Pursuant to Art. 36, the Law on the Conservation of Cultural Heritage (code du patrimoine) provides for regulations regarding the security of data processing for the purposes specified in Art. 89 GDPR, as well as for storage and deletion periods.
Under Art. 32 III al. 2, no information obligations need to be fulfilled if the data is subsequently processed for purposes in accordance with Art. 89 GDPR.