Privacy Policy
Last updated : 01.04.2026
WHO ARE WE?
In this policy, the terms “we”, “us” or “our” refer to Amaury International Team LIMITED, whose registered office is Fifth Floor Rear, Connaught House, 1 Burlington Road, Dublin 4, D04C5Y6, Ireland, company No. 7992009.
The Ballon d’Or is the most prestigious award in the world, granted since 1956 to the best football player of the year. Our website is intended for all persons over 18 years of age who wish to take part in this celebration.
OUR COMMITMENTS:
We undertake to:
Protect your personal data in compliance with the applicable European regulations;
Keep you informed of everything you need to know about your data;
Respect your choices and preferences;
Not retain your data without a valid reason.
To honor our commitments to you, we have implemented appropriate technical and organizational measures to prevent any unauthorized access and any unnecessary retention of personal data in our systems. However, no system is infallible.
To protect your user account, you must not share your login credentials with other people.
1. About this Policy
The purpose of this policy is to inform you of:
The types of data that we collect about you;
The reasons why we use and share your data;
The rights attached to your data and how you can exercise them.
This policy is separate from our Terms of Services and our Voting Standard Terms & Conditions.
It reflects our data collection and processing practices and may be amended over time to adapt to regulatory and technical developments.
2. What data do we collect about you and how do we collect it?
We collect data about you when you use our website and/or our mobile application.
The data we process fall into four main categories:
Data that you provide to us directly;
Technical data that we collect automatically;
Data that we collect from third parties;
Data that we infer.
2.1.1. Data that you provide to us directly:
Your data may be collected in particular when:
Creating an account;
Accepting to receive news and offers from our partners;
Subscribing to our services;
Casting your vote;
Taking part in one of our quizzes or games;
Interacting with our services;
Browsing the internet through the reading of cookies or by clicking on advertisements relating to our services.
Depending on what you provide to us, such information may include:
Identity data (last name, first name, username/alias, image);
Contact details (postal address, phone number, email);
Your purchases (order details, purchase history);
Your preferences (favorite items, declared interests);
Payment data (billing details, payment card data).
2.1.2. Technical data that we collect automatically:
We collect technical data when you use our website and/or our application. Different technologies or trackers may be implemented to collect these data. We generically refer to them as “cookies” (see our cookie policy here).
Technical data include, in particular:
Information about the devices you use, including:
Device identifiers;
Browser settings;
Operating system;
Online identifiers such as an IP address;
Information about your approximate or precise location.
2.1.3. Data that we collect from third parties:
We may collect data from third parties who have obtained your prior consent.
The information we collect from third parties includes, in particular:
Information about your declared preferences with our affiliates or business partners;
Information derived from your use of social networks.
2.1.4. Data that we infer:
We may establish, by reconciling the data we hold about you and by making assumptions, the content and services most likely to meet your interests and previous uses.
The data that we infer include, in particular:
Information about your presumed preferences;
Information enabling us to tailor our communications and make recommendations to you.
We do not process special categories of data such as political opinions, religious or philosophical beliefs, health data, or sexual orientation.
3. WHAT PURPOSES DO WE PURSUE?
We only use your personal data in the cases provided for by applicable legislation. Below are the legal bases on which we rely:
Your consent: when we ask you to actively provide your agreement to use your personal data for a specific purpose;
Our contractual commitments: when processing your data is necessary to comply with the obligations arising from a contract we have entered into with you (such as our Voting Standard Terms & Conditions), or to verify information before entering into a new contract with you;
Our legitimate interests: when the use of your data is necessary and justified by commercial and business reasons from our perspective, taking into account any potential risks to you;
Our legal obligations: when we must process your personal data to comply with applicable law.
The table below explains the purposes we pursue, the associated legal bases, and the retention period for the relevant processing :
| Purposes | Retention Period | Legal Basis |
|---|---|---|
| Manage the account and related communications Create and manage the Ballon d'Or accountManage subscriptions/unsubscriptions to subscribed services | 3 years from the last contact initiated by the data subject | Performance of a contract |
| Publish comments on the Ballon d'Or discussion space | Duration of the account | Performance of a contract |
| Manage purchases and related communications Process purchasesSend information relating to purchases and payments | 3 years from the last contact initiated by the data subject | Performance of a contract |
| Manage accounting and customer payments Send and retain information relating to purchases and payments | 10 years following termination of the contract | Legal obligation |
| Manage customer order logistics Provision (physical and/or digital) of the Team’s services and products to its customers | Duration of the account | Performance of a contract |
| Process and substantiate bank payments (Payment card data excluding the security code) | During any withdrawal period+ Until the final due date+ 15 months in intermediate archiving | Performance of a contractLegal obligation |
| Manage customer and user support Provision of customer serviceHandling complaints, information requests, and technical issues | Duration of the account | Performance of a contract |
| Build customer loyalty among Ballon d'Or users Send editorial communicationsSend commercial offers tailored to declared interests | Duration of the account or until withdrawal of specific consent | Consent |
| Organise games and quizzes Offer games and quizzesSelect winners and distribute prizes | Duration of the account | Consent |
| Maintain suppression lists Fraud prevention lists | 5 years from the date the fraud is identified | Legitimate interest |
| Track activity via cookies and trackers Measure site audienceAdapt and improve the website and applicationFacilitate access to relevant content | 25 months from data collection | Consent or exemption from consent (CNIL guidelines) |
| Deliver Ballon d'Or advertisements on third-party websites and applications | 6 months after consent | Consent |
| Provide personalised advertising to registered users | 6 months after consent | Consent |
| Send partner offers from Ballon d'Or | Duration of the account or until withdrawal of specific consent | Consent |
| Respond to GDPR data subject rights requests | 5 years from closure | Legal obligation |
Note: Retention periods are subject to applicable additional legal obligations.
4. WHO HAS ACCESS TO YOUR DATA?
The table below explains the categories of recipients with whom we may share your data and the reasons for such sharing.
Category of Recipients | Reason for Sharing |
Social networks (such as Ballon d’Or social networks) | To allow you to share content with your contacts; and to enable you to log in simply and easily without having to create an account specifically with us. |
Technical service providers (such as Sportal) | To provide us with IT software and ensure its maintenance. |
Analytics tools and search engines (such as Google Analytics) | To improve the performance of our website and/or our application. |
Payment partners (such as Stripe) | To process your payments and for anti-fraud purposes. |
Business partners (such as L’Equipe, Nexo, UEFA or Sport Federations and Leagues) | To send you advertisements and marketing content. |
Competent authorities and advisors (such as lawyers, accountants etc.) (such as the Data Protection Commission) | To comply with our legal obligations and defend our rights and interests. |
If you would like to know more about the third parties with whom we may share your data, or how they use your data, you can contact us directly at [email protected]
5. ARE YOUR DATA PROCESSED OUTSIDE THE EUROPEAN UNION?
Your data are stored within the European Economic Area (the “EEA”) , by the hosting provider for the website whose contact details appear in the website Terms of Service
In cases where data are transferred outside the EEA, we undertake to take all necessary precautions to ensure the security of your data and to frame these transfers with appropriate safeguards as required by applicable law.
To ensure that each data transfer outside the EEA complies with applicable law, we use the following legal mechanisms:
Adequacy decisions: we transfer personal data to countries outside the EEA that have laws adequate to protect personal data, as determined by the European Commission;
Standard Contractual Clauses: these clauses require the other party to protect your data and to provide you with rights and protections equivalent to those in the EEA. They are available on the European Commission’s website.
6. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?
Under applicable law, you have a number of rights that you may exercise under the terms set out below. To exercise them, please contact us using the following address: [email protected]
You will not have to pay a fee to exercise any of these rights. However, we may charge a reasonable fee if your request is repetitive or excessive.
Right to be informed:
You have the right to know what data we hold about you and for what purposes we process it.
Right of access:
You have the right to access the personal information that we hold about you and to obtain a copy of it.
Right to data portability:
You have the right to request that we transfer certain of your data to another service provider.
Right to erasure:
You may request the deletion of data concerning you. This right may be limited by our legal and/or contractual obligations.
Right to restriction of processing:
You have the right to obtain the restriction of the processing of your personal data in certain situations under certain conditions.
Right not to be subject to a decision based solely on automated processing:
You have the right not to be subject to a decision based solely on an automated process (without human intervention), including profiling, if the decision is likely to have a legal effect on you or similarly significantly affect you.
Right to withdraw your consent:
You have the right to withdraw your consent to the collection or use of your personal data at any time via the consent management platform (CMP) or by sending us a request.
Right to lodge a complaint with the DPC (Data Protection Commission):
You can submit a complaint online on the DPC’s website at: www.dataprotection.ie
Right to formulate advance directives:
You may formulate specific instructions relating to the storage, erasure and communication of your personal data after your death.
Right to object to direct marketing:
You will only receive direct marketing where you accepted to receive communications from our partners at the time of creating your account. You may change your choice at any time and object to the processing of your data for direct marketing purposes without providing any justification.
You can express your objection as follows:
Email: by clicking on the unsubscribe link included in each email you receive;
SMS: by sending a STOP SMS to the number indicated in the message you receive;
By clicking on the unsubscribe link in your account.
When you exercise your rights, in order to ensure that you are the author of the request and to protect your data, we must be able to identify you. To this end, the request must be sent from the email address used to create the account.
Additional checks will be carried out in the following cases:
The request is sent by telephone or by post;
The request is made by a legal heir or by a holder of parental authority;
The request involves sending banking information (right of access and right to portability);
The request is sent by email from an address that does not correspond to that of the data subject as indicated on their account.
7. Note for persons under 18 years of age:
Our services are not intended for persons under the age of 18 and we do not knowingly collect personal information from them.
If you are under 18, please do not complete our forms.
If a person under 18 has provided us with personal information, the parent or guardian must contact us immediately so that we can delete the personal information in question and deregister them.