CONDIDENTIALITY
‍WERUN PARIS 2026

In the context of its activities, Paris Saint-Germain attaches particular importance to ensuring the confidentiality of the personal data it collects and uses, and more generally to the protection of the privacy of its various stakeholders.

This Data Protection Policy describes how your personal data is collected when you register and more generally as part of your participation in races organized by Paris Saint-Germain (hereinafter “WERUNPARIS”). It also tells you how your personal data is used and protected by Paris Saint-Germain, what rights you have and how to contact us.

This policy is an important document. It is aimed at WERUNPARIS runners and their companions. We recommend that you read it carefully and check regularly for changes. This policy was last amended in January 2026.

‍

CONTACT US

If you have questions about the use of your data or want to share your comments or concerns with us, you can contact our data protection officer at the following address: dpo@psg.fr

‍

HOW IS YOUR PERSONAL DATA COLLECTED

Personal data concerning you may be communicated to us directly by you on our site and our app (hereinafter “the Site”) or through the person who registered you with his consent.

They can also be collected through service providers, operating within the framework of WERUNPARIS and subject to the same regulatory obligations as Paris Saint-Germain.

If you had designated as an emergency contact, the personal data concerning you (name, surname, telephone) was transmitted to us through the person who appointed you with your consent.

‍

THE PERSONAL DATA WE COLLECT

Paris Saint-Germain only collects information that is necessary and relevant to the organization of WERUNPARIS and to the data processing that results from it. When collecting your personal data, we inform you whether certain data must be provided or if they are optional.

In some cases, you provide personal information directly to us. This is particularly the case, when you create an account, make a purchase, register for a race and our newsletter or participate in a competition in order to win a bib for example; thus, among the information you provide us with:

- Identification data (name, first name, date of birth, nationality, gender)

- Contact data (postal and electronic addresses, telephone number)

- Data related to your registration (bib number, category, team)

- Payment data (RIB) and information relating to the transaction carried out

- Your opinions and comments about WERUNPARIS

- Data related to transactions carried out from our site (purchase and resale details)

- Data related to the event (arrival time, access door, images captured)

- Data provided on the copy of your FFA license or your PPS, and if applicable in the questionnaire relating to the state of health of the minor athlete;

- Data concerning your disability.

In other cases, data is collected automatically and directly from you. This is the case when you use your Site and App (IP address, location, identifier of your device), including through technical cookies, allowing you to keep your shopping cart for 24 hours.

We are also required to collect data about you:

- During the course of WERUNPARIS, such as (i) door passage times and our result, (ii) photos, videos and other audiovisual materials and (iii) data from the video surveillance device and access controls.

- When you use a social media feature on our site or app and post information on that social media.

We ask that you ensure that the information you provide to us is accurate and up to date. You can correct any information you have provided to us by logging into your Personal Space. You represent and warrant that all information you provide to us is true and correct, and relates to you. The transmission of any false data may call into question your participation or your ranking in WERUNPARIS.

‍

HOW IS YOUR DATA USED

Paris Saint-Germain uses your personal data in order to:

- Manage your registration and the payment of your purchases;

- Process and track your orders until they are delivered;

- Communicate with you about the event;

- Answer your questions and get your opinion;

- Register your participation in a competition or lottery;

- Manage the event, from the delivery of bibs to the establishment of the ranking;

- Publicly announce and publish the ranking, such as photos, videos and other audiovisual materials on our site and our app, our social networks.

We are also likely to carry out data processing for purposes other than the strict execution of our contract with you, provided that we first ensure the legitimate interest in carrying out this processing. The purposes for which we can process your data on this basis are:

- The use of photos and videos and other audiovisual materials on which you appear as an image to illustrate the event and to promote future editions;

- Communication concerning the services and products of WERUNPARIS partners;

- The production of statistics on the use and attendance of our site and app;

- Optimizing the operation and functionalities of our site and app;

- Improving your experience;

- The safety of WERUNPARIS.

Some treatments are justified by compliance with our legal, regulatory and conventional obligations. They may be linked to the management of possible recourses, to your requests for information.

If you agree, we will send you our marketing communications and news about products, services and events organized by Paris Saint-Germain and its partners as part of WERUNPARIS.

‍

ACCESS TO YOUR PERSONAL DATA

Paris Saint-Germain is likely to share your personal data, in a proportionate manner and for legitimate reasons, to the departments and departments involved in the organization and conduct of WERUNPARIS, in particular to persons attached to the Department of Security, Ticketing, Brand and Information Systems Department.

Paris Saint-Germain is also likely to use the services of service providers as part of the operations necessary for the organization of WERUNPARIS and to transmit to them as part of the execution of their service - each being specialized in its activity - data concerning you:

- service providers participating in the organization and running of WERUNPARIS, for the purposes of registering, reselling, handing over bibs, timing, taking photos, and ranking in particular;

- service providers ensuring the delivery of the photos you have ordered or providing the services to which you have subscribed;

- payment service providers taking care of payment transactions and appropriate controls;

- third parties providing computer services to us, such as platform providers, hosting services, technical support for our software and applications that may contain data about you, data analysis, email distribution;

- the service providers responsible for access and security at WERUNPARIS, including within the Parc des Princes;

- authorities and other competent bodies when such communication is required by law or for medical or security reasons;

- to the company in charge of medical assistance.

Paris Saint-Germain ensures that its stakeholders comply with the principles of the regulations in force and uses your data only for the purpose of performing the service.

‍

CHILDREN'S DATA

We encourage parents to educate their children about protecting their privacy. We also respect the legal provisions in this area and do not allow runners under 18 years of age to register without the consent of the holder of parental authorization at WERUNPARIS.

We also ensure that the processing of personal data resulting from this is strictly limited to what is necessary, for the purposes specified at the time they are collected.

‍

SERVICES PROVIDED BY THIRD PARTIES

Services can be linked to external sites: this is the case if you want to register for coaching sessions or access photos taken during WERUNPARIS. This Personal Data Protection Policy only covers how Paris Saint-Germain processes information that we collect in connection with WERUNPARIS. By accessing external sites, you agree to the policies of these sites. Paris Saint-Germain has no control over these sites and their practices in terms of collecting and using data about you.

‍

PUBLICATION OF RESULTS AND PHOTOS

The ranking in which your results appear is communicated to the public and shared on the various communication channels implemented as part of WERUNPARIS, possibly through the media present at WERUNPARIS. Photos, videos, and other audiovisual materials taken during WERUNPARIS may be published on the same channels. Requests to delete the results list will not be accepted, if this may affect the results.

‍

OFFERS AND CHALLENGES COMPANIES AND WORKS COUNCILS

As part of these offers, your registration was taken care of by the person authorized by the company or its committee in order to organize this event. The latter has undertaken to Paris Saint-Germain to collect, prior to the transmission of data concerning you, your consent to their sharing and to the use or communication of data concerning you strictly necessary for the organization of the corporate challenge under the conditions described in the rules of the race.

‍

RETENTION PERIOD OF YOUR PERSONAL DATA

Your personal data will be kept for as long as necessary, to achieve the purposes described in this Policy, and within the limits of legal deadlines. However, not all of your personal data is kept for the same period of time.

If we collect images from security cameras, installed within the Parc des Princes, we keep them for a maximum of one month after the event. This is different for photos taken and other audiovisual material produced during the event which, by exception, can be used to promote a new edition for a period of 1 year following the last edition of WERUNPARIS.

We want to inform you that a longer retention period may be required to resolve a dispute or to respond to regulatory or police requests. In this case, the information will be deleted at the end of the procedure.

‍

TRANSFER OF YOUR PERSONAL DATA OUTSIDE THE EU

As part of the organization of WERUNPARIS, we are likely to transfer information about you to service providers operating for legitimate reasons related to its organization.

Data concerning you are also likely to be processed outside the European Union. In this case, we take the necessary measures with our service providers to ensure an adequate level of protection of your data in full compliance with the regulations in force.

If the service providers concerned are not located in a country with legislation considered to offer adequate protection, they will then have previously signed the European Commission's “standard contractual clauses” or will be subject to binding internal rules approved by the supervisory authorities in the field of personal data protection.

‍

SECURITY OF YOUR PERSONAL DATA

To protect your data, we put in place appropriate organizational and technical measures. In general, we strive to protect personal data taking into account the sensitivity of the information in question and the potential risks induced by the processing and its implementation. We implement every useful means to guarantee the confidentiality, integrity, availability and resilience of your data. We also take care to store your data in information systems offering an appropriate level of security, whose access is protected, restricted and recorded.

We enter into strict confidentiality agreements with all persons involved in the processing of data on our behalf. We also ensure that all staff members and all persons involved in data processing comply with all data protection regulations and are committed to maintaining the confidentiality of the data processed.

If you believe that your personal data is being used inappropriately by third parties, please inform us immediately by email at dpo@psg.fr

‍

YOUR RIGHTS

In compliance with regulations, you have the following rights:

Right of access — allowing you to obtain information concerning the processing of your personal data and a copy of them

Right to rectification — allowing you, if your personal data is inaccurate, to demand that they be amended accordingly

Right to erasure/ right to be forgotten — allowing you to obtain the deletion or deletion of your personal data

Right to limitation — allowing you to request the limitation of the processing we carry out on data concerning you

Right to portability — allowing you to obtain an electronic copy or the transfer of data concerning you from our database to another

You can also send us your instructions for the storage, deletion or communication of your data in the event of death and designate the person who will be in charge of them.

These rights are not absolute rights, but are exercised under the conditions and limits set by the regulations.

If you have consented to receive commercial solicitations electronically or to receive our newsletters, you have the option to unsubscribe by simply clicking on the unsubscribe link in any email or communication we send you.

‍

EXERCISE YOUR RIGHTS

You can exercise your rights at any time with our Data Protection Officer by writing to the following address: Paris Saint-Germain Customer Service - 53 avenue Emile Zola — 92 100 Boulogne Billancourt or directly to this address: dpo@psg.fr A response will be sent to you within one month of receiving your request. In this context, you may be asked to provide proof of your identity.

You also have the option by connecting to your personal space accessible from the “Manage your registration” section to consult, update or delete your data.

You can also, if you wish and in accordance with the regulations, file a complaint with the CNIL according to the procedures indicated on its site (www.cnil.fr).

‍

CHANGES TO OUR PERSONAL DATA PROTECTION POLICY

Regulations and uses change over time. Therefore, we reserve the right to make changes to the Personal Data Protection Policy at any time to adapt them to these changes.

In this context, the Personal Data Protection Policy will be republished on our Site so that you can read it directly.

‍