Privacy policy

Data controller

The controller of your data is the site publisher (see the legal notice). For any question regarding your data, you can contact us at the address below.

Contact : info@minitopia.fr

Data we collect

We only collect the data needed to create your account, manage your tickets, send our gazette and handle the requests you send via the contact form:

• Identity: first name, last name.
• Contact details: email address, phone number (optional).
• Account: password (stored encrypted, never in plain text).
• Purchase: amount and details of your tickets (payment is handled by Monext (Payline); we never store any card data).
• Consent: date and version of the legal terms accepted when creating the account.
• Newsletter: email address, subscription date and source (proof of consent).
• Contact: the information you send via our contact form (identity, contact details, and for professionals: company, job title, SIRET, address) together with the content of your message.

Purposes and legal basis

• Create and manage your account and your tickets (performance of the contract).
• Send you emails related to your purchase, such as your ticket (performance of the contract).
• Comply with our legal and accounting obligations (legal obligation).
• Send you our newsletter, “La Gazette” (Minitopia news, events and offers), only if you have consented to it (consent). You can withdraw this consent at any time via the unsubscribe link in every email.
• Respond to the requests you send us via the contact form (legitimate interest in handling your enquiries; pre-contractual measures where your request concerns a booking or a quote).

Recipients and processors

Your data is accessible to our team and to technical providers acting on our behalf:

• Monext (Payline): payment processing.
• Resend: email sending (pass, password reset, newsletter).
• Supabase: database and authentication.
• Cloudflare (Turnstile): anti-bot protection of our forms (security check; your IP address is processed solely for this purpose).
• Vercel: site hosting.

Our payment provider Monext (Payline) processes data within the European Union. Some other providers (Vercel) are located outside the European Union; these transfers are covered by appropriate safeguards (European Commission standard contractual clauses).

Data retention

Your data is kept as long as your account is active. When you delete your account, your personal data is anonymised. Some information may be kept longer to comply with our legal and accounting obligations. For the newsletter: your email address is kept until you unsubscribe, and for a maximum of 3 years after your last interaction, after which it is deleted. Messages sent via the contact form are kept for as long as needed to handle your request, then for a maximum of 3 years after our last exchange, before deletion.

Your rights

Under the GDPR, you have the following rights:

• Access, rectification and erasure of your data.
• Restriction of and objection to processing.
• Portability of your data.
• Deletion of your account, directly from your "My account" area.
• Withdraw your consent to the newsletter at any time, via the unsubscribe link in every email.

To exercise these rights, contact us at the address above. You may also lodge a complaint with the CNIL (3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr).

Cookies

We only use technical cookies needed for the site to work and for your login session. We do not use advertising cookies or commercial tracking.

Updates

This policy may be updated. The applicable version is the one published on this page.