legitimate interest of the association to make the connection useful from the service launch (art. 6.1.f) |
| Requests for networking | Forward your request to the targeted member, then — if they accept — exchange your contact details | Your consent and the recipient’s (art. 6.1.a) — double consent required |
| Tracked funding, calls for partners, comments, consortium plans | Allowing you to track opportunities, publish a need and prepare a consortium | Service execution (art. 6.1.b). Publishing a call or comment also requires being in the directory, therefore having consented to it |
| Name displayed on the supporters' wall | Publicly thank the people who support the project | Your consent (art. 6.1.a) — donation remains possible without appearing |
| Donations and subscriptions — amount, date, transaction reference | Process payment, keep the association's accounts, issue receipts | Contract execution (art. 6.1.b) and legal accounting obligation (art. 6.1.c) |
| Service emails — connection requests, reminders, responses | Make the matching work; without email, there is no service | Service execution (art. 6.1.b) |
| Feedback and reports you send us, and the email address you choose to include | Fix issues and improve the service. The form is protected against bots by a small calculation performed by your browser (ALTCHA, hosted on our servers): no third-party service, no cookie | Legitimate interest of the association to improve its tool (art. 6.1.f) |
| Technical journals and IP address | Secure the service, prevent abuse and automated registrations | Legitimate interest in service security (art. 6.1.f) |
| Date of your last login | Delete accounts inactive for three years (see below) and, for the network team, identify which members to follow up with. We record a date per member, replaced at each visit: no history of your visits, no pages viewed, no duration. This date is accessible by name to the network team, on an internal password-protected tool; it is not visible to any other member, is not used for ranking or scoring, and no automated decision relies on it | Legitimate interest of the association to know the use of its service and to manage the network (art. 6.1.f) |
The member map displays a base map provided by CARTO: its display transmits your IP address to this provider.
Surveys publish the results of surveys conducted with museum professionals. Its pages are reserved for people logged in with a Museum Voices account: login is via Wix, and a session cookie, valid for 24 hours, keeps you logged in. Surveys do not create a separate account and do not record anything else about you.
Survey responses were collected via a form on the museum-week.org website, provided by Wix.
À compléter : information présentée aux répondants et base légale de la collecte (texte du formulaire Wix, que Benjamin fournira).
The results are published as charts and tables built from totals — any cell counting fewer than five respondents is hidden — and in downloadable files where each row corresponds to a respondent. These files contain no name, email address, institution, or response date; position, museum type, and location appear only as broad categories, and any information that could reduce a respondent to fewer than five possible persons is masked.
We removed Google Analytics from Museum Voices in July 2026. This tool did not fall under the CNIL exemption for audience measurement, and we did not want to impose a consent banner on you or share your browsing data with a third party.
The institutional site and Museum Voices instead use an audience measurement hosted on our own servers, configured to remain exempt from consent: no cookies, no IP addresses stored in clear text, no cross-site tracking, and nothing transmitted to third parties. We only derive aggregated statistics — pages viewed, origin, country, device type — that do not allow identification. These statistics are retained for a maximum of 25 months. Enquêtes currently has no audience measurement.
No cookies are placed, so there is nothing to refuse on your device. However, you can object to this measure at any time by writing to us at contact@museum-week.org.
Our services are not the only places where we process data. The people below have the same rights as our members and exercise them in the same way.
| Who | What we process, and why | Legal basis |
|---|---|---|
| Network contacts — people registered for MuseumWeek, who responded to one of our surveys or subscribed to MuseumWeek Magazine | Their professional contact details, collected from the forms on the museum-week.org and Substack sites, are gathered in our relationship tracking tool (Folk), to maintain our exchanges with professionals and institutions in the network | À compléter selon le texte d'information des formulaires Wix (consentement ou intérêt légitime) |
| Subscribers to MuseumWeek Magazine | Subscription is done directly on Substack, which sends the newsletter on our behalf; each issue includes an unsubscribe link | Your consent (art. 6.1.a), given by subscribing |
| Artists presented | Name, biography, and images of the works of the artists from the exhibition “Reconciliation with the Living,” published on this site to promote the exhibition | Legitimate interest of the association to present the exhibition (art. 6.1.f) |
| Members of the association's team and governing bodies | Name, position and, if applicable, photo, published on the Organization page to present who leads the association | Legitimate interest of the association to present its organization (art. 6.1.f) |
If you have agreed to appear in the directory, other connected members see your professional profile: name, institution, position, country, photo, expertise and public links. Your email address is never part of this. It is only shared with a specific person, and only if you have accepted their connection request.
If you have not consented to the directory, you do not appear anywhere: neither in lists, suggestions, nor in other members’ search results — and no one can send you a connection request.
We use the service providers below, who act on our instructions and do not use your data for their own purposes. We do not sell any data, nor do we transfer it to any broker or advertiser. Not all concern our services in the same way — the column "Role" specifies this.
| Service provider | Role | Data hosting |
|---|---|---|
| Scaleway | Hosting of the institutional website, Museum Voices, Enquêtes and their databases | France (European Union) |
| Wix | Museum Voices and Enquêtes — registration, contact sheets, member account management and login; forms on the museum-week.org site (surveys, MuseumWeek registrations) | Outside the EU — contractually regulated |
| Routing of service emails (Gmail); fonts of the institutional site and Museum Voices, whose display transmits your IP address to Google; YouTube videos, loaded only if you start playing them | Outside the EU — contractually framed for messaging | |
| Stripe | Museum Voices — subscription payments | EU and non-EU — contractually regulated |
| HelloAsso | Museum Voices — fundraising for the association | France (European Union) |
| CARTO | Museum Voices — member map background, displaying your IP address | Global distribution network, including outside the EU |
| Substack | Sending of the MuseumWeek Magazine newsletter; registration is done directly on Substack | Outside the EU — contractually regulated |
| Folk | Tracking our relationships with professionals and institutions in the network | European Union |
| OpenAI | Museum Voices — automated analysis of public funding announcements; at service launch, suggestion of interests based on members’ professional information (institution, country, museum type and size, position, ICOM fields), without name or email address | Outside the EU — contractually regulated |
| CrowdSec | Protection of our servers against automated attacks: only IP addresses responsible for malicious behavior are shared | France (European Union) |
Some of these providers process data outside the European Union. These transfers are governed by the safeguards provided in Chapter V of the GDPR — standard contractual clauses of the European Commission or adequacy decision, depending on the provider and the country concerned.
| Data | Retention period |
|---|---|
| Museum Voices account and profile | As long as the account exists. After 3 years without login, the account is deleted or anonymized — an email will notify you 30 days before |
| Presence in the directory | As long as your consent is active. Withdrawal takes effect immediately |
| Connection request without response | 90 days, then the request expires: the acceptance link becomes inactive and the addresses of both parties are deleted |
| Networking accepted | As long as both accounts exist. Deleting one of the two erases its data from the line |
| Calls, comments, tracked funding, consortium plans | As long as your account exists; deleted with it |
| Feedback and reports | 24 months |
| Technical and security logs | 12 months |
| Technical cache of profiles | 15 minutes, extended to 24 hours if our provider is unavailable |
| Login session for Enquêtes | 24 hours |
| Network contacts (Folk) | Durée à définir |
| Subscription to MuseumWeek Magazine | Until your unsubscription |
| Artist sheets, Organization page | As long as the page is published |
| Accounting documents (donations, subscriptions) | 10 years — legal obligation, independent of your account deletion |
| Audience measurement (institutional site, Museum Voices) | Maximum 25 months |
You have the rights of access, rectification, erasure, restriction, objection, and portability as provided by the GDPR, as well as the right to withdraw your consent at any time — without affecting what was done before the withdrawal.
On Museum Voices, two of these rights are exercised directly, without writing to us or waiting:
The emails we send also include an unsubscribe link that requires no login. For any other rights, or for any questions regarding the institutional site, Surveys, contacts in our network, or the people featured on this site, write to contact@museum-week.org: we respond within one month.
If you believe, after contacting us, that your rights are not respected, you can file a complaint with the National Commission on Informatics and Liberty (CNIL), 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, or at cnil.fr.
Exchanges with our three services are encrypted. Access to member data is controlled server-side, not client-side: data you are not authorized to see is not sent to you, rather than being sent and then masked. Email addresses of Museum Voices members are never transmitted to other members’ browsers, except when a connection is accepted.
Our servers automatically detect and block malicious behavior — intrusion attempts, bots — and share only the related IP addresses with the CrowdSec community.
This policy may evolve with our services. In case of substantial change — new purpose, new recipient, extended duration — we will inform you before it takes effect. The date of last update appears at the top of the page.
Legal Notice · Culture For Causes Network · Museum Voices · Surveys