In force on 14/07/2026
This document seeks to inform you of our practices for processing and
protecting your personal data (“Data”), as defined below, obtained
from the websites
https://drouot.com and
https://www.moniteurdesventes.com
(“The Platforms”) in strict compliance with your rights.
We encourage you to read all the information we provide carefully and to contact us if you have any questions.
“Data”: means any information which, directly or indirectly, enables a natural person to be identified by reference to an identification number or to one or more elements specific to it. You will never be asked to enter so-called “sensitive” personal data, such as your racial or ethnic origin, your political, philosophical or religious opinions, or information concerning your income or tax situation.
Your Data is only collected for the strict use and understanding of the Platforms as well as the purposes described in article 4.
Drouot SI acts as the data controller for your Data that is collected during the use of our Services and the Platforms in order to provide you with the Services. This means that Drouot SI is, in particular, responsible for its collection, security and use for the purposes described herein, in compliance with data protection rules.
Drouot does not loan or transfer its customer files to third-party commercial companies unrelated to the Services as defined herein.
“Services”: Drouot SI provides websites that allow you to:
participate remotely by electronic means on the websites https://drouot.com/ (“the Drouot Platform”) and https://www.moniteurdesventes.com/ (“the Moniteurdesventes Platform”):
in public auctions broadcast live (“Live Sales”),
in auctions taking place only on the internet (“Timed Sales”),
in sales organised by a Destocker or a Legal Authority on the Moniteur des Ventes Platform (“Seller-Run Auction Sales”).
The Services are described in the General Terms and Conditions of Use of the Platforms (“General Terms of Use”).
“Drouot SI” / “We”: the Services are provided by Drouot SI,
9 rue Drouot – 75009 Paris, a simplified joint-stock company with share
capital of €50,000, registered in the Paris Trade and Companies Register
under number 790 095 780.
“User” / “You”: means any natural person using the Platforms.
By using our Services and subscribing to the Platforms, you undertake to provide genuine information about yourself and you understand and agree that your Data may be collected, used, stored and disclosed to third parties as described below for the purposes of providing the Services to which you wish to subscribe.
The disclosure of false information is contrary to the General Terms and Conditions of Use.
We may collect the following categories of Data:
Connection data. Every time you log into one of the Platforms, we passively collect information such as, in particular, your computer’s IP address, the date and time of connection, together with information about your browser.
Navigation data. We also collect information to identify how you access one of the Platforms, which pages are viewed and for how long.
We may use Cookies as specified below.
In accordance with the General Terms and Conditions of Use, when you create an Account on one of the Platforms (“Account”), you will be asked to enter a certain amount of Data, in particular your first and last names, your postal address, your email address, your telephone number, date of birth, etc.
We also ask that you send us your ID document.
This information is required by sales operators organising auctions, in which you register to place Absentee Bids and bid, to comply with the legal obligation to formally identify their customers, to which they are subject in particular in the context of anti-money-laundering. Account creation information is also needed to manage the customer relationship between Drouot SI and Users and is necessary for the use of the Platforms.
When submitting an Absentee Bid online (“Absentee Bid”) or when you bid online, we collect certain information such as the history and details of your purchases, the number and amounts of your bids, etc.
When you register for a sale on one of the Platforms, your bank details are requested to verify the validity of your bank account.
However, this Data is sent directly to Drouot SI’s payment service provider (which is a PCI-DSS-certified company) through its own services. We do not hold such Data, we only have a footprint of it. Its collection and processing is governed by this company’s own terms and conditions.
When participating in-person using a physical paddle, a Sales Operator can create a bid entry on your behalf directly within our Focus tool without you having to do so via Drouot.com.
There are two registration methods available:
Via QR Code: if you have a Drouot.com account, you can present your personal QR Code to the Sales Operator. By taking this step, you agree to the transfer of your data to the Sales Operator for the purposes of managing the auction (legal basis: Article 6.1.b of the GDPR). Registration may be confirmed immediately or placed on hold pending validation by the Sale Operator.
Via search: the Sale Operator can find you by your name, telephone number or identification number, but only amongst bidders who have already participated in at least one sale with that Sale Operator; your consent to the transfer of data having been obtained during that previous registration.
In both cases, you will receive a registration notification email to inform you of this and to confirm your acceptance of the applicable terms and conditions. Your email address is required for this processing.
Your Data is collected to enable us to provide you with the Services for one or more of the following purposes:
Creation of an Account on the Platforms;
Enabling use of the Platforms;
Providing you with a history and details of your purchases and the number and amounts of your bids;
Ensuring the proper execution of transactions initiated by Users such as: sales registrations, Absentee Bids, placing bids, purchases, payments and deliveries;
Offering efficient customer service, particularly in terms of helping Users of the Platforms and managing complaints;
Compiling a file of Users, customers and prospects;
Sending Newsletters, solicitations and promotional messages according to the preferences selected when registering on our websites or according to your behaviour observed during your navigation among the categories of objects offered, under the conditions detailed below (“Newsletter”);
Suggesting, when you connect to one of the Platforms, objects according to the preferences defined by you when registering or observed during your navigation;
Compiling sales and traffic statistics for our Services internally;
Managing outstanding payments and any disputes sent by sales operators regarding the use of our Services;
Combating fraud;
Managing your requests to exercise your rights of access, rectification and objection to the collection of your Data;
Enabling participation in live auctions (“on site Bidder”): when a partner sales operator registers you for an auction to issue you with a physical paddle, your data is used to create a participation record, to provide information on the applicable terms and conditions, and to visually verify your identity in the auction room in accordance with legal anti-money laundering obligations (Article 6.1.c of the GDPR). You will be notified of this registration by email. Following verification of your identity, the Sales Operator may refuse your registration for the auction.
Complying with our legal and regulatory obligations.
Tracking the opening rates of our emails using a tracking pixel, subject to your consent, in order to measure the performance of our campaigns and tailor the content and frequency of the emails we send you to your interests.
We inform you, when collecting your Data, if certain Data must be entered or if this is optional. If you do not complete these required fields, you will not be able to access the Services.
You can sign up to our Newsletter when you register or, later, by accessing your personal space from your Account. Your consent is obtained by ticking a box.
You can unsubscribe from Newsletters at any time by accessing your personal space from your Account in the “personal information” section of the “Profile” area or by clicking on the unsubscribe link at the bottom of the emails received.
If the unsubscribe link malfunctions, you can unsubscribe by sending a message to the following address: info@drouot.com.
To find out more, we suggest that you read their privacy policies. You will then know how sales operators use your Data when they act as data controller for the running of Live Sales, Timed Sales and Seller-Run Auction Sales, the auction, payment and delivery of lots to the successful bidder.
A sales operator is a natural person or legal entity that arranges auctions. It uploads Traditional Catalogued Sales, Live Sales, Timed Sales or Seller-Run Auction Sales on the Platforms for use by Users.
This person can be:
a voluntary sales operator carrying out voluntary sales in accordance with Articles L.321-4 to L.321-17 of the French Commercial Code;
a commissaire de justice whose status is defined by Decree no. 2022-949 of 29 June 2022 relating to the conditions of practice of commissaires de justice, adopted for the application of Order no. 2016-728 of 2 June 2016 relating to the status of commissaire de justice;
any person authorised to conduct an auction sale in any other country.
In Seller-Run Auction Sales, the Sales Operator also refers to any Legal Authority or Destocker selling its own goods on the Moniteur des Ventes Platform.
To manage your Absentee Bids or your online bids: we share some of your information with sales operators to enable you to place an Absentee Bid or bid online on the Platforms (first and last name, home address, ID document or professional document where applicable). The sales operator thus checks your identity and complies with the legal anti-money-laundering obligation to which it is subject. Your identity-related Data is then disclosed;
We also send your email address or telephone number to sales operators so that they can contact you if necessary;
When participating in-person with a physical paddle (“on site Bidder”): when a Sales Operator registers you for an auction via our Focus tool in order to issue you with a paddle, your details (surname, first name, email address) are used to create a local registration record and to send you an information email confirming your acceptance of the applicable terms and conditions. Your identity is visually verified in the auction room by the sales operator using the ID document stored in your drouot.com account. Only the statement “identity verified”, accompanied by the type of document presented, the timestamp and the operator’s ID, is recorded. This verification is based on the legal obligation to combat money laundering (Article 6.1.c of the GDPR);
We share certain data relating to your Account (date your Account was created, number of sales attended, number of purchases, average amount of purchases, record of lots from recent purchases);
Where sales operators manage the payment of your auction purchases themselves, we send them the necessary information, such as the amount of your bid and the nature of the lot won.
As part of their legal obligations to combat money laundering and terrorist financing (AML/CFT)
applicable to transactions equal to or greater than €10,000 (Article L. 561-2, 14° of the Monetary and Financial Code),
sales operators are allowed to download and retain the identity documents of the successful bidders concerned
for the legally required period only (five years after the last transaction in accordance with Article L. 561-12 of
the Monetary and Financial Code).
These documents must be:
• stored securely with appropriate encryption;
• accessible only to duly authorised people within the Sales Operator;
• used exclusively to meet AML/CFT obligations and for the operational management of sales;
• deleted at the end of the legal retention period.
The Sales Operator understands and accepts that the conditions for collecting, storing, using and deleting identity documents may be audited by Drouot SI or its representative. In this case, it undertakes to provide the necessary access and information.
Information collected by Sales Operators may only be used for operational sales management purposes and not for marketing purposes. Sales Operators agree not to use this information for commercial prospecting.
We share your Data with our own service providers located in the European Union, in particular to perform services and actions on request and on behalf of Drouot SI, such as checking the validity of your telephone number or ID document, sending promotional and marketing emails or text messages or enabling you to manage your transactions.
Our service provider Selligent also uses your connection data to establish your preferences in terms of item categories. Drouot SI will thus be able to send you Newsletters corresponding to these preferences.
Where you have given your consent, our email delivery service providers (including Selligent and Sparkpost) process, on behalf of and on the instructions of Drouot SI as data processors, the data collected by the tracking pixels embedded in our emails. These service providers are not authorised to reuse this data for their own purposes.
Drouot SI also collects your personal data and, after hashing it, forwards it to Google, which performs customer-list targeting aimed at determining internet user profiles similar to our customers and displays targeted advertising to them. Only this data is transmitted to the United States.
The hashed data transmitted is as follows: email address, telephone number, first name, last name and mobile device ID.
Only the country and postal code are forwarded without being hashed.
We use and process your login data to identify, delimit and eliminate malfunctions and errors in telecommunication systems.
If the conditions are met, we may use the login data to detect any illegal use of telecommunication systems and services.
Once you have agreed to receive news from the Drouot Group, Drouot SI may collect your email address, surname, first name, language and pass ID and send them to its service provider Trustpilot A/S for the purpose of sending emails to gather feedback on the Services. Drouot SI may also use these reviews in other documents and promotional materials for advertising and marketing purposes.
As Drouot SI is a subsidiary of the Drouot Group, it may communicate your Data to any Drouot Group company in order to inform you about the services offered by Drouot Group companies.
In accordance with the legal provisions in force, Drouot SI may be required to provide information to the competent authorities and courts for the purposes of criminal proceedings. Drouot SI may not notify you of the disclosure of your Data to authorised third parties.
We retain your Data only for the period necessary for the performance of our Services and up to 3 years after the last use of your User Account.
After this 3-year period, Drouot SI may contact you again to invite you to log in to your Account within a period of 15 days. In the absence of positive and express action on your part, the Account will be deactivated and the related data will be deleted or anonymised in accordance with the legal provisions in force.
The data contained in the registration form for an in-person auction (surname, first name, email address, ‘verified identity’ status, timestamps) is retained under the same conditions.
Data collected via tracking pixels (date of opening, device type, email client) is retained for thirteen (13) months from the date of collection. Evidence of your consent or refusal is retained for the duration of the choice you have made and, in any event, for five (5) years from the date of collection, for evidential purposes.
In the event of a breach of the General Terms and Conditions of Use or this Privacy Policy, Drouot SI reserves the right to suspend your Account or to deactivate it definitively under the conditions described in the General Terms and Conditions of Use.
In the event of a payment default by a Bidder at the end of the reminder procedure described in the General Terms and Conditions of Use, you agree that Drouot SI will keep your Data on a blacklist of bad payers for a maximum period of 3 years in order to prohibit you from using our Services during this period.
If you are registered on this list, you will be informed at the time of registration.
If the incident is resolved, your Data will be completely removed from the blacklist.
In the event of a dispute concerning inclusion on such a list, the User may contact Drouot SI under the conditions described in article 12.
If you have created an Account and wish to close it, please write to us at the address shown in article 16.
Once your request has been received, we will deactivate your Account and delete or anonymise your Data within a maximum of two months from the date of your request.
In addition, in the event of failure to use your Account for more than 3 years, Drouot SI reserves the right to deactivate your Account, subject to sending a prior email inviting you to log in to your Account within 15 days. If you do not log in, we will deactivate it and delete or anonymise your Data, which will then only be used for internal statistical purposes.
We have implemented technical and organisational security measures to ensure the security, integrity and confidentiality of all of your Data, in order to prevent it from being lost, stolen, damaged, distorted or distributed to unauthorised persons.
In addition, you are responsible for keeping the password that allows you to access your Account confidential. Do not share this information with anyone. If you share your computer, don’t forget to log out before leaving the Platforms.
We do not have access to your password. We therefore cannot send you your password if you forget it. However, you can change it at any time on the Platforms via the password reset procedure.
We store your Data on servers located within the European Union.
A tracking pixel is a very small image embedded in the emails we send to you. When you open the email, this image is downloaded, which allows us to know that the email has been opened.
Like cookies, tracking pixels constitute trackers within the meaning of Article 82 of Law No. 78-17 of 6 January 1978, known as the ‘Data Protection Act’. Their use is therefore subject to your prior consent, unless an exemption is provided for by the regulations.
Subject to your consent, data collected via tracking pixels is used to:
This data is not used to target you outside of our emails, in particular on websites, mobile apps or other communication channels.
As an exception, and without your consent being required, we may use a tracking pixel in emails that you have expressly requested or that are necessary to provide a service you have requested, solely to ensure the delivery of these communications. For this purpose only, we may identify inactive email addresses in order to reduce or stop the sending of such communications. We retain only the date on which the email was last opened.
The data collected via tracking pixels are: the date the email was opened, the type of device used (computer, mobile, tablet) and the email client used.
This data is processed by Drouot SI, the data controller, and by its email delivery service providers acting as data processors, under the conditions described in the section ‘Recipients of the Data’.
Your consent is obtained via a tick box, which is not pre-ticked, when you create your Account or subscribe to the Newsletter. You can refuse to give your consent just as easily as you can give it.
You may withdraw your consent at any time, without this affecting the lawfulness of any processing carried out prior to such withdrawal, via your personal account (under the ‘communication preferences’ section) or by clicking on the link provided for this purpose at the bottom of each of our emails. Withdrawing your consent is just as simple as giving it and takes effect for emails sent to you in future.
Refusing to accept tracking pixels has no impact on your access to the Services or on the receipt of emails to which you have subscribed.
Cookies are text files stored in your browser. They are created when a User’s browser loads a given website: the site sends information to the browser, which then creates a text file.
Each time you return to the same site, the browser retrieves the file and sends it to the website server.
When you first visit one of the Platforms, a warning banner appears asking if you agree to the use of cookies while browsing. These cookies will be activated once you have given your permission.
Only cookies that are strictly necessary for the Platforms to function are placed without your consent. Other cookies, in particular audience measurement and marketing cookies, are only placed once your consent has been obtained, as demonstrated by a positive action on your part. Simply continuing to browse the site does not constitute consent.
You can also accept or reject these cookies, rejecting them is just as simple as accepting them, and change your choice at any time under the conditions described below.
Rejecting cookies that are not strictly necessary does not prevent you from continuing to browse the Platforms.
When you browse the Site, cookies may be placed on your device.
These cookies are used to:
Below you will find a list of the cookies used by the site, their purpose, how long they are kept and any further details:
| Cookie name | Purpose | Retention period | Remarks | Consent Required |
|---|---|---|---|---|
| _ga | Google Ads tags | 13 months | Not necessary | Yes |
| Locale | Stores the browsing language | Session | No | |
| Intercom | Chat | intercom-device-id-******: around 9 months intercom-id-******: around 9 months intercom-session-******: 7 days |
Necessary | No |
| Odin.acesToken | Login | 1 hour | No | |
| Odin.refreshToken | Login refresh | 1 month | No | |
| Access-token | User authentication | 1 hour | No | |
| Refresh-token | Authentication token refresh | 1 month | No | |
| Cf_clearance | Cloudflare protection and filtering | 1 year | No | |
| Lot liste mode | Display preference for list of lots | Session | No | |
| Sale list mode | Display preference for list of sales | Session | No | |
| utms | Tracking users from campaigns | 3 weeks | Used for internal statistical purposes | Yes |
| ShowMobileBanner | Display of the mobile banner for the Drouot app | 1 day | No | |
| SetPaymentLocalTransactionID | Stores a locally encoded transaction identifier | 1 hour | No |
The cookies we send allow us to:
compile statistics and volumes of visits and use of the various elements making up the Platforms (sections and content visited, navigation paths), enabling us to improve the relevance and ergonomics of our Services;
adapt how the Platforms are presented to the display preferences of your device (language used, display resolution, operating system used, etc.) during your visits to the Platforms, depending on the hardware and software used by your device to view or read content;
evaluate and improve our marketing actions.
Cookies placed on the Platforms fall into two categories:
You may at any time express, change or withdraw your cookie preferences via the cookie management tool accessible from the footer of the Platforms. Withdrawing your consent is as simple as giving it and takes effect from that point onwards.
You can also configure your browser to accept or reject all or some cookies. Please note that this setting may affect your access to Services that require the use of cookies.
Evidence of your consent or refusal is retained for a period of five (5) years for evidential purposes.
Your choice will be retained for a maximum of six (6) months, after which you will be asked to give your consent again.
The Data provided is necessary for the performance of the contract for the provision of Services to which you have agreed. You may therefore not withdraw your consent to the processing of Data necessary for the performance of the Service, unless you cease using the Services.
As soon as you register for an auction through a Sale Operator, Drouot SI will send you an automatic email confirming your registration.
If no response is received within the specified timeframe (24 hours), your participation will be deemed to have been processed on the basis of the performance of the contract for participation in the auction (Article 6(1)(b) of the GDPR), which authorises the processing of your data strictly necessary for the management of the auction.
However, you may consult, modify or request the deletion of your Data for legitimate reasons at any time using the contact details specified in article 16 below. These requests will be implemented within two months of your request. Since 25 May 2018, requests to restrict the processing or portability of the Data have been made under the same conditions.
You may also object at any time to the processing of your Data to which you have previously given specific consent for marketing purposes.
Drouot SI will provide you, free of charge, with information relating to the Data stored about you. Information may be provided electronically if you wish.
For your security, please understand that in the event of a request for information or modification, we need to verify your identity. Your ID document will not be retained following your request.
Drouot SI undertakes to notify all recipients of the Data processing of your request.
You have the right to compile guidelines, to which you have specifically consented, relating to the retention, erasure and disclosure of your Data after your death. You may change or revoke these guidelines at any time.
You may appoint a person to carry out your guidelines. Upon your death, this person will have the authority to consult the guidelines and request that they be implemented by Drouot SI. Where you have made no such designation or, unless otherwise directed, in the event of the death of that person, your heirs have the capacity to read your guidelines and request that Drouot SI implement them.
In the absence of any guidelines or of anything to the contrary in your guidelines, your heirs may exercise your rights to the extent necessary for the following purposes:
the organisation and settlement of your estate. As such, your heirs may access the Data processing concerning you in order to identify and obtain information useful for the liquidation and sharing of the estate. They may also be provided with digital goods or family-related data that can be passed on to heirs;
Drouot SI’s processing of your death. For this purpose, your heirs may have your Accounts closed, object to the continued processing of Data concerning you or have it updated.
When requested by your heirs, Drouot SI shall provide evidence, at no cost to the applicant, that the actions required by the heirs have been carried out.
Disagreements between heirs regarding the exercise of these rights will be brought before the competent High Court.
Drouot SI reserves the right to amend the Privacy Policy at any time, and this remains applicable for the entire duration of the use of the Platforms and Services. In the event of a change, Drouot SI will inform you by email.
If you decline such changes, you agree to cease using the Services. Otherwise, your use of the Services is subject to the terms of the new version of the Privacy Policy.
Where you access the Services after being notified by Drouot SI of the new version of the Privacy Policy, you are deemed to have accepted this new version of the Privacy Policy in full.
The new version of the Privacy Policy applicable to the Services is available on the Platforms. Drouot SI invites you to consult this regularly.
Drouot SI also reserves the right to modify or suspend, without giving any reason, all or part of the Services.
No compensation is payable to you for any modification or deletion of the Services.
In the event of a dispute concerning the use of your Data, you may refer the matter to the French National Data Protection Authority (CNIL).
You can send any questions about your Data and how we use it directly to: info@drouot.com or to the following postal address: Drouot SI – 18 boulevard Montmartre – 75009 Paris.
If you want to delete your Account or to exercise your right to object, question, access, correct or remove the Data, you can contact us at the same addresses under the conditions described in article 12 above.