Privacy & Policy
IDOL and ICON
Appendix 2: Information notice regarding the processing of personal data
The purpose of this information notice is to inform Members of The Eight club, in a clear and transparent manner, of the conditions under which their personal data is collected and processed in connection with their Membership and use of the Services offered.
-
Data controller
The processing of personal data is carried out by The Eight, acting as the data controller.
Any questions regarding the protection of personal data can be sent to the following address: dataprivacy@theeightclub.com
-
What is personal data? What is processing?
Personal data refers to any information relating to an identified or identifiable natural person, directly or indirectly, in particular by reference to an identifier, a name, contact details, or elements specific to their personal situation.
Processing refers to any activity related to personal data, including its collection, use, sharing, storage, and transmission.
-
What personal data is collected?
In connection with Membership of The Eight club and the provision of Services, The Eight may collect and process the following categories of personal data:- Identification and contact details: surname, first name, title, date of birth, postal address, email address, telephone number;
- Data relating to Membership and member status: type of Membership, date of Membership, member ID, relationship history;
- Data relating to the payment of the annual Membership fee: amount of the Membership fee, payment status, payment terms, payment schedule and monitoring of payments in the event of installment payments, payment incidents, if applicable;
- Data relating to Services and Events: participation in Events, invitations, preferences expressed;
- Image and audiovisual recording data: photographs and/or videos taken during Events organized by The Eight, it being specified that Members are informed in advance of any filming and their consent is obtained;
- Data relating to Curation services: requests made, information necessary for their processing;
- Data relating to Orders: billing information, purchase history of Products or Services offered by The Eight. Bank details are not collected directly by The Eight and are processed exclusively by secure payment providers;
- Data relating to commercial prospecting: communication preferences, consents and objections, history of solicitations;
-
Data relating to
exchanges and contacts with The Eight: content of messages, requests for information, correspondence, and
exchange history when the Member contacts The Eight by any means of communication.
-
For what purposes is the data processed?
Members’ personal data is processed for the following purposes:- management of The Eight club Membership and Member relations;
- administrative, accounting, and financial management of the annual Membership fee, including tracking payments and any installment plans that may have been agreed upon;
- execution of Services and Orders;
- organization and management of Events offered by The Eight;
- provision of Curation Services;
- processing Member requests and communications;
- improvement of the quality of Services and the Member experience;
-
compliance with legal and
regulatory obligations applicable to The Eight.
-
What are the legal bases for processing?
The processing of personal data is based, depending on the purposes concerned, on:- the performance of the Membership agreement and the Services subscribed to;
- the compliance with legal obligations;
- the legitimate interest of The Eight, in particular for the improvement of its Services and the organization of the club, subject to respect for the rights and interests of Members;
-
the consent of the Member where required, in
particular for commercial prospecting.
The provision of certain personal data is contractual or necessary to comply with legal obligations. Their disclosure is a condition for the conclusion and performance of the Membership agreement. Consequently, failure to provide such data may prevent The Eight from offering all or part of the Services under the Membership.
-
Summary of processing
Categories of data
Purposes
Legal basis
Retention period
Identification and contact data
Membership and
member relationship management
Contract performance
Membership duration
Data relating to
Membership and Member status
Administrative management of The
Eight club
Contract performance
Membership duration
Data relating to the payment of the annual Membership fee
Membership fee management, billing, payment tracking, and
installment plans
Contract performance
Duration necessary for the purpose pursued
Data relating to
Services and Events
Organization and
invitations
Legitimate interest
Membership duration
Image and audiovisual recording data
Communication and promotion of Events to Members
Consent
Duration necessary for the purpose pursued or until consent is
withdrawn
Data relating to
curation services
Provision of
personalized services
Contract performance
Duration necessary for
the Service
Data relating to Orders
Purchase management and billing
Contract performance
Duration necessary to comply with legal and
accounting obligations
Data relating to
commercial prospecting
Commercial
communications
Consent
3 years from the last
contact
Data relating to exchanges and contacts
with The Eight
Processing of requests, Member relationship
management
Contract performance
Duration necessary to process the request
-
Who can access personal data?
Members’ personal data is accessible only to:- authorized internal teams at The Eight, strictly within the limits of their respective duties (departments in charge of communication and marketing, departments in charge of compliance with social, tax, and legal obligations, etc.);
- service providers and partners involved in the performance of the Services (event organization, curation, logistics, IT service providers, marketing and CRM partners, payment service providers), acting as subcontractors and subject to contractual confidentiality obligations;
-
where applicable, to
financial institutions, supervisory bodies, courts, mediators, accountants, auditors, lawyers, and bailiffs,
for the performance of their legal or contractual duties.
In all cases, The Eight ensures that data processing and transfer are carried out in accordance with the legislation and regulations in force, taking all necessary precautions and measures with the recipients, in particular with regard to the processing restrictions applied and the security and confidentiality measures required.
-
Data transfers outside the European Union
In the event that data transfers outside the European Union are carried out, The Eight undertakes to implement the appropriate safeguards provided for by the applicable regulations (standard contractual clauses, adequacy decision, or any other mechanism recognized by the GDPR).
-
How long is the data kept?
Members’ personal data is kept for the periods indicated in the summary table above. In any event, The Eight may archive certain data, in a secure form and with restricted access, for any additional period required by applicable regulations, in order to comply with its legal, accounting, and legal obligations, in particular for evidentiary purposes or to defend its rights.
-
What are Members’ rights?
In accordance with applicable regulations and under the conditions and limitations provided for therein, each Member has the right to:- access their personal data;
- to rectify it;
- to erasure;
- to restrict processing;
- to object;
- portability of personal data;
- to withdraw consent at any time when processing is based on consent;
-
to define
guidelines for the storage, erasure, and communication of their personal data after their death.
These rights may be exercised at any time by sending a request to the following address: dataprivacy@theeightclub.com.
Members also have the right to lodge a complaint with the French Data Protection Authority (CNIL): - By post to the following address: CNIL, 3, place de Fontenoy, TSA 80715, 75334 PARIS Cedex 07;
-
By internet at the following
address: www.cnil.fr/fr/plaintes or www.cnil.fr
-
Security and confidentiality
The Eight implements appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of Members’ personal data, and to prevent unauthorized access, loss, or disclosure.