Privacy Policy

Thank you for visiting the Mlle et Coco website and reading its privacy policy (hereinafter the Policy).

By browsing our website or using our systems or services, you acknowledge that you have read and understood this policy and consent to your personal data and information being processed in accordance with it, where applicable.

This Privacy Policy is composed of the following elements:

  1. Objectives of the Privacy Policy,
  2. Entry into force,
  3. Methods of collecting consent,
  4. Objectives of data collection,
  5. Purposes of data processing,
  6. Personal information collected,
  7. The treatment processes used,
  8. Terms of access and control of personal information,
  9. Sharing and reasons for sharing personal information with third parties,
  10. Use of cookies and similar technologies,
  11. Retention of personal information.
  1. Purposes of the Privacy Policy:

Respect for privacy and the protection of personal information are essential to us, which is why, through this Policy, we intend to protect them in accordance with applicable laws.

To ensure this protection, Mlle et Coco undertakes to only collect, process and share information that can identify an individual when the latter has consented to it, unless this is permitted or required by law, in which case your consent will not be necessary.

The Policy aims to inform users of the reasons and how Mlle et Coco, or any person acting on its behalf, will collect and use their personal information. It is intended to be in clear language to ensure informed consent from users.

For the purposes of this Policy, “personal information” means any information about an identifiable individual or that can identify an individual. Where possible, we will anonymize, pseudonymize, and/or aggregate such information so that it no longer identifies an individual.

  1. Entry into force

This Policy applies from September 21, 2023.

This Policy replaces the Privacy Policy dated September 21, 2023

  1. The procedures for obtaining consent

We are committed to obtaining consent before collecting an individual's personal information. Consent may be express or implied and may be provided directly by the individual or by their authorized representative.

We prefer to obtain explicit consent, whether verbally, electronically, or in writing. However, implied consent may be reasonably inferred from an individual's action or inaction. For example, providing a name and address to receive a publication or a name and telephone number to answer a question is considered implied consent to the collection of information containing personal information. To determine the appropriate type of consent, we consider the sensitivity of the personal information at issue, the purposes for which it is being collected, and the reasonable expectations of an individual in a similar situation.

If we want to use personal information for a new purpose, we will describe the intended use and ask for consent again. 

It is not always possible, particularly in the context of a government request, to obtain the individual's consent to collect, use or disclose their personal information. We undertake never to disclose this type of information, other than in accordance with this Policy, unless required or permitted by law.

  1. Purposes of data collection  

The information collected is in accordance with the purposes and objectives set out in this privacy policy.

Here are some of the reasons why we collect your personal information:

  • To provide products and services : We will collect and process the data and information necessary to fulfill our mission and contractual obligations.
  • To provide and improve these products and services : Data collected during your interactions with our services may be used to analyze and improve the operation of our products and services.
  • To develop new products and services as well as for AI : The data collected may be used for research and development purposes to offer new products and services to our users, including through advertising and marketing messages. In addition, the data collected and aggregated may be processed by algorithms using artificial intelligence.
  • To offer personalized products and services : The collection and analysis of data generated by your interactions with our services allows us to develop and create products and services that are relevant to always best meet your expectations in terms of culture and entertainment, in particular in order to provide adaptation measures for customers who require them.
  • To evaluate the performance of products and services : Data is collected to gain insight into the benefits and drawbacks of our products and services so that we can evaluate and address them, if necessary, through surveys. This helps us ensure the quality of our products and services and helps us manage risks.
  • To protect the privacy of our users. The data collected allows us to verify the identity and protect the privacy of people who communicate with us by telephone, electronically or otherwise.
  • To meet legal obligations. Data is collected to meet obligations arising from laws, regulations or international treaties.
  1. Personal information collected

Mlle et Coco may collect personal information in various forms, but will only do so by lawful means and only for the necessary purposes disclosed to you, as described in this Policy, or as permitted or required by law.

The personal information collected, as well as its sensitivity, may vary depending on the context in which the interactions between you and Mlle et Coco take place. This is why we must first inform you of the nature of the personal information we use.

We protect all personal information collected. Among the personal information that may be collected and used, we pay particular attention to:

Name and contact details . First and last name, email address, postal address, telephone number and other similar data used to communicate with you.

Credentials . Passwords, password hints, and other similar security information used to identify you and access your account.

Demographic data . Data about you such as your age, gender, country and language of communication.

Payment Data . Data necessary to process your payments, such as the payment instrument number (e.g., your credit card number) and the associated security code.

Subscription data . Information about your subscriptions to cultural events and newsletters from cultural companies.

Images and sounds. Audiovisual data used to ensure the safety of our users, particularly at locations where cultural events are held for which we are organizers or hosts.

Interactions . Data relating to your use of the websites, platforms and tools created. This is data you provide in order to use the products. In other cases, such as error reports, this is data we generate.

Other examples of interaction data we collect include:

  • Data on sites visited and usage . For example :
    • Payment and account history . Data about items you purchase and activities associated with your account.
    • Troubleshooting and Support Data . Data you provide when you contact Mlle et Coco for support, including the products you use and other information that helps us resolve your issue.
  • Interests and preferences . Information about your interests and preferences, such as the artists or style of music that you attend, the types of exhibitions and/or cultural events that interest you, and the cities you are willing to travel to for certain cultural events. Apart from the information you have explicitly provided, other information we collect sometimes allows us to define or guess your interests and preferences.
  • Content Consumption Data . Data about media content (e.g., TV, video, music, audio, books, apps, and games) that you access through our Products.
  • Searches and Orders . Search queries and orders you use when using our website.
  • Text, input and handwriting data . Text, input and handwriting data, as well as any related information.
  • Location Data . Data, which may or may not be precise, about the location of your device. For example, location data may be collected from a device's IP address or data from your account profile that indicates your location with less precision, such as a city name or postal code.
  • Other data . Other data provided when you use our website, including data from Google Analytics.
  1. The purposes of data processing :

Provide our products and services. We use data to operate our products and services and provide you with rich, interactive experiences.

Improvement of products and/or services. We use data to improve our products, including adding new features or capabilities (Error reporting when purchasing a ticket, or viewing an online program, etc.).

Personalization. Some products include personalized features, such as recommendations that optimize your experiences and satisfaction. These features use automated processes to tailor your experiences based on data we have about you, such as inferences we make about you and your product usage, activities, interests, and location.

Development of products and/or services. We use data to develop new products. For example, we use personal information that we anonymize or pseudonymize to better understand our customers' needs.

Customer support. We use the data to diagnose and resolve problems with products and/or services, restore access to your personal account, and provide other support and assistance services.

Contribute to securing and resolving problems. We use data to help secure and troubleshoot our products and services. This includes using data to ensure the security of our services to our customers, detecting malware and malicious activity, troubleshooting performance and compatibility issues to help customers get the most out of their experience, and informing them of updates to our products and services. This may include using automated systems to detect security issues.

Security. We use data to protect the security of our products and customers. Our security features can prevent malware from running and notify users when malware is detected on their device, or use video surveillance to ensure public safety at events.

Surveys and promotional communications. We use the information we collect to provide surveys and promotional communications. You can subscribe to email subscriptions, respond to surveys, and choose whether or not to receive promotional communications from [ORGANIZATION NAME] via email, SMS, postal mail, and telephone. For more information about managing your contact information, email subscriptions, and promotional communications, see the How You Can Access and Control Your Personal Information section of this Policy.

Relevant offers. Mlle et Coco uses data to provide you with relevant and important information about the products and services we offer. We analyze data from different sources to predict what information will be most interesting and relevant to you and communicate it to you in different ways. For example, we can predict your entertainment interests and suggest new activities you might enjoy.

Advertisement. Mlle et Coco uses data collected through its interactions with you, some of our products, and third-party websites to advertise our products and services, including on third-party websites. We may sometimes use automated processes to make ads more relevant.

Business transactions. We use data to process your transactions with us. For example, we process payment information to provide customers with product subscriptions and use contact information to deliver products purchased in our online stores/ticketing.

Reporting and business operations. We use data to analyze our operations and improve decision-making. This allows us to make informed decisions and report on the performance of our activities.

Protection of rights and property. We use data to detect and prevent fraud, resolve disputes, enforce contracts, and protect our property. For example, we use data to confirm the validity of tickets sold to combat fraud. We may use automated processes to detect and prevent activities that violate our rights and those of third parties.

Legal Compliance . We process data to comply with the law. For example, we use our customers' ages to ensure we comply with our children's privacy obligations or to ensure the customer meets the recommended age for the audience. We also process contact details and identifiers to help customers exercise their data protection rights.

Research . We use data to conduct research, including for scientific purposes and in the public interest, where permitted by law.

  1. The treatment methods used

Mlle et Coco places the utmost importance on the security of your personal information and is committed to processing it in accordance with industry standards and norms, solely for the purposes for which it is collected as described in this policy or in a specific notice to this effect. However, absolute safeguarding of the latter is impossible given the security limitations inherent in transmission via the Internet. The information transmitted to us is therefore ultimately at the user's own risk.

  1. Terms of access and control of personal information

Mlle et Coco ensures that all personal information in its possession is as accurate, current and complete as necessary for the purposes for which it is used.

You have the right to request access to your personal information for verification purposes and to request correction if it is inaccurate. If you believe your personal information is inaccurate or if you wish to access your personal information, you can make a request using the contact information provided at the end of this Policy.

To the best of our ability, we will provide you with timely access to your personal information. However, for security reasons, we may need to verify your identity.

Furthermore, there may be circumstances where we cannot provide you with access to your personal information. This includes, for example, when access may lead to the disclosure of another person's personal information and that person refuses to consent to the disclosure of that information or when legal restrictions apply. If such a situation arises, we will notify you of the reason why we cannot provide you with access to your personal information.

If your request concerns data appearing on third-party web pages or platforms, please contact those third parties directly.

  1. Sharing and reason for sharing personal information with third parties

We do not share your personal information with companies, organizations, or individuals outside of [ORGANIZATION NAME], except for our authorized suppliers and partners who need access to the information for the purposes listed in and within the limits of this policy, as well as in the following cases:

  • With your consent.
  • For storage in cloud servers, in which case personal information may transit through third-party jurisdictions. Please note that we only use the services of reputable companies with privacy policies.
  • For external processing purposes: We transfer personal information to other trusted companies or individuals who process it on our behalf, according to our instructions, in accordance with this privacy policy, with a degree of data security at least equivalent to ours and in compliance with any other appropriate security and confidentiality measures.

In particular, we use the services of third-party providers to pool, clean, and analyze data in the cultural sector so that they can leverage this data and develop tools for the benefit of the public or sector stakeholders. To do this, these providers process the information provided in the following manner:

The data is first prepared and then classified so that it can be used.

From the prepared data, the provider creates aggregate statistics that contain general, non-personal information, sometimes combined with data from similar sources. This pooled data is then used to create aggregate statistics such as source analyses (mainly via postal codes), seasonality analyses, and price analyses (such as shopping carts).

This data is then enriched using two different processes. The first is enrichment using open-source third-party data, such as socio-demographic data issued by the Census via postal codes. The second process is called enrichment by inference. Enrichment by inference consists, for example, in the context of purchasing a ticket at the “under 25” rate, of deducing that the individual concerned is under 25 years old.

  • For legal reasons: We transfer personal information outside our company if access to it is necessary to comply with applicable laws and regulations.

Mlle et Coco undertakes not to sell or rent your personal information to a third party.

  1. Cookies and similar technologies

Mlle et Coco may use cookies, web beacons, pixel tags, log files, or other technologies to collect certain personal information about visitors to our websites, as well as the recipients of our newsletters, invitations, and other communications. Cookies are pieces of information sent by the server to the browser during a visit to the website that uniquely identify the current connection. This data may include information such as your Internet Protocol (IP) address, browser type, browser version, the pages of our site that you visit, the time and date of your visit, the length of time spent on the site, and other statistics.

The cookies used are used in particular to retrieve the search history as well as the baskets (e.g. ticket purchases) linked to the session, to facilitate the user's online browsing experience. It is important to know that, depending on the configuration chosen, activating the cookie option may allow other servers to install cookies on your system. You can configure your browser settings so that it informs you of the presence of cookies, giving you the option to accept them or not.

Please note that our website may contain links or references to third-party sites. This policy ceases to apply when you leave our website and [ORGANIZATION NAME] is not responsible for the collection or processing of personal information by these third parties or via these external sources.

  1. Retention of personal information

Mlle et Coco retains the collected data for different periods of time, depending on its nature and its usefulness in providing our products and services. During the retention period, [ORGANIZATION NAME] takes physical and technical measures to ensure the security of data containing personal information.

Personal information may be stored outside the country in which you live, if a third-party provider or other entity to whom we disclose personal information in accordance with this Policy is located outside the country. In such cases, personal information may be subject to local laws in the countries or territories in which the information is collected, used, disclosed, or stored, and may be accessed by government authorities and law enforcement authorities in those countries or territories.

Once the retention period has expired, personal information is destroyed. Only statistics or reports containing depersonalized and anonymized data may be retained for extended periods of time.

Other information

Changes to these rules:

We make changes to this Privacy Policy from time to time. Any reduction in your rights under this Privacy Policy will not be applied without your explicit consent. We always indicate the date on which the last changes were made and provide you with access to the archived versions for review. If the changes are significant, we will post a prominent notice on our website (including, for some services, via email notification).

Person in charge of compliance:

If you have any questions, comments or complaints regarding this policy, you can contact the person responsible for ensuring compliance with this privacy policy:

Patricia Bouchard

Miss and Coco

811 Route Jean-Gauvin, Quebec (Qc) G1X4V9

Phone : 581 742-4240

[1] This template is for informational purposes only and does not constitute legal advice or opinion. Each user must adapt the provisions of this template to their own specific practices, needs, and conditions. You can consult the Best practice guide for creating privacy policies in the cultural sector and/or contact the Cyberjustice Laboratory team for any additional information or questions or to obtain personalized advice.

Comment to user:

Pursuant to Art. 4.2.4 and Art. 4.3 of the Personal Information Protection and Electronic Documents Act - SC 2000, c. 5 (ANNEX 1: Principles set out in the National Standard of Canada entitled Model Code for the Protection of Personal Information, CAN/CSA-Q830-96),

Articles 6 and 18 of the Act respecting the protection of personal information in the private sector.

Articles 18 and 21 of the Act respecting the protection of personal information in the private sector.