What does the declaration cover?

The purpose of this data protection declaration is to inform you about the processing of your personal data in connection with the use of this website and our online services. In particular, we inform you about the categories of personal data we process, the purpose of processing, any transfers to third parties, and how you can exercise your rights.

Paléo Arts et Spectacles (hereinafter “Paléo”) pays particular attention to the protection of your privacy and your personal data. We are committed to the transparent processing of your personal data in compliance with the legal requirements on data protection, in particular the Swiss Federal Data Protection Act (DPA).

Who processes your personal data?

The data controller is:

Paléo Arts & Spectacles
Rte de St-Cergue 312
CH - 1260 NYON

What personal data do we collect and why?

1.1 Use of the website

When you use our website purely for information purposes, i.e. if you do not register or transmit information in any other way, information specific to your computer terminals is collected and processed. This includes the IP address, the date and time of consultation, the name of the browser software, its language and version, the operating system, the language preference, and the URLs consulted.

This information is automatically transmitted by your browser to our servers or is collected using cookies. You can obtain more information by consulting the “Declaration relating to cookies”.

We process this information on the basis of our legitimate interests in order to ensure the smooth operation and improvement of our website.

1.2 Contact form

When you use the website’s contact form, we process the data you choose to send us (content of your request), the sector concerned, your e-mail address, and information specific to the messages, in particular the date and time of receipt.

We process this information on the basis of your consent and our legitimate interests so that we can process your request, follow up on it, and, where required, keep a record of the operations carried out.

​​​​​​​1.3 User account

When you create an account on our website, we collect information that enables us to identify you (surname, first name, contact details, etc.) and to manage and ensure a secure connection to your personal space (user names, passwords). This information is collected on the basis of your consent. You may withdraw your consent at any time or modify your information via the settings in your personal space. Deleting your user account automatically deletes all related information.

We may also collect data relating to your interaction with our site, such as your preferences and usage behaviour, in order to ensure the security and improvement of our services on the basis of our legitimate interests.

​​​​​​​1.4 Purchase of tickets or items in our online shop

When you purchase a ticket or an item from our online shop, we collect and process the data necessary for us to manage the sale and delivery of the items ordered, any refunds, and to ensure the traceability and tracking of these orders. In particular, this includes your identity (first and last name), your contact details, your contact information, and your payment information.

The processing of this information is necessary for the performance of pre-contractual measures, the performance of sales contracts, and any assistance measures.

Some of the data is also processed in order to comply with legal obligations (in particular accounting and financial management) and to meet our legitimate interests in improving and optimising our services.

​​​​​​​1.5 Official ticket resale platform

When you use the official Paléo resale platform, the system is designed in such a way that there is no link between the seller and the buyer. Consequently, only the information required for the sale, cancellation of the resold ticket, reimbursement of the seller, and payment and delivery of a new ticket to the buyer is processed.

The processing of this information is based on the fulfilment of our contractual obligations in the context of ticket resale management and our legitimate interests in managing and improving our services, in particular the official resale platform.

1.6 Possession of a ticket

In accordance with our ticket acquisition and transfer policy, the identity of the person holding the ticket at the event must be known, whether or not it is the original purchaser. In this context, we collect information about the ticket holder and/or the buyer, in particular your identity (first and last name), date of birth, origin, and e-mail addresses. This information is necessary for us to fulfil our contractual obligations, to carry out and ensure the traceability of transactions, to contact you in the event of modifications or additional information concerning the event, and to combat fraud.

This information is also useful to us as part of our legitimate interests in managing and improving your experience of the event as far as possible, as well as ensuring its security.

When tickets are used and/or transferred via the Paléo Tickets app, the “Declaration of confidentiality relating to the Paléo Tickets app” is authoritative with regard to the processing of personal data carried out in the context of the use of this application.

1.7 Paléo mobile apps

The Paléo app reproduces the processing operations described in this declaration and the “Declaration relating to cookies” in such a way that they are applicable. The Paleo app offers additional functionalities based on push notification or geolocation services for your device. These functionalities are deactivated by default and require activation on the basis of your consent, which you give when you select the proposed settings via pop-up windows or by accessing the settings on your device. The data processed in connection with push notification services enables you to receive event-specific information and, as part of the geolocation services, to find your way around the festival perimeter. You can deactivate these functions at any time by changing the settings on your device.

As far as the Paléo Tickets app is concerned, the “Declaration of confidentiality relating to the Paléo Tickets app” is authoritative.

1.8 Newsletter

If you wish to receive the newsletters offered on the website, we need your e-mail address as well as information enabling us to check that you are indeed the holder of the e-mail address collected (confirmation e-mail) and that you agree to receive the newsletters.

The processing of data collected from the newsletter registration form is based exclusively on your consent. You may withdraw or modify your consent at any time, for example via the “unsubscribe” link in the newsletter. You will then be removed from the mailing list so that you will no longer receive communications from us for advertising purposes.

Data stored and used for other purposes will not be affected.

1.9 Competitions

We frequently organise competitions and collect data on the basis of your consent. The type of data collected and the purposes for which it is used depend on the competition. The conditions specific to the competition therefore apply.

1.10 Cookies and third-party extensions (plugins)

Our website uses cookies on its web pages. A cookie is a text file that is stored on your electronic device (e.g. your computer, smartphone, or tablet) when you visit or use our web pages.

We also use third-party extensions (plugins) which provide additional functionality on our website to ensure better security or attractive services on our site.

You can find out more about the cookies and plugins used and the data processing involved by reading our “Declaration relating to cookies”.

The resulting data processing is justified either through your consent (which you manage, for example, via the cookie settings banner) and our legitimate interests in ensuring the security, smooth operation, and continuous improvement of our website and services.

What are the legal bases or justifications used to process your personal data?

The legal grounds for processing your personal data are set out in the previous sections for each type of processing described in this declaration.

The processing that we carry out is mainly justified by:

• the performance of our pre-contractual and contractual obligations, in particular with regard to data processed in connection with the sale or transfer of tickets and the sale of items on our online shop;
• our legitimate interests where these are overriding, in particular for processing undertaken for marketing and promotional purposes and for the proper functioning and improvement of our services;
• a legal obligation or to comply with an official request ordered by an authority;
• your consent, for example in the context of managing your personal space, subscribing to our newsletter, or installing cookies that require it (cookies that are not strictly necessary).

Can I withdraw my consent?

Where your consent is required, you will be informed of this and the conditions that apply.

In these situations, you are free to withdraw your consent at any time. We will then cease processing your personal data, unless it can be retained for another legitimate purpose based on a legal basis other than your consent.

If the IT tools available to you do not allow you to withdraw your consent (for example by requesting deletion from your personal space via the appropriate settings), you can contact us via the addresses given below (Section: “What are your rights with regard to the processing of personal data”).

To whom may your personal data be communicated?

Your personal data is intended for Paléo’s authorised personnel, its sub-contractors, and its partners or service providers when this is necessary for the proper management of the event and for the other purposes mentioned above.

Our service providers and partners are obliged by law, or by contractual obligations, to comply with the legal provisions relating to data protection.

More rarely, your personal data may be transmitted to the competent administrative or judicial authorities if they make an official request or in order to fulfil our legal obligations.

The use of certain cookies and plugins are made available by third-party service providers, which means that certain information, in particular that provided by your browser, is transmitted to the servers of these service providers. For further information, please consult our “Declaration relating to cookies”.

Is your personal data transferred abroad?

We do our utmost to ensure that your personal data is processed in Switzerland.

However, we use the services of service providers and partners who might transfer data abroad. If it is not possible for us to continue processing data in Switzerland, we give preference to countries in the European Economic Area and countries offering an adequate level of protection.

Some of the tools used on our website (plugins) are provided by third-party service providers. In principle, information on the use of a web page—which is collected for this purpose through the use of cookies—is transmitted to the servers of the third-party provider. Depending on the third-party service provider concerned, these servers may be located abroad. For further information, please consult our “Declaration relating to cookies”.

How long are your personal details kept?

We process and store your personal data for as long as is necessary to comply with our contractual and legal obligations, to achieve the purposes for which the data is processed, or for as long as your consent is required. As soon as your personal data is no longer required for the aforementioned purposes, it will be deleted, as far as possible, or made anonymous.

Criteria influencing the retention period include the applicable legal framework, the need for us to have access to this information, the fulfilment of the initial or extended purposes, the safeguarding of legitimate interests, and imperatives arising from internal organisational or technical processes.

How do we protect your personal data?

We take the necessary technical, organisational, and legal measures to safeguard the security and confidentiality of your personal data. These measures include reducing the risks to our websites and applications, protecting our IT infrastructure, and carefully selecting our service providers.

For security reasons, or to protect the transmission of confidential content such as orders or requests that you send us as the operator of these pages, this site uses SSL/TLS encrypted communication channels. You can recognise an encrypted connection by the fact that the browser’s address line displays “https://” instead of “http://” and by the padlock icon that appears in the browser’s address bar.

When SSL/TLS encryption is activated, the data you send us cannot be read by a third party.

What are your rights with regard to the processing of personal data?

With regard to your personal data, you have the right to:

• ask us for information about your personal data that we process and for a copy of that data;
• ask us to correct or complete incorrect or incomplete data;
• ask us to delete your data, unless a legal basis or our legitimate interest obliges or authorises us to retain your data;
• ask us to restrict the processing of your data, if permitted by law;
• inform us at any time that you revoke your consent to the processing of data for which your consent was requested;
• notify us at any time that you object to the processing of your personal data for promotional and advertising purposes;
• notify us at any time of your opposition to any further processing, unless, for example, a legal basis or our legitimate interest requires or authorises us to continue;
• ask us for your data in a portable format when your data is processed automatically, on the basis of your consent or a contract;
• ask us to put forward your point of view in the event of an automated individual decision and to have the decision reviewed by a human being;
• contact a data protection supervisory authority (in this case the FDPIC) if you wish to contest the way in which we process your data or if you wish to exercise your rights, or to lodge a complaint.

 

We will inform you of any conditions or restrictions that may apply to the exercise of your rights.

You may exercise your rights by contacting us directly at the following e-mail address: protectiondesdonnees@paleo.ch or at the postal address mentioned above (section: “Who processes your personal data?”).

We reserve the right to request additional information to identify you, in particular a copy of a valid official ID. To make it easier to process your request, we would also ask you to state precisely which right(s) you wish to assert, and to what extent.

When can the declaration be updated?

This declaration may be updated at any time. The version published here on our website is the most recent and is binding. It replaces all previous data protection declarations or declarations that conflict with this one.