This English version is provided for information purposes only. In the event of any discrepancy, the French version prevails, and these terms are governed by French law.
The randraw.com website is hereinafter referred to as the PUBLISHER
Persons registering on the site are hereinafter referred to as the ORGANISERs, in the sense of the organiser of a prize draw.
To summarise what follows, we process the strict minimum of personal data and we do not share it.
It is understood that the PUBLISHER, and the PUBLISHER alone, is responsible for processing the personal data of the ORGANISERs.
Personal data is collected via the site's forms.
- surname and first name: to personalise our communications with you and for invoicing.
- date of birth: to verify age and deny access to minors. If you are over 13 years old, you may provide only your year of birth; that is sufficient for us.
- email address: to enable you to log in to the site and to facilitate our communications with you.
- password: to enable you to log in to the site; we store it in its encrypted form using a cryptographic salt.
- Google identifier: if you decide to link your account with a Google account.
- Facebook identifier: if you decide to link your account with a Facebook account.
Without this being a legal obligation, we inform you that we also keep:
- truncated IP addresses: for checking and issuing the certificate of integrity; in the absence of any dispute, IP addresses are deleted after 30 days.
- the dates on which forms are submitted: to manage the dates on which data is deleted.
- the time at which prize draws are entered: to alert the user that they have recently carried out a draw.
We have a server hosted in France for storing the data of our European customers. This server is subject to the GDPR.
We have a server hosted in Canada for storing the data of our North American customers. This server is subject to PIPEDA.
There is no exchange of data between our two servers.
All the data we hold on ORGANISERs is displayed on the profile page of each ORGANISER's account. The rights of access and rectification are also exercised from this page.
We do not share your data.
Our payment partner, in its capacity as a subcontractor, may receive data strictly within the scope of its mission.
The authorities are entitled to ask us to share data in cases of strict necessity that are clearly substantiated, in particular in order to combat conduct punishable before the courts.
Unless otherwise indicated, data is kept until you close your account.
The law requires us to keep accounting records, in particular customer invoices, for a period of 10 years.
You may close your account to obtain the complete erasure of your data; the erasure of the data is carried out within 30 days.
In the event of a dispute, we reserve the right to keep the data until the dispute is closed, for the sole purpose of preserving our rights.
During the 30 days, your data is stored in an archive table; we consult this archive table for the strict necessity of preventing a new account from being created with your email address.
After the 30th day, your data is deleted from the archive table and it is then possible for you to register again with your email address.
Without this being a legal obligation, we offer you the possibility, from your profile page, of setting your right to be forgotten over a period of one, two or three years.
It is understood that, as regards prize-draw data, only the ORGANISER knows the nature of their data; it is therefore the ORGANISER, and the ORGANISER alone, who is responsible for processing this data.
The PUBLISHER acts on the data according to the instructions of the ORGANISER, in a strict role of subcontractor.
On this subject, we invite you to read our data protection policy for online prize draws.
The DPO is the Data Protection Officer.
- Given the small amount of personal data that we process.
- Given that we do not trade in this personal data, that we do not receive any from any partner and that we do not send any to any partner.
We have made the responsible and lawful choice not to appoint a DPO.
As recommended in particular by the CNIL and regarded as good practice in Web hosting, we carry out, through our hosting provider, a daily backup (backups) of the site. We thus hold 15 automated backups, always corresponding to the last 15 days of the site's operation.
For any request concerning data protection, you may first contact us via the interface on your profile page. If, after contacting us, you consider that your rights over your data are not being respected, you may lodge a complaint with the CNIL (the French data protection authority).