1. General Information & Data Controller
Sortsyvaultsprout Cinématographique SAS (hereinafter "Sortsyvaultsprout", "we", "us", or "our"), with registered offices at 28 Boulevard des Capucines, 75009 Paris, France, registered under Company Registration No. RCS Paris B 918 421 884, acts as the Data Controller responsible for the processing of your personal data on sortsyvaultsprout.com.
We are dedicated to safeguarding your personal data and ensuring full compliance with the European Union General Data Protection Regulation (GDPR), the French Data Protection Act (Loi Informatique et Libertés), and standard international privacy frameworks.
2. Categories of Data We Collect
When you interact with our digital cinema archive, we collect the following categories of data:
- Technical & Browsing Telemetry: Anonymized IP addresses, browser types, screen resolutions, operating system versions, and WebGL rendering capabilities used to power our 3D cinema salon graphics.
- Archival Contact Submissions: First and last name, professional email address, subject of inquiry, and message content submitted through our online museum contact portal.
- Cookie & Preference Consent: Explicit user preferences recorded via local storage tokens indicating acceptance or rejection of functional and analytical cookies.
3. Legal Bases for Data Processing
Under Article 6 of the GDPR, our processing activities are lawful based on:
- Legitimate Interests (Art. 6(1)(f) GDPR): To ensure server security, prevent cyber threats, maintain the integrity of historical box office datasets, and optimize 3D spatial rendering performance.
- Consent (Art. 6(1)(a) GDPR): For non-essential analytics cookies and voluntary newsletter or contact form inquiries.
- Legal Obligations (Art. 6(1)(c) GDPR): To fulfill statutory accounting, corporate record-keeping, and legal compliance obligations in the French Republic.
4. Data Processors and Third Parties
We never monetize, rent, or sell your personal information. Data may be processed by authorized technical providers operating strictly under European Standard Contractual Clauses (SCCs), including cloud server providers, web font delivery networks, and security firewalls.
5. Data Retention Periods
Inquiries submitted via our contact forms are retained for a maximum duration of 24 months following the resolution of the communication. Server access logs are rotated and deleted after 90 days. Analytical session cookies expire automatically upon browser termination.
6. Your European Data Rights (GDPR / CNIL)
As a data subject, you hold the following rights under European law:
- The right to access your personal data (Article 15 GDPR).
- The right to rectification of inaccurate information (Article 16 GDPR).
- The right to erasure ("Right to be Forgotten", Article 17 GDPR).
- The right to restrict processing (Article 18 GDPR).
- The right to data portability (Article 20 GDPR).
- The right to object to processing (Article 21 GDPR).
To exercise any of these rights, please submit a written request to our Data Protection Officer at [email protected] or by postal mail to our Parisian archival headquarters. You also retain the right to lodge a formal complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at www.cnil.fr.