Data controller
The controller of the personal data collected on the platform is Dossard Club.
- Dossard Club (SARL) — RCS Paris 938 508 710
- Registered office: 60 rue François 1er, 75008 Paris, France
- Contact: alexis@dossardclub.fr
Data collected
We collect only the data necessary to provide Dossard Club’s services.
- Identity and contact data: surname, first name, email, telephone
- Event registration data: information requested by the organiser
- Data relating to use of the platform: technical logs, browsing information
- Payment data processed by secure service providers (Dossard Club does not retain full bank card numbers).
- Photos taken during events and published in their gallery by the organizers or the photographers they invite, without the files’ metadata (location, camera).
Purposes and legal bases
Processing is carried out for specified, explicit and legitimate purposes.
- Management of registrations, ticketing and event follow-up — Performance of the contract
- Management of payments and accounting obligations — Legal obligation / performance of the contract
- User support and handling of requests — Legitimate interest
- Sending of operational information relating to events — Performance of the contract
- Audience measurement and service improvement — Consent (where required) or legitimate interest, depending on the purpose.
Recipients of the data
The data is accessible only to authorised persons, in particular:
- Dossard Club’s internal teams responsible for operating the platform
- Event organisers, strictly within the scope of managing their events
- Technical and hosting processors (in particular Cloudflare and Supabase), acting on the instructions of Dossard Club.
Retention period
Data is retained for a period proportionate to the purposes pursued.
- Account and registration data: for the duration of the active relationship, followed by limited archiving in accordance with the applicable obligations
- Billing and accounting data: retained in accordance with the legal obligations in force
- Technical logs: retention limited to what is necessary for security and proper operation.
- Event photos: deleted two years after the event.
Your rights
In accordance with the GDPR and the French Data Protection Act (loi Informatique et Libertés), you have the following rights:
To exercise your rights, contact us at alexis@dossardclub.fr.
Anyone who appears in an event photo can ask for its removal from the gallery: the event’s organizer reviews the request and the answer is sent by email.
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object
- Right to data portability (where applicable)
- Right to set directives concerning what happens to your data after your death.
Security and transfers
Dossard Club implements appropriate technical and organisational measures to protect personal data.
Where certain processing involves transfers outside the European Union, such transfers are governed by appropriate legal mechanisms (in particular the European Commission’s standard contractual clauses, where necessary).
Complaint to the CNIL
If, after contacting us, you consider that your rights are not being respected, you may lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).