Data protection

Personal Data Protection Policy

Last updated: October 2026

This Policy covers the processing of personal data carried out through the corporate website https://www.france-galop.com and through the ticketing and events website https://billetterie.france-galop.com, including its purchase pages (https://tickets.france-galop.com). Both websites share a single France Galop account.

The shop website https://boutique-francegalop.com has its own privacy policy, available directly on that website.

All processing of your personal data complies with the applicable regulations, in particular Regulation (EU) 2016/679 (GDPR) and the amended French Data Protection Act No. 78-17 of 6 January 1978 (loi « Informatique et Libertés »).

Contents

1. Data controller and Data Protection Officer
2. Purposes, legal bases and retention periods
3. Data processed
4. Sources of the data
5. Mandatory and optional data
6. Recipients of the data
7. Transfers outside the European Union
8. Profiling and personalisation
9. Your rights and how to exercise them
10. Security and confidentiality
11. Cookies and trackers

I. Data controller and Data Protection Officer

FRANCE GALOP, whose registered office is at 15 boulevard de Douaumont, CS 64440, 75819 Paris Cedex, France, is the data controller for the processing of personal data carried out through the websites listed above.

FRANCE GALOP has appointed a Data Protection Officer (DPO), who can be contacted at contact-data-protection@france-galop.com or by post at: FRANCE GALOP – DPO, 15 boulevard de Douaumont, CS 64440, 75819 Paris Cedex, France.

II. Purposes, legal bases and retention periods

The table below sets out, for each purpose, the website concerned, the legal basis and the retention period. The data processed are listed in section III.

III. Data processed

Depending on the purpose, FRANCE GALOP processes the following categories of data:

• France Galop account: surname, first name, email address, login credentials, account creation and last login dates. On the ticketing website, where applicable: title, date of birth, telephone number, country of residence, postcode and language.
• Orders: identity, contact details, country and postcode, payment method information, purchase history, connection data, language.
• Newsletters and communications: surname, first name, email address, proof of consent; on the ticketing website, where applicable: title, date of birth, telephone number, country and postcode.
• Tracking pixel: email opening and interaction data.
• Alerts and follow-up: surname, first name, email address, proof of consent, horses, content or events followed.
• Competitions: surname, first name, email address, telephone number, social media identifiers where applicable, participation and scores, country and postcode.
• Customer insight: purchase and order data, identity, contact details, location, interactions with communications and services.
• Improving offers: logs, browsing data, interactions with campaigns, survey responses, purchase or attendance data where applicable.
• Contact requests: title, surname, first name, email address, telephone number where applicable, subject and details of the request, information needed to reply (for example an order), request status.
• Statistics and security: technical logs, browsing data, information about your device and the pages viewed.

IV. Sources of the data

Personal data come mainly from you, when you create an account, buy a ticket, use an online service, fill in a form, subscribe to a newsletter or alert, enter a competition, contact FRANCE GALOP or interact with its communications.

Some data are generated when you use the websites: connection and browsing data, technical logs, and interactions with emails, alerts, campaigns or features.

Where necessary, some data come from service providers acting on behalf of FRANCE GALOP (ticketing, authentication, hosting, maintenance, payment, email delivery, audience measurement, campaign management, event organisation).

In some cases, data may come from third-party platforms or partners, for example when you interact with FRANCE GALOP on a social network or enter a competition run on a third-party platform. FRANCE GALOP then ensures that you receive appropriate information, either directly or through the third party concerned.

V. Mandatory and optional data

Mandatory form fields are marked with an asterisk or another equivalent means. If mandatory information is not provided, FRANCE GALOP may be unable to create your account, process your order or reply to your request.

Optional data are used only to improve the service, make exchanges easier or personalise your experience. Not providing them does not prevent access to the main service, unless otherwise justified at the time of collection.

VI. Recipients of the data

The data are accessible only to the persons and organisations that need them, within the limits of their duties:

• authorised FRANCE GALOP departments (communication, marketing, ticketing, customer relations, IT, legal, accounting, security and the departments concerned by your request);
• technical service providers responsible for hosting, maintenance, authentication, security and operation of the websites;
• ticketing, account management, order management and payment service providers;
• providers of email delivery, notifications, newsletters, marketing campaigns, audience measurement and statistical analysis;
• service providers involved in organising competitions, activities, surveys or events.

These providers process the data only on FRANCE GALOP’s instructions and for the purposes of the services entrusted to them. Where required by law, data may also be disclosed to the competent administrative or judicial authorities.

VII. Transfers outside the European Union

FRANCE GALOP gives preference to service providers located in the European Union or the European Economic Area. However, some providers (audience measurement, social networks, payment, ticketing, authentication, campaigns or third-party content) may involve access to the data or a transfer outside the European Union.

Such transfers are then covered by appropriate safeguards: an adequacy decision of the European Commission, standard contractual clauses, binding corporate rules or any other recognised mechanism. Information on these safeguards is available on request at contact-data-protection@france-galop.com.

VIII. Profiling and personalisation

FRANCE GALOP may segment or personalise its communications, offers, content, surveys or services based on your preferences, age group, geographical area, purchases, interactions with its emails, participation in operations, or browsing where you have accepted the relevant cookies.

You may object to such processing at any time where it is based on FRANCE GALOP’s legitimate interest, or withdraw your consent where it is based on consent.

FRANCE GALOP does not make, through its websites, any decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

IX. Your rights and how to exercise them

You have the following rights over your data:

• right of access and rectification;
• right to erasure, in the cases provided for by law;
• right to restriction of processing;
• right to object to processing based on legitimate interest, on grounds relating to your particular situation;
• right to object to direct marketing, at any time and without giving reasons;
• right to withdraw your consent at any time;
• right to data portability, where processing is based on your consent or a contract and is carried out by automated means;
• right to give instructions on what happens to your data after your death.

To exercise these rights, write to FRANCE GALOP’s DPO at contact-data-protection@france-galop.com or to the postal address given in section I. You may also withdraw your consent to newsletters, alerts and offers via the unsubscribe link in each email, and to email open tracking via the “Manage my email tracking” link.

Where you object to direct marketing, FRANCE GALOP keeps the data strictly necessary to maintain an objection list and avoid contacting you again.

If, after contacting FRANCE GALOP, you consider that your rights have not been respected, you may lodge a complaint with the French data protection authority (CNIL): https://www.cnil.fr.

X. Security and confidentiality

FRANCE GALOP implements appropriate technical and organisational measures to protect the data against destruction, loss, alteration, unauthorised disclosure or access: access rights management, authentication, logging, secure environments, backups, awareness training for authorised staff and contractual safeguards with service providers.

Persons authorised to access the data are bound by a duty of confidentiality.

XI. Cookies and trackers

XI.1 What is a cookie?

A cookie is a file stored by your browser when you visit a website. It allows the website to recognise your device and remember information useful for your visit. It cannot read the data on your hard drive.

XI.2 Which cookies do we use?

Strictly necessary cookies: they allow you to browse the websites, remember your cookie choices, protect the websites against spam and display pages correctly. They are based on FRANCE GALOP’s legitimate interest and cannot be disabled. They are kept no longer than your browsing session, except the cookie that stores your choice, which is kept for 6 months.

Functional cookies: they improve your experience (for example, remembering your preferences or playing videos). They require your consent.

Audience measurement and performance cookies: they count visits, identify traffic sources and help improve the websites. They require your consent, unless strictly limited to exempt audience measurement.

Marketing cookies: set by FRANCE GALOP or its advertising partners, they personalise advertising on our websites and on other websites. They require your consent.

Cookies that require consent are kept for a maximum of 13 months. Some partners (for example social networks) may transfer data outside the European Union, under the conditions described in section VII. Details of the cookies by category are available in the cookie management tool.

XI.3 How can you manage your preferences?

You can accept or refuse cookies on your first visit, then change your choice at any time via the “Cookies” link (corporate website) or “Informations cookies” link (ticketing website) at the bottom of each page. Your choice is kept for 6 months, after which you will be asked again.

You can also set your browser to refuse cookies or to alert you when a cookie is set. Some features of the websites may then no longer be available.