Privacy Policy

The purpose of this privacy policy is to inform users of the Institut pour la photographie’s website and digital services: 

• Regarding how their personal data is collected: Personal data is defined as any information that can be used to identify a user; as such, it may include: their first and last names, age, mailing address or email address, location, or IP address (this list is not exhaustive; see Article 3 for details); 
• Regarding the rights they have with respect to this data; 
• Regarding the organization and the person responsible for processing the personal data collected and processed; 
• Regarding the recipients of this personal data; 
• About the site's cookie policy;
• Regarding the Institut pour la photographie's policy on tracking pixels in the emails it sends to its users.

This policy supplements the Legal Notice and the Terms and Conditions of Use accessible directly by users.

In accordance with Article 5 of European Regulation 2016/679, personal data is:   

• Processed in a lawful, fair, and transparent manner with respect to the data subject; 
• Collected for specific (see Article 3.1 herein), explicit, and legitimate purposes, and not further processed in a manner incompatible with those purposes; 
• Adequate, relevant, and limited to what is necessary in light of the purposes for which they are processed; 
• Accurate and, where necessary, kept up to date; all reasonable measures must be taken to ensure that personal data that is inaccurate, in light of the purposes for which it is processed, is erased or rectified without delay; 
• Stored in a form that allows for the identification of the individuals concerned for no longer than is necessary for the purposes for which they are processed;  

• Processed in a manner that ensures the appropriate security of the collected data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures. 

   

Processing is lawful only if, and to the extent that, at least one of the following conditions is met: 

• The data subject has consented to the processing of his or her personal data for one or more specific purposes;
• The processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of precontractual measures 
  taken at her request; 
• The processing is necessary for compliance with a legal obligation to which the data controller is subject; 
• The processing is necessary to protect the vital interests of the data subject or another natural person; 
• The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller; 
• The processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, unless the interests or fundamental rights and freedoms of the data subject that require the protection of personal data take precedence, in particular where the data subject is a child. 

Personal data collected and processed when browsing the website 

The personal data collected in the course of our business activities are as follows: 

• Last Name and First Name
• Email
• Phone
• Consent to Disclosure
• Registration Information
• Date and Time
• Type of device used 
• Device screen resolution
• Browser used
• IP Address
• Approximate location: city / region / country
• Data and Navigation History
• events: clicks, downloads, forms, etc.
• Pages Viewed
• Duration of visits
• Visitors' Locations
• Traffic Source
• Redirects and External Links
• Possible errors and bugs 

The collection and processing of this data serve the following purposes: 

• Sending newsletters to users who have given their consent
• Recording of users who have given consent in the internal database
• Communication with Users
• Retention of Proof of User Consent
• Information on how a user can reserve a workshop or event
• Providing Information to Users Regarding an Event
• Data tracking and analysis: website traffic, user interests
• Improvements to content and user interfaces
• Improving the User Experience 
• Monitoring the Overall Operation of Digital Services 
• Detection of Malicious Activity on the Website
• Protecting the Site Against Cyberattacks
• Safety Precautions for Users
• Notice Regarding Errors and Bugs on the Website

When you use our website, the following data is automatically collected: 

• Date and Time
• Type of device used 
• Screen resolution of the device being used
• Browser used
• IP Address
• Approximate location: city / region / country
• Data and Navigation History
• events: clicks, downloads, forms, etc.
• Pages Viewed
• Duration of visits
• Visitors' Locations
• Traffic Source
• Redirects and External Links
• Possible errors and bugs 

Additional personal data is collected when you perform the following actions on the platform: 

• Using the Contact Form
• Newsletter Sign-Up Form
• Registration for a workshop or an "Open Appointment" time slot

They are stored by the data controller under reasonable security measures for a period of 14 months. 

The company may retain certain personal data beyond the time periods stated above in order to comply with its legal or regulatory obligations. 

The website www. institut-photo. com is hosted by: 

Datacampus 
Address: 493 Avenue de Paris – 79000 Niort 
Email: dpo@datacampus. fr 
T.: +33 (0)5 16 64 00 75
 

Data may be shared with our partners, listed below:

• Brevo – a tool for managing email campaigns and creating newsletters;
• Arenametrix – a marketing tool designed for managing an internal database;
• Matomo – a tool designed for online data analysis;
• Didomi / Axeptio – Consent Management Platform (CMP) solution;
• Webform – a tool for processing applications for research and creative support programs.

The website www. institut-photo. com was designed to keep the use of cookies and trackers on your device to an absolute minimum.

• Traffic Statistics: This site uses Matomo, an audience measurement tool hosted directly on our servers (rather than by a third-party provider), configured so that it does not set any cookies and does not allow for the individual identification of visitors. This configuration complies with the consent exemption criteria defined by the CNIL for audience measurement tools.

• Embedded videos (YouTube, Vimeo): Some pages on the site may include videos hosted by third-party platforms (YouTube, Vimeo). These videos do not load automatically: by default, only a preview image is displayed, along with a notice informing you that playing the video will result in the loading of third-party content and the transmission of data to the relevant host (Google for YouTube, Vimeo Inc. For Vimeo). No connection to these platforms, nor any cookies, are established until you voluntarily click the play button. This click constitutes your active and informed decision to access this content.

• Strictly necessary cookies: The website may place technical cookies that are essential to its operation (for example, to maintain your browsing session). These cookies, known as “strictly necessary” cookies, do not require prior consent under applicable regulations and are not used for any other purpose.

You have all the rights regarding personal data described in this policy. If you have any questions, you can contact our team via the contact form . For more information about cookies and trackers, please visit the CNIL website .

The Institut pour la photographie reserves the right to modify this Policy at any time to ensure that it complies with applicable law for users of its digital services on the website. 

A tracking pixel is a tiny image (1 pixel by 1 pixel) embedded in an email that is invisible to the user. When the email is opened, loading this image—whose filename contains a user identifier—enables the collection of personal data about the user.

In accordance with the provisions of Article 82 of the “Data Protection Act” and the ““Recommendation on Tracking Pixels in Emails” of April 14, 2026, issued by the National Commission for Information Technology and Civil Liberties (CNIL), subscribers to the Institut pour la photographie’s newsletter have the option to opt out of tracking pixels (see Article 4.3).

The personal data collected by tracking pixels is as follows:

• Email address
• Receipt of the email 
• Opening the email
• Click on the email
• Redirect
• Date and Time
• Type of device used
• IP Address
• Approximate location: city / region / country
• Unsubscribe from the newsletter

The collection and processing of data gathered by tracking pixels serve the following purposes:

• Identify inactive email addresses;
• Analyze email open and unsubscribe rates to optimize campaigns by personalizing message content and adjusting the frequency of emails sent;
• Analyze the click-through rate to tailor content to the interests of newsletter subscribers; 
• Analyze individual opens and clicks to deliver personalized content; 
• Detect suspected fraud, such as identifying unusual or large-scale email opens, which may indicate automated behavior.

Data may be shared with our partners, listed below:

• Brevo – a tool for managing email campaigns and creating newsletters;
• Arenametrix – a marketing tool designed for managing an internal database.

When signing up for the newsletter, users have the option to accept tracking pixels by checking the corresponding box. Failure to respond to this question does not constitute a refusal of tracking pixels, but rather indicates that the subscriber’s consent is unknown.

Users who subscribed before September 1, 2026, who were informed of their right to opt out, and who did not explicitly refuse the use of tracking pixels are considered to have given implied consent.

Tracking pixels continue to be used for subscribers whose consent status is unknown.

Subscribers whose consent status is unknown or who accepted tracking pixels when they signed up for the newsletter may opt out at any time by clicking the “  Opt Out of Tracking Pixels ” link included in all newsletters from the Institut pour la photographie since July 14, 2026.

For more information, please visit the CNIL website at the following address: www. cnil. fr and/or contact our team using our contact form. 

Data Controller and Data Protection Officer  

Personal data is collected by the Institut pour la photographie, an association with a capital of [amount of share capital], whose registration number is W595 030 602.

The data controller may be contacted as follows:  

• By mail to the following address: The Institut pour la photographie - 7 rue de Thionville – 59800 Lille
• By phone, at: +33 (0)3 20 88 08 33
• By email via the contact form

The data protection officer for the company or the data controller is:  

Anne Lacoste – Director of the Institut pour la photographie 
Address: 11 rue de Thionville – 59800 Lille 
T.: +33 (0)3 20 88 08 33

If, after contacting us, you believe that your rights Data Protection , are not being followed, you may file a complaint with the CNIL. 

Any user whose personal data is being processed may exercise the following rights, pursuant to European Regulation 2016/679 and the French Data Protection Act (Law No. 78-17 of January 6, 1978):   

• Right of access, right to rectification, and right to erasure (set forth in Articles 15, 16, and 17 of the GDPR, respectively); 
• Right to data portability (Article 20 of the GDPR); 
• Right to restriction of processing (Article 18 of the GDPR) and right to object to data processing (Article 21 of the GDPR); 
• Right not to be subject to a decision based solely on automated processing; 
• The right to determine what happens to one's data after death; 
• Right to lodge a complaint with the competent supervisory authority (Article 77 of the GDPR). 

To exercise your rights, please send a letter to the Institut pour la photographie, 7 rue de Thionville, 59800 Lille, or an email to  alacoste@institut-photo. com .

In order for the data controller to process the user’s request, the user may be required to provide certain information, such as: their first and last names, email address, and account number, personal account number, or subscriber number. 

Visit the website www. cnil. fr for more information about your rights. 

The website publisher www. institut-photo. com reserves the right to modify this Policy at any time to ensure that it complies with applicable law for users of the website and its digital services. 

Any changes will not affect purchases made previously on the site, which remain subject to the Policy in effect at the time of purchase and as accepted by the user upon confirmation of the purchase. 

Users are encouraged to review this Policy each time they use our services, without the need for formal notification. 

This policy, published on September 1, 2026, was updated on September 1, 2026.