Privacy policy

Last updated: 20 September 2026.

Data controller

Invest House LLC — contact@cannesvenue.com — 45 BV de la croisette, 06400 CANNES

Quote and introduction enquiries

We process your name, email, optional contact details, participant numbers, event type and date, optional budget, message, shortlisted venues and originating page. This information is used to assess your enquiry and prepare an introduction. The legal basis is taking pre-contractual steps at your request. Do not include sensitive personal data in your message.

Your enquiry is received by CannesVenue. After reviewing it, the team may make the information needed to assess the project available to the venue’s authorised representative through their host account, or share it with them directly. Sharing is not automatic: CannesVenue selects the enquiry and the information shared. Your contact details are only added to that account if sharing them has been expressly approved for the purpose of handling the project. Internal notes are not shared. This sharing does not subscribe you to marketing.

Venue submissions

The owner form collects the contact’s professional details and role, venue characteristics and submitted media. Managing the submission is based on pre-contractual steps; permission relating to media is collected separately. Publication is not automatic. Internal contact details do not appear in the public listing.

With the submitter’s consent and following approval, their name, role and introduction may appear on the listing. Their email address and phone number remain private.

Host account

To open and manage a host account, we process the name, login email address, venues assigned to the account and information needed to provide and secure access. Suggested changes and their approval status are used to maintain listings. Managing this account supports the requested collaboration with CannesVenue; protecting access and preventing misuse are based on our legitimate interest in keeping the service secure. Only the host concerned and authorised CannesVenue personnel can access the information intended for that account.

Opening an account does not make its user’s name or contact details public. Publishing an owner or representative profile requires separate permission, which can be withdrawn by contacting CannesVenue.

Team and private conversations

Team accounts are created by invitation. We process their users’ names, email addresses, roles, assignments and records needed for security and activity tracking. Moderators access the cases assigned to them according to their permissions. Internal notes help organise project handling; they are not displayed in the client conversation or host account.

The private conversation records the enquirer’s messages and the team’s replies, their authors and dates, to handle the project and maintain the exchange history. This processing is based on requested pre-contractual steps or contract management; access management and activity tracking are based on our legitimate interest in securing the service. The personal link allows you to read and reply to exchanges without creating a client account: keep it confidential.

Email follow-up notifications

Alerts to the team or hosts provide limited follow-up information and a link to their account; they do not reproduce the enquirer’s message or contact details. They may be grouped. Separately, a reply approved by an authorised person may be emailed to the enquirer with a link to their private conversation. These communications support project follow-up and do not subscribe anyone to a newsletter.

Sending uses the hosting provider’s email service and the recipients’ email providers. References to recipients and the items concerned, dates and the status of attempts are processed to manage the queue, avoid duplicates and investigate incidents. This processing supports the requested collaboration and is also based on our legitimate interest in operating the service. This information must only be kept for as long as necessary for these purposes, subject to any applicable obligation; the publisher oversees its deletion.

AI writing assistance

When this feature is enabled by the administrator, an authorised person can request a draft from the OpenAI API. Only relevant elements of the brief, recent exchanges with the client and public information about selected venues are prepared for this generation. Contact fields, internal notes and commissions are excluded. Rules mask known names, email addresses, phone numbers and links within the text; they do not guarantee complete anonymisation. Do not include sensitive data in your messages.

This assistance is based on our legitimate interest in preparing relevant replies; it makes no automated decision about your project. Every draft remains subject to administrator approval before sending, even after editing. You can contact CannesVenue with any question or objection to this processing based on your circumstances.

By default, OpenAI states that data sent to its API is not used to train its models unless the account holder opts in. The setting that disables response storage does not guarantee that no data is retained: abuse-monitoring logs may in particular be kept under the service terms. Processing outside the European Economic Area is possible depending on the account and contractual safeguards used; you can ask the publisher for details of these safeguards.

OpenAI information about API data.

Public professional information

Informational listings are compiled from official websites and public sources. Each listing states its sources and verification date. This activity relies on the legitimate interest of building a useful professional directory. Operators may request corrections or object to processing where their circumstances justify it.

Cookies and local preferences

A session cookie helps secure forms and the private administration, team and host areas, as well as client conversations. Your venue shortlist is saved in your browser’s local storage to help prepare your enquiry; you can delete it using the shortlist’s “Clear” button. This version of the site does not load advertising tools, social media pixels or audience analytics.

Map and journeys

The interactive map uses OpenStreetMap tiles, loaded when the map is displayed. Loading them sends your IP address and standard technical browser information to the provider. No access to your location or advertising cookie is requested. Routes are calculated in advance from venues’ public addresses; your personal searches are not sent to the routing service. See the OpenStreetMap privacy policy.

Security and retention

Forms use validation checks, a security token and submission limits. Private contact details and files are available only to authorised people. Submission-limit counters use a temporary network-address fingerprint.

Enquiries are retained to enable follow-up. Rejected submissions and abandoned files must be deleted when no longer useful. Contractual and financial records are retained in accordance with applicable obligations; the publisher manages retention periods and backups.

Host account data is used to manage access and the venues assigned to it. Access may be disabled if the collaboration ends or the user is no longer authorised to represent a venue. Disabling access does not automatically delete listings, suggested changes or enquiries already recorded. Their retention is reviewed in light of ongoing projects, individuals’ rights and applicable obligations. Data that is no longer needed must be deleted or, where justified, retained in an archive with restricted access.

Messages, internal notes, drafts and activity logs are kept for project follow-up, security and, where necessary, evidence of commitments. The publisher reviews their retention in light of ongoing cases, individuals’ rights and applicable obligations. Disabling an account does not automatically delete these items; data that is no longer needed must be deleted or archived with restricted access where there is a justified reason.

Hosting and recipients

Application data is stored on the publisher’s OVHcloud hosting. The contracting entities, processing locations and applicable safeguards must be confirmed by the publisher from their contract. This page does not assume that hosting takes place exclusively in France.

Your rights

You may request access to, correction, erasure or restriction of your data, and object to processing based on legitimate interests. Portability applies under the conditions set out in the GDPR. Send your request to the controller’s contact listed above. Proportionate identity verification may be required. You can also lodge a complaint with the CNIL.