It is previously specified that these general conditions govern the sales of tickets for shows on the site www.heavyweekend.live to reserve and place orders.
In accordance with European Regulation 2016/679 of April 27, 2016, known as the General Data Protection Regulation (GDPR), which has been in effect since May 28, 2018, and the French Data Protection Act (Loi Informatique et Libertés) No. 78-17 of January 6, 1978, this policy is intended to inform you about how we use and share the information you provide through our forms, such as when requesting information, subscribing to newsletters, opening an account, or placing an order. It also outlines the categories of personal data we may collect or hold about you, how we use it, who we share it with, how we protect it, and the rights you have regarding your personal data.
1. Definitions
Personal Data: any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"); an "identifiable natural person" is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;Processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction;Data Controller: the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;Processor: a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller;Recipient: a natural or legal person, public authority, agency, or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;Third Party: a natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data;Consent of the data subject: any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her;Cookies: text files that may be saved in a dedicated space on the hard drive of your Device (PC, tablet, mobile phone) when viewing websites using your internet browser;Device: hardware equipment such as a computer, tablet, smartphone, or more generally any communication tool on which a customer or prospect uses a browser to view a website.
2. Data Controller
Personal data collected on the editorial and ticketing website www.gdp.fr during your browsing, newsletter sign-ups, account creation, and orders, as well as their tracking, is processed by GERARD DROUOT PRODUCTIONS, the data controller, a company registered with the Paris Trade and Companies Register under number 388 281 586, with its registered office at 37 rue Vivienne, 75002 Paris. We have appointed a Data Protection Officer whom you can contact at the following email address:
protectiondp@gdp.fr 3. Personal data we collect
To finalize your purchase, you will be asked to create an account, which is required to place an order, or to sign in if you are already a customer. We collect your first and last name, email address, phone number, and postal address. This data is necessary for us to process and manage your order (payment, delivery, invoicing, order confirmation), communicate information regarding your order and the event, manage our business relationship, provide customer support, and handle any potential event cancellations or postponements. Providing this information is mandatory for contractual or pre-contractual purposes. If you do not provide it, we will be unable to process your request. As a customer, you may receive offers or proposals for upcoming shows organized by Gérard Drouot Productions via email, MMS, or SMS, unless you opt out. You can unsubscribe at any time by clicking the unsubscribe link provided in each newsletter, by adjusting your account settings, or by writing to us at
protectiondp@gdp.fr. If you are not a customer and you sign up for presales or newsletters, we collect only your email address to keep you updated on all concerts and shows from Gérard Drouot Productions. You can unsubscribe at any time by clicking the unsubscribe link provided in each newsletter or by writing to us at
protectiondp@gdp.fr. When you browse our website, we also collect personal data indirectly through cookies placed on your device. Please refer to our
cookie policy.
4. Purposes and legal bases
The personal data collected is subject to automated processing. The table below outlines the various purposes for which this data is used and the legal grounds upon which they are based:
PurposesLegal basisOrder processing, payment, and deliveryOrder tracking and customer relationship managementPerformance of a contract or pre-contractual measuresNewsletters sent to customers (unless opted out)Legitimate interest (promoting our activities)Newsletters or pre-sale alerts sent to prospectsFeedback management during or after a showConsent Compliance with accounting and tax obligationsCompliance with our legal obligationsManagement of data subject rights requestsCompliance with our legal obligationsThis table does not include data transmitted and/or collected via cookies. For more information, please refer to our
cookie policy.
5. Recipients of your personal data We never share your personal data with other companies for marketing purposes. Your personal data is processed exclusively by authorized departments within GERARD DROUOT PRODUCTIONS. We share your data with our service providers, such as our IT maintenance and hosting providers who supply the infrastructure that serves as the foundation for our information systems and websites, or our payment processor for managing your online payments. We may share your information with our event partners if you have purchased a package, a hotel bundle, or if the service ordered includes a meet-and-greet with the artist, so that they may organize the event and/or provide the services you have purchased. We only transmit the data they need to perform their services or tasks; they will act solely in accordance with our instructions and are contractually obligated to ensure a level of security and confidentiality for your data that is identical to our own, and to comply with applicable personal data protection regulations. Personal data may be disclosed to third parties in accordance with a law, regulation, or by virtue of a decision from a competent regulatory or judicial authority.
6. Transfers outside the European Economic Area
Data collected and processed in this context is hosted within the European Economic Area. When we use partners or service providers located outside the European Economic Area, we first ensure that an adequate level of data protection is provided, such as through an adequacy decision from the European Commission. In the absence of such a decision, we enter into the European Commission's standard contractual clauses.
7. Retention period for your personal data
GERARD DROUOT PRODUCTIONS only retains personal data for as long as necessary for the purposes for which it was collected and in compliance with applicable regulations. Personal data of prospects is kept for a maximum of 3 years from the date of the last contact with GERARD DROUOT PRODUCTIONS. Personal data of customers is kept for the duration of the contractual relationship, plus a period of 5 years from the date of the ordered event, corresponding to the legal limitation periods, taking into account any interruptions or suspensions of applicable limitation periods. Invoices are kept for 10 years from the closing of the fiscal year. Personal data concerning the exercise of your rights is kept for a period of 6 years from the end of the procedure related to your request. As an exception to the preceding paragraphs, in the event of a claim, all or some of your data may be retained for a longer period if it proves useful for managing said claim. Once the aforementioned periods have expired, your personal data will either be deleted or anonymized.
8. Your rights regarding your personal data
Subject to the conditions defined in Articles 15 et seq. of the GDPR, and barring any exceptions, you have:
a right of access allowing you to obtain confirmation as to whether or not personal data concerning you is being processed and, where it is, access to said personal data as well as various information regarding our processing activities (Article 15 of the GDPR);
a right to rectification in the event of inaccurate or incomplete personal data (Article 16 of the GDPR);
the right to obtain the erasure, in certain cases, of personal data concerning you (Article 17 of the GDPR);
the right to obtain the restriction of processing in certain cases (Article 18 of the GDPR);
the right to data portability allowing you to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and/or to request that we transmit this data to another controller, when the processing is based on consent or a contract and is carried out by automated means (Article 20 of the GDPR);
a right to object for reasons relating to your particular situation when the exercise of this right is based on legitimate grounds (Article 21.1 of the GDPR), and a right to object to direct marketing (Article 21.2 of the GDPR);
the right to define directives regarding the fate of your data after your death under the conditions provided for in Article 85 of the French Data Protection Act (Loi Informatique et Libertés);
the right not to be subject to a decision based solely on automated processing which produces legal effects concerning you or similarly significantly affects you (Article 22 of the GDPR);
the right to withdraw your consent when the processing is based on consent, without affecting the lawfulness of processing based on consent before its withdrawal (Article 7.3 of the GDPR). In compliance with the conditions set by regulations, you may exercise your rights by sending us an email at
protectiondp@gdp.fr or by writing to us at the following address: GERARD DROUOT PRODUCTIONS, 37 rue Vivienne, 75002 PARIS. Furthermore, we inform you that you also have the right to lodge a complaint with the competent supervisory authority, the Commission Nationale de l’Informatique et des Libertés (CNIL).
9. Security of your information
We take appropriate measures to ensure the protection of your personal data against unauthorized access, modification, disclosure, loss, or destruction. To this end, we implement appropriate technical and organizational measures, taking into account the nature of the data and the risks involved in its processing, to preserve the security and confidentiality of your personal data and, in particular, to prevent it from being distorted, damaged, or accessed by unauthorized third parties. When we use service providers or subcontractors, we ensure that appropriate protection measures are in place. If you have any questions about our Privacy Policy, you can contact us at the following email address
protectiondp@gdp.fr or by writing to us at GERARD DROUOT PRODUCTIONS, 37 rue Vivienne, 75002 PARIS, France. Last updated: 02/15/2021
