Privacy policy
Privacy policy of the French Tennis Federation
Privacy and security are of the utmost importance to the FFT and we strive to ensure that the technical and organisational measures we put in place respect your data protection rights.
This Privacy Policy describes our rules regarding the management, processing and storage of personal data submitted as part of the services offered by the Rolex Paris Masters application (the "Application").
The term "personal data" refers to information relating to an identified or identifiable natural person.
Consent
By using the services of the Application or by filling out a contact form on the Application or on any other applications/websites published by the FFT, you accept that the FFT may collect, store and/or use, where necessary, personal data submitted in accordance with the rules stated below.
By giving us your consent, you have the right to rectify, the right to be forgotten and/or the right to delete your personal date.
Identity of the data controller
The personal data that may be collected via the Application are done so by the French Tennis Federation (the "FFT"), an association governed by the French law of 1st July 1901 (intra-community VAT number: FR 63 775 671 381), recognised as having a public purpose by a decree dated 13th July 1923, and whose registered office is at Stade Roland-Garros – 2, avenue Gordon-Bennett – 75016 Paris.
Identity of the Data Protection Officer
The FFT’s Data Protection Officer is Mr Ibrahima Souaré (Email: dpo@fft.fr).
Personal data collected via the Application
Some personal data about you is automatically collected as a result of your actions on the Application (see our trackers policy). In addition to this, when you register for or use the services offered by the Application, the following data may be collected and processed:
- Account/profile creation: when you create your account/profile, your personal details, first name(s), last name(s), e-mail address, telephone number(s) and login details are recorded;
- Connexion to the Application: on this occasion, your navigation or location data are recorded (with your consent if necessary);
- Contact: when filling in a contact form via the Application, your first name(s), last name(s), e-mail address are collected.
In any event, we never collect any sensitive personal data, such as government-issued identifiers (social security number, driving license number, tax identification numbers, etc.), full bank card numbers or bank account details, medical files or any information relating to care requests associated with individuals.
Purpose of data processing and legal grounds
The main purpose of collecting your personal data is to offer a safe, optimal, efficient and personalised experience. To this end, you authorise us to use your personal data to:
- optimise the layout and functioning of the Application, to anticipate and resolve any problems and thus improve access to and use of the Application, as well as the use of our services;
- provide services and facilitate their implementation, which includes carrying out any required checks about you;
- check and authenticate your data;
- personalise, evaluate and improve our services, content and documentation;
- analyse the level of activity and the history of your use of our services;
- to inform you about our services and those of our partner companies;
- prevent, detect and investigate any potentially prohibited and illegal activity or any activity that goes against good practice, to fight against fraud, abusive use, viruses and other malicious software, and ensure adherence with our terms and conditions of use;
- manage our relations with you;
- to set up and manage a communication space between users of the Application;
- provide assistance to users;
- provide personalized content and services, based on your browsing history, preferences and interests;
- send commercial information and advertising messages, based on your browsing history, preferences and interests;
- respect our legal and regulatory obligations.
For our newsletters and other prospecting/solicitation emails that we send you, we will process your personal data on the basis of the explicit consent you have given for this purpose, if applicable (unless the prospecting/solicitation emails concern products and/or services similar to the products and/or services that you have previously ordered).
We will only process or use your personal data for the aforementioned purposes.
When certain information is required to access specific features of the Application, this requirement is indicated at the time of data entry. If you refuse to provide mandatory information, you may not be able to access certain services, features or topics of the Application.
Recipients of your data
The personal data concerning you collected on the Application by or on behalf of FFT is collected for the specific purposes of FFT, which is the recipient. Access to your personal data is strictly limited to authorized persons of the FFT, authorized by virtue of their functions and bound by an obligation of confidentiality.
However, your personal data may be processed on behalf of the FFT by, or disclosed to, subcontractors who are contractually responsible for performing the tasks necessary for the proper functioning of the Application and its services, as well as for the proper management of the relationship with you, or disclosed by the FFT to subcontractors, without you needing to give your consent. It is specified that, in the context of the performance of their services, subcontractors have only limited access to your data and have a contractual obligation to use them in accordance with the applicable legal and regulatory provisions regarding personal data protection.
With the exception of the aforementioned cases, we will not disclose your personal data to any third parties, unless: (1) you ask us or authorise us to disclose this information; (2) we are required to disclose the information in order to process transactions or provide the services you have requested; (3) the FFT is required to do so by a governmental authority or regulatory authority, in the event of a judicial requisition, a subpoena, or any other similar governmental or legal demand, or to establish or defend a legal request; or (4) the third party is acting as an agent or subcontractor of the FFT in the performance of the Application’s services (for example, the FFT uses service providers for the use of tags and the placement of cookies).
Your rights regarding the protection of your data
In accordance with the updated French law of 6th January 1978 regarding data-processing, data files and individual liberties, as well as Regulation (EU) 2016/679 of 27th April 2016, you have the following rights:
To exercise your access rights, in order to find out the nature of the personal data that concerns you;
- To ask for your data to be updated, if it is incorrect;
- To request the portability or removal of your data;
- To ask for a restriction on how your data is processed;
- To oppose, for a legitimate reason, the processing of your data.
You may exercise your rights either by writing to the following address: Service Clients – Fédération Française de Tennis – Stade Roland-Garros – 2 avenue Gordon-Bennett 75016 PARIS, by sending an email to: billetterie.rpm@fft.fr, or by contacting the FFT’s Data Protection Officer (Email: dpo@fft.fr). Your request will be processed within 30 days. For security reasons, and in order to prevent any fraudulent requests, we may ask you to provide valid proof of identity and/or proof of authority to support your request.
For any further information or to make a claim, please contact the Commission Nationale de l'Informatique et des Libertés (the French data protection authority: more information at www.cnil.fr ).
Retention period
Your personal information is stored in active databases, log files or other types of files for the time necessary to provide our products and services, the validity period of your user account, the performance of our services unless you exercise, under the conditions set out above, one of your statutory rights, or if a longer retention period is permitted or required under a legal or regulatory provision.
During this period, the Application sets up the organisational, software, legal, technical and physical means to ensure the confidentiality and security of your personal data, in order to prevent their damage, deletion or unauthorised third parties from accessing them.
You will be able to access your personal data as long as your account remains active and for a period that may vary depending on the type of data involved. Your event data (statistics for example) will be deleted every 13 months while the account remains active. The content of your messages will only be stored for a period of 6 days. Other data may be deleted at any time during active use of your account, in accordance with the provisions set out above.
Data transfer outside the EU
Some of the recipients of the personal data collected are located outside the European Union (in the United States). The following guarantees have been taken to ensure a sufficient level of protection of personal data: the transfer is governed, in accordance with the requirements of European Regulation No 2016/679/EU of 27 April 2016, by standard protection clauses adopted by the European Commission.
Transfer
We undertake to inform you immediately, insofar as we are legally authorised to do so, in the event of a request from an administrative or judicial authority concerning your data.
Security
As part of our services, we attach the highest importance to the security and integrity of our customers' and users' personal data.
Thus, and in accordance with the GDPR, we undertake to take all necessary precautions to preserve the security of your data, and in particular to protect them against any accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access, as well as against any other form of unlawful processing or communication to unauthorised persons.
To this end, we implement industry standard security measures to protect your personal data from unauthorized disclosure.
In addition, in order to prevent any unauthorized access, to guarantee the accuracy and proper use of data, we have put in place appropriate electronic, physical and managerial procedures to safeguard and preserve the data collected in the course of using our services.
Nevertheless, no one can consider themselves completely safe from a pirate attack. This is why, in the event that a security breach should impact you, we undertake to inform you as soon as possible and to make our best efforts to take all possible measures to neutralize the intrusion and minimize its impacts. In the event that you suffer damage as a result of the exploitation of a security breach by a third party, we undertake to provide you with all the necessary assistance to enable you to assert your rights.
Modification of the privacy policy
The FFT reserves the right to update this Privacy Policy at any time, including in response to changes in applicable laws and regulations. You will be notified of any changes made via the Application or by e-mail, as far as possible at least thirty (30) days before they take effect. We recommend that you check these laws and regulations from time to time to stay informed about our procedures and rules regarding your personal information.
Contact us
Visit our contact page (https://www.rolexparismasters.com/fr/contact) if you have any questions.
You can also contact the FFT Data Protection Officer directly by email (dpo@fft.fr), or by post to: "Fédération Française de Tennis : Délégué à la Protection des Données – Stade Roland-Garros, 2 avenue Gordon-Bennet – 75016 Paris, France."

