This English version is provided for information purposes only. In the event of any discrepancy, the French version prevails, and these terms are governed by French law.
Persons visiting the site without registering and without giving their consent to the data protection policies are hereinafter referred to as USERS.
Persons visiting the site without registering and without giving their consent to the data protection policies are hereinafter referred to as USERS.
The randraw.com website is hereinafter referred to as the PUBLISHER.
To summarise what follows, we do not process any USER data.
When a prize draw is carried out by a USER, the draw runs in the USER's browser. We therefore collect no data relating to the prize draw. We only reserve the right to send a small statistical counter to our servers, entirely anonymous, whose sole purpose is to gather statistical data for the improvement of the service.
From time to time, we use Matomo Analytics in self-hosted mode.
Matomo Analytics is used to create anonymised statistics for the sole purpose of improving our services.
A cookie to manage your session is also created; this cookie identifies you as a simple USER of the site or as an ORGANISER.
For short periods, and for the purpose of improving the user interface, we may use a heat map
The technical solution will be self-hosted.
As at the date this policy was last updated, we have never yet used a heat map.
Most websites use third-party services that track you from site to site.
We have chosen not to use this type of service.
Links to Facebook, Twitter, etc. only track you if you click on them. These links are clearly identifiable.
Links such as “Sign up with Google” only track you if you click on them. These links are clearly identifiable.
We use a CDN service, since a guidance note from the CNIL (the French data protection authority) recommends their use in order to improve performance and to anticipate DDoS attacks.
CDN services reduce the environmental footprint of our website.
IP addresses are regarded by the GDPR as personal data.
That is why we keep IPv6 addresses truncated of their last two octets (IPv4 addresses truncated of their last character) over a rolling period that rarely exceeds one day and very rarely three months.
The sole purpose of this retention is to remove repetitive actions from our statistics.
A truncated IP address is regarded as an anonymous IP address. Its retention is exempt from the consent requirement under the GDPR.
On login pages, we use your IP address to geolocate you; the solution is self-hosted and your IP address is not retained. The purpose of this geolocation is to redirect you to the server for your geographical area. (America or Europe)
In the event of a server error or a 404 page, log files may record your IP address; these logs are a legal obligation.
In addition to our partner OVH, which provides our servers, we keep one month of logs on our side.
For any request concerning this data protection policy, you may:
- contact us publicly via the feedback forms.
- contact us privately by registering on the site.
If, after contacting us, you consider that your rights over your data are not being respected, you may lodge a complaint with the CNIL (the French data protection authority).