Participant data protection policy

Last updated on September 30, 2026

This text is a translation, provided for information purposes. Only the original French version is authoritative: in the event of any discrepancy, it shall prevail.

Applies to everyone who takes part in an event

What is personal data?

A last name, a nickname, an email address, a phone number, or any information that makes it possible to identify a person, is personal data. A piece of data combined with another can also become personal data: a mere first name, associated with another piece of information.

Those involved in an event

People who play or take part in an event, on their phone or at a kiosk, are referred to below as PARTICIPANTS, or as WINNERS when they win a draw. The person who organizes the event is the ORGANIZER. The randraw.studio site is referred to as the DATA PROCESSOR: it provides the ORGANIZER with the tool that brings the event to life, and stores the ORGANIZER's data.

To summarize what follows: it is the ORGANIZER who is the data controller for the data of their PARTICIPANTS. We act only on the ORGANIZER's instructions.

Who processes the data of an event?

The ORGANIZER is the only one who knows the nature of the data they collect, its purpose, and the grounds that authorize them to display it. It is up to the ORGANIZER to inform the PARTICIPANTS and, where the law so requires, to obtain their consent.

It is for the ORGANIZER to give this information, for instance in the text of one of the two consent checkboxes they can add to their form.

What the ORGANIZER may collect

The ORGANIZER chooses, event by event, what they ask of their PARTICIPANTS: a first name and a last name, or a nickname; an email address; a phone number; a free-text answer to a question written by the ORGANIZER; the answers to the questions of a quiz; two consent checkboxes whose text is written by the ORGANIZER. We do not record the PARTICIPANT's IP address at registration.

Where is this data stored?

• on the server of the ORGANIZER's studio, in the region of their plan;
• the event screen displays only the names or nicknames. Email addresses, phone numbers and consent checkboxes are visible only to the ORGANIZER, who can export them to a file;
• on the PARTICIPANT's phone, a 7-day cookie identifies their participation. It is valid only for the address of the form; we keep only its encrypted fingerprint. On a bingo card, the marked squares are stored in the device's browser.

Publication of names

By default, nothing is public. The ORGANIZER may publish, scene by scene, the result of a draw: a page at an unguessable address, which is not indexed by search engines, and which displays the names of the WINNERS (for a tournament, those of the group the ORGANIZER declares).

Retention and erasure

The data of an event is kept for as long as the ORGANIZER does not erase it and their account exists. The ORGANIZER may delete the results of a session: the PARTICIPANTS' answers and the draws are erased. Closing the account erases all of the ORGANIZER's events and their participants.

Social networks

The ORGANIZER may connect their Facebook, Instagram or LinkedIn account to import the names of people who have commented on or liked a post. These names are then the ORGANIZER's data, for which the ORGANIZER is answerable.

Sensitive data

It is prohibited to collect sensitive data: health data, sexual orientation, ethnic origin, political or religious beliefs, or any other data of a highly personal nature, in particular through the form's free-text question.

Our advice to the ORGANIZER

• ask only for what the event needs;
• inform the PARTICIPANTS of the use that will be made of their data;
• publish only the WINNERS, and with their consent;
• delete the results and the registrants once the event is over.

Right to withdraw and complaints

To exercise your rights over your data (access, rectification, erasure, withdrawal), contact the ORGANIZER of the event in the first instance: the ORGANIZER is the data controller, and can modify or delete the data from their account area.

If you wish to report sensitive data or a publication that should not exist, or if the ORGANIZER does not respond, write to us through the contact form. If your rights are still not respected, you may lodge a complaint with the CNIL.