Privacy policy

Data controller

The data controller is the website publisher, identified in the legal notice. For any question about your data, write to us by e-mail to [to be confirmed by Annabelle: e-mail address for data protection requests].

Data we collect

The website only collects the data strictly required, which you provide voluntarily:

• Consignment file: identity, contact details, contact preference and availability, organisation where relevant, photographs and description of the piece, maker, context (an estate in particular), how you heard about the firm and, if you state it, the name of the person who recommended you. These details are sent with your explicit consent.
• Newsletter: e-mail address, sent directly to Mailchimp, which manages the firm’s mailing list. [to be confirmed by Annabelle: fields collected and confirmation of subscription by e-mail, depending on Mailchimp settings]
• Comments: name and message, published after approval, and e-mail address, never published. An irreversible fingerprint of your IP address and e-mail address is used to limit abuse.

Purposes and legal bases

This data is used solely to answer your inquiries, review the files received and, where you have consented, send you the newsletter. It is never sold nor used for third-party marketing. Processing is based on your consent and on pre-contractual measures related to your request. To organise the firm’s work, a priority is suggested automatically for each file from the details sent: it is validated by a person and never decides on its own what happens next. Public comments allow discussion of our articles and sales: the e-mail address is used only to reply to their author and is never published. This processing relies on the firm’s legitimate interest in allowing these discussions and moderating them.

Retention periods

Files from the “Entrust” process are kept for 24 months after receipt, then deleted automatically, photographs included. A deletion only reaches backups when they expire, within 30 days at most.

Newsletter subscriptions run until you unsubscribe, using the link in every e-mail. Mailchimp then keeps your address, marked as unsubscribed, so that you are no longer written to: [to be confirmed by Annabelle: retention period after unsubscribing]. A comment stays online until it is removed; its author’s e-mail address, even if the comment was rejected, is kept for 3 years after the last contact, then erased at the next moderation session, and it is deleted when the comment is removed.

To limit abuse, the website does not store your IP address in clear in its database: only an irreversible fingerprint is kept, for a short time, then deleted. Providers’ technical logs are their own responsibility: [to be confirmed: whether they contain IP addresses and how long they are kept].

Recipients and processors

Your data is never sold or rented. It is processed only by the technical providers required to run the website: Cloudflare (website hosting, database, sign-in and file storage), Resend (sending e-mails), Mailchimp (newsletter), Backblaze B2 (storage of encrypted backups) and GitHub (running backups). [to be confirmed: data processing agreement in place with each provider, including Cloudflare]

Transfers outside the European Union

Cloudflare, a US company, keeps the database and files in the European Union. The website itself runs on its global network: a page may be prepared outside the Union, close to the visitor. These transfers are covered by standard contractual clauses and by the EU-US Data Privacy Framework. Mailchimp, a US company, hosts the newsletter list under the EU-US Data Privacy Framework, with standard contractual clauses as a fallback.

Resend keeps account data and sending metadata in the United States: [to be confirmed: applicable safeguards and sending region]. Backblaze stores encrypted backups in Amsterdam. GitHub runs the backups: [to be confirmed: region of the machines and applicable safeguards].

If you consign a piece with the firm

The firm processes your contact details, information on your lots (description, photographs, estimates, reserves, sale results) and your papers (identity document, bank details, company registration extract, signed consignment form) to perform the contract between you: tracking the consignment, offering the piece for sale, paying the sale proceeds, returning the piece. [to be confirmed by Annabelle: applicable legal obligations, to be checked with a lawyer]

This data is accessible to the firm’s team. It is passed to the auction houses concerned (table of lots, photographs and, when the firm decides to send them, the papers in the file) and to the specialists to whom a piece is handed (laboratory, stone remover, watchmaker). The technical providers and transfers described above also apply to this data.

Retention period: [to be confirmed by Annabelle: period after the end of the relationship, for each type of paper]. Your rights are exercised as set out below.

Your rights

Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your personal data.

To exercise these rights, send us your request by e-mail to [to be confirmed by Annabelle: e-mail address for data protection requests]. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).