MuseumVoices
proposed by
MuseumWeek
MuseumWeek
MuseumWeek
Personal data
Museum Voices connects cultural professionals. This involves processing data concerning you. This page explains which data, why, with whom it is shared, how long it is retained, and how to regain control at any time.
Last update: July 22, 2026
In brief. You only appear in the directory if you have explicitly accepted it. Your email address is never shown to other members without your consent, given on a case-by-case basis. You can at any time download all your data or delete your account from your personal space, with one click and without needing to contact us.
Culture For Causes Network, a non-profit association under the 1901 law registered under no. W751238407, with its registered office at 39 quai Gallieni, 94500 Champigny-sur-Marne, France.
For any questions regarding your personal data, or to exercise your rights: contact@museum-week.org.
The association has not appointed a data protection officer: its main activity does not involve large-scale tracking or processing of sensitive data as defined in Article 9 of the GDPR. Your requests are handled directly at the address above.
Each processing serves a specific purpose and is based on a distinct legal basis. What you do not fill in is not processed: almost all fields are optional.
| What we cover | Why | Legal basis |
|---|---|---|
| Identity and professional profile — name, email, institution, position, country, photo, public links | Create and manage your account, authenticate yourself, enable you to use the service | Execution of the service you requested (art. 6.1.b) |
| Publication in the members directory | Make yourself visible and reachable by your peers | Your consent (art. 6.1.a) — dedicated box, revocable at any time |
| Expertise, offers, needs, collaboration intentions | Calculate suggestions of complementarity between members and explain why a profile is proposed to you | Service execution (art. 6.1.b) |
| Requests for networking | Forward your request to the targeted member, then — if they accept — exchange your contact details | Your consent and the recipient’s (art. 6.1.a) — double consent required |
| Tracked funding, calls for partners, comments, consortium plans | Allowing you to track opportunities, publish a need and prepare a consortium | Service execution (art. 6.1.b). Publishing a call or comment also requires being in the directory, therefore having consented to it |
| Name displayed on the supporters' wall | Publicly thank the people who support the project | Your consent (art. 6.1.a) — donation remains possible without appearing |
| Donations and subscriptions — amount, date, transaction reference | Process payment, keep the association's accounts, issue receipts | Contract execution (art. 6.1.b) and legal accounting obligation (art. 6.1.c) |
| Service emails — connection requests, reminders, responses | Make the matching work; without email, there is no service | Service execution (art. 6.1.b) |
| Newsletter | Keep you informed of network news | Your consent (art. 6.1.a) — unsubscribe option in every message |
| Feedback and reports you send us | Fix issues and improve the service | Legitimate interest of the association to improve its tool (art. 6.1.f) |
| Technical logs, IP address, anti-bot protection | Secure the service, prevent abuse and automated registrations | Legitimate interest in service security (art. 6.1.f) |
| Date de votre dernière connexion | Supprimer les comptes laissés inactifs trois ans (voir plus bas) et, pour l'équipe du réseau, savoir quels membres relancer. Nous enregistrons une date par membre, remplacée à chaque venue : ni historique de vos passages, ni pages consultées, ni durée. Cette date est consultable nominativement par l'équipe du réseau, sur un outil interne protégé par mot de passe ; elle n'est visible d'aucun autre membre, ne sert à aucun classement ni notation, et aucune décision automatisée ne s'y appuie | Intérêt légitime de l'association à connaître l'usage de son service et à en animer le réseau (art. 6.1.f) |
We removed Google Analytics from this site in July 2026. This tool did not fall under the CNIL exemption for audience measurement, and we did not want to impose a consent banner on you or transmit your browsing data to a third party.
It is replaced by an audience measurement hosted on our own servers, configured to remain exempt from consent: no cookies, no IP address stored in clear text, no cross-site tracking, and nothing transmitted to third parties. We only derive aggregated statistics — pages viewed, origin, country, device type — which do not allow identification. These statistics are kept for a maximum of 25 months.
No cookies are placed, so there is nothing to refuse on your device. However, you can object to this measure at any time by writing to us at contact@museum-week.org.
If you have agreed to appear in the directory, other connected members see your professional profile: name, institution, position, country, photo, expertise and public links. Your email address is never part of this. It is only shared with a specific person, and only if you have accepted their connection request.
If you have not consented to the directory, you do not appear anywhere: neither in lists, suggestions, nor in other members’ search results — and no one can send you a connection request.
We use the providers below, who act on our instructions and do not use your data for their own purposes. We do not sell any data, nor do we share it with brokers or advertisers.
| Service provider | Role | Data hosting |
|---|---|---|
| Scaleway | Hosting of the service and databases | France (European Union) |
| Wix | Registration form, contact sheets and member account management | Outside the EU — contractually regulated |
| Routing of service emails (Gmail) and provision of site fonts, whose display transmits your IP address to Google | Outside the EU — contractually regulated | |
| Stripe | Subscription payments | EU and non-EU — contractually regulated |
| HelloAsso | Collecting donations for the association | France (European Union) |
| Cloudflare | Anti-bot protection for forms and distribution of technical resources | Outside the EU — contractually regulated |
| Substack | Newsletter sending | Outside the EU — contractually regulated |
| Folk | Tracking relationships with institutions and network partners | European Union |
| OpenAI | Automated analysis of public funding announcements and document assistant. No member profile is transmitted to it; only the public text of announcements and, if applicable, the question you ask the assistant | Outside the EU — contractually regulated |
Some of these providers process data outside the European Union. These transfers are governed by the safeguards provided in Chapter V of the GDPR — standard contractual clauses of the European Commission or adequacy decision, depending on the provider and the country concerned.
| Data | Retention period |
|---|---|
| Account and member profile | As long as the account exists. After 3 years without login, the account is deleted or anonymized — an email will notify you 30 days before |
| Presence in the directory | As long as your consent is active. Withdrawal takes effect immediately |
| Connection request without response | 90 days, then the request expires: the acceptance link becomes inactive and the addresses of both parties are deleted |
| Networking accepted | As long as both accounts exist. Deleting one of the two erases its data from the line |
| Calls, comments, tracked funding, consortium plans | As long as your account exists; deleted with it |
| Feedback and reports | 24 months |
| Technical and security logs | 12 months |
| Technical cache of profiles | 15 minutes, extended to 24 hours if our provider is unavailable |
| Newsletter | Until your unsubscription |
| Accounting documents (donations, subscriptions) | 10 years — legal obligation, independent of your account deletion |
| Audience measurement | Maximum 25 months |
You have the rights of access, rectification, erasure, restriction, objection, and portability as provided by the GDPR, as well as the right to withdraw your consent at any time — without affecting what was done before the withdrawal.
Two of these rights can be exercised directly, without writing to us or waiting:
The emails we send also include an unsubscribe link that requires no login. For any other rights, write to contact@museum-week.org: we respond within one month.
If you believe, after contacting us, that your rights are not respected, you can file a complaint with the National Commission on Informatics and Liberty (CNIL), 3 place de Fontenoy — TSA 80715 — 75334 Paris Cedex 07, or at cnil.fr.
Exchanges with the site are encrypted. Access to member data is controlled server-side, not client-side: data you are not authorized to see is not sent to you, rather than being sent and then hidden. Members' email addresses are never transmitted to other members' browsers, except for accepted connections.
This policy may evolve with the service. In case of substantial change — new purpose, new recipient, extended duration — we will inform you before it takes effect. The date of last update is at the top of the page.