Privacy Policy
Last updated January 14, 2026
The French Athletics Federation (hereinafter the "FFA") processes your personal data when you use the site pps.athle.fr (hereinafter the "Website").
As a user of the Website, your data will be collected and processed by the FFA, whether for creating your Account, requesting a Proof of Entry (Pass Prévention Santé) or a PPS attestation (including one for your minor child), or for any other use of the Website's services.
If you use the Website to request a Pass Prévention Santé attestation for your minor child, we inform you that your child's data will also be processed by the FFA. We invite you, in this regard and depending on your child's age, to inform them about this processing.
This Privacy Policy (hereinafter the "Policy") sets out:
1. WHO IS THE DATA CONTROLLER FOR YOUR PERSONAL DATA?
2. WHY AND FOR HOW LONG ARE THE DATA PROCESSED?
3. TO WHOM ARE PERSONAL DATA DISCLOSED?
4. WHAT IS THE POLICY ON COOKIES AND TRACKERS?
5. WHAT RIGHTS DOES THE USER HAVE OVER THEIR PERSONAL DATA?
This Policy supplements the provisions of the Terms of Use applicable to the Website (hereinafter "TOU" viewable here) and any other terms or legal notices provided on this Website.
DEFINITIONS:
PPS attestation: means the attestation generated by the Site after the health questionnaire has been fully completed and declared compliant, within the meaning of the French Sports Code, evidencing that the User has answered the health questionnaire under the conditions set out by the FFA regulations and that, based solely on their statements, no contraindication to participation in sporting events has been reported.
Account: designates the account that a User of the Site may create to access features such as those described in the TOU, whether for their own account if they are an adult or for the Minor they legally represent. The person for whom the account is created is hereinafter referred to as the "Account holder".
Personal data (or Data): means any information that can directly or indirectly identify a natural person, such as your surname, given name, age, email address, login data, any data associated with your account, etc.
Sporting event: means any sporting event relating to a discipline for which the FFA is the public service delegate and whose organisation is, in particular, subject to declaration or authorisation in accordance with Article L331-5 and/or Article R331-6 of the French Sports Code, participation in which requires the production of a Pass Prévention Santé.
Minor: means any person under 18 years of age.
Health Pathway: Health Pathway means the pathway enabling:
- adults to access the preventive and informational tool on health risks related to practising athletics and to the Website's Services. The content of the Website is defined by the FFA in accordance with the applicable legal and regulatory provisions;
- the legal representatives of a Minor (and, where applicable, also the Minor assisting their legal representative in the process) to access the health questionnaire and, if necessary, to provide a medical certificate stating there is no contraindication to participation in sport in accordance with the applicable legal and regulatory provisions.
Pass Prévention Santé: means the declaration or authorisation granted as part of the Health Pathway in order to allow the Account holder to participate in a sporting event;
Website: means the Website published by the FFA, at the address https://pps.athle.fr
Service(s): means the services developed by the FFA, where applicable with a partner or service provider, and offered through the Website, such as carrying out the Health Pathway, downloading a Pass Prévention Santé, managing attestations via the Account, registering for an information service by email, and accessing exclusive content published or made available by the FFA on the Website.
User: means the person who accesses the Website and uses the Services, regardless of their status. Thus, whether you are an Account-holding User, a User who is the legal representative of a Minor, a Minor Account holder, or simply a visitor, we refer to you as Users and will use in this Policy the terms "you" and "your" to refer to you, the rights you have, or the data concerning you.
1. WHO IS THE DATA CONTROLLER FOR THE USER'S PERSONAL DATA?
Your personal data are collected and processed by the French Athletics Federation, an association under the law of 1 July 1901, recognised as being of public utility, whose registered office is located at 33 avenue Pierre de Coubertin, 75640 PARIS Cedex 13, registered under SIRET number 78444873000027
2. WHY AND FOR HOW LONG ARE THE DATA PROCESSED?
User Data are collected for the purposes, on the legal bases and for the retention periods specified below:
| Purposes | Legal bases | Retention periods |
|---|---|---|
| Management of the Pass Prévention Santé – for all Users: creation of an account as part of the Pass Prévention Santé; obtaining a Pass Prévention Santé; Access to and management of Pass Prévention Santé; management of identification via SSO (Single Sign-On); | Carrying out a mission of public interest in compliance with the FFA's regulations Legitimate interest of the FFA in SSO identification | for a period of 10 (ten) years for data relating to Pass Prévention Santé. |
| Management of the Pass Prévention Santé – for Minors: provide the health questionnaire; if necessary, generate a request for a certificate of non-contraindication to practising sport; access and manage the Minor User's certificates. For information: the FFA does not retain questionnaire responses; the PPS for minors only allows storing the questionnaire result — that is, whether the User answered "NO" to all questions or answered "YES" to one or more questions, without specifying which question(s); | Carrying out a mission of public interest in compliance with the FFA's regulations | as long as the account is active, then deletion after two years of inactivity |
| Allow secure access to the Data Running platform via a Single Sign-On (SSO) authentication service and link the user's sporting data to their account | Consent (via your Data Running account only) | as long as the account is active and consent has not been withdrawn |
| Managing the payment of fees (only for holders of an Adult Account) when requesting their Pass Prévention Santé. | Execution of the applicable Terms and Conditions of Sale | for the duration of the transaction, then archiving of accounting records for the applicable statutory limitation period |
| Manage the improvement of the Website and ensure its security: ensure that the Website's content is adapted to the User (example: PPS for a Minor Account holder); monitoring and management of User requests; compile statistics on the Website's traffic and usage; improve the operation (maintenance and development), security and efficiency of the Website and the PPS; | The FFA's legitimate interest in providing the Services to these Users and acting as a facilitator for access to sporting events | for tracking User requests: if the User has an account, retained while the account is active, then deleted after two years; if there is no account, retained for the time necessary to process the request. For content adaptation, improved operation and to ensure security: for the duration of the session, and possibly for the duration of maintenance or security operations. |
| Monitoring of claims and disputes related to participation in a sporting event and to the use of the Website; | Legitimate interest of the FFA in being able to defend itself | for as long as necessary for the dispute or for the detection and handling of fraud, then archived for the duration of the applicable statutory limitation period |
| Fight fraud, whether related to the payment method or to the Pass Prévention Santé; | Legitimate interest of the FFA in being able to defend itself and to ensure the validity of issued authorisations | |
| Sending communications about the management of the Account, the Health Prevention Plan and the Pass Prévention Santé, as well as about the platform's services, including health coaching services. | Legitimate interest of the FFA to inform Users with an active account who have subscribed to a Pass Prévention Santé about the Services provided | as long as the Account is active (sending account and PPS news) and no objection has been raised |
| Sending communications from the FFA about its news and advice | Consent | as long as the account is active and consent has not been withdrawn |
| Manage individuals' rights and their consent, and monitor Users' requests to exercise their rights over their personal data | Compliance with a legal obligation (GDPR) | for the time necessary to process the request, then archived for the duration of the applicable statutory limitation period (except for any identity document, which will not be retained beyond the period required to process the request); |
3. TO WHOM ARE PERSONAL DATA DISCLOSED?
The personal data are made accessible to the FFA's technical service providers ("processors" as defined by data protection law), for the strict needs of their mission and in accordance with the FFA's instructions, notably in the field of IT (Website publisher, hosted software vendors, platform development services, hosting and other communication services, analytics and measurement services, email and push notification communication services, Internet services on which we publish our advertising, etc.).
Your personal data are also transmitted, according to the purposes, to the following recipients:
- to the FFA's internal departments in the context of the aforementioned purposes and for the needs of their missions;
- Your Pass Prévention Santé and PPS attestation personal data are disclosed to the organisers of the sporting events in which you participate (i.e. only your surname and given name(s), date of birth and Pass Prévention Santé number) for the purpose of verifying the validity of the PPS.
- Accounting data: to the FFA's chartered accountant / financial controller;
- To courts, judicial auxiliaries and auditors for the purposes of our legal defence, or for the purposes of auditing our activities and services, and to the gendarmerie and police services upon requisition in accordance with applicable legal provisions.
4. WHAT IS THE POLICY ON COOKIES AND TRACKERS?
4.1 WHAT IS A COOKIE?
A cookie is defined as a file stored by the device's web browser in a dedicated storage area. It is stored while browsing a website. A cookie cannot read data from your computer's hard drive. By means of this text file, the website can identify the device on which it is stored and retain the information necessary for your visit.
4.2 WHAT KIND OF COOKIES DO WE USE?
The FFA and its service providers may install cookies referred to as strictly necessary when you use the Website. These cookies allow the User to browse the Website, and in some cases allow the FFA to optimise the Services. They are necessary for the functioning of the Website and do not require your consent. They are generally configured in response to your service requests, such as adjusting privacy settings, logging in, or completing forms. The Website will not function normally if you block or disable them.
4.3 RETENTION PERIODS
The cookies used on the Website may be stored in the browser or on your computer's hard drive as long as your browser is active (for session cookies). The lifespan of cookies may be limited to a few hours or to a maximum of one year.
5. WHAT RIGHTS DOES THE USER HAVE OVER THEIR PERSONAL DATA?
The User has the following rights regarding their personal data:
- Right of access: to obtain confirmation as to whether personal data concerning them are or are not being processed and, where they are, access to that personal data as well as certain information about those processing operations;
- Right of rectification: the right to rectify inaccurate or outdated personal data;
- Right to erasure: the right to the erasure of certain personal data under the conditions set out in Article 17 of the GDPR;
- Right to restriction of processing: the restriction of processing under the conditions set out in Article 18 of the GDPR;
- Right to object: to object to the processing of personal data;
- Right to withdraw consent: to withdraw any consent given at any time;
- Right to post-mortem determination: to define the fate of that personal data after the User's death.
To exercise their rights:
- The User (or a legal representative or an authorised proxy, subject to providing the documents proving this mandate) may request access to, rectification of or deletion of their personal data used by the FFA's customer services, or object to the processing of the personal data either by using this form or by writing to the address cil@athle.fr. Please note that the FFA may, if in doubt, ask you to provide any documentary evidence to verify your identity and substantiate your request.
- Managing subscription to the FFA's communications: the User (Account holder) can manage their subscription to the FFA's official communications from their Account.
- The User can also unsubscribe from the FFA's communications by clicking the link provided for this purpose at the bottom of the relevant emails.
To exercise your rights or to ask any question regarding the collection and processing of your personal data on the Website, simply write to the following address: cil@athle.fr.
If a difficulty remains unresolved, you may file a complaint with the competent supervisory authority, which, in France, is the French Data Protection Authority (CNIL).
The FFA reserves the right to amend the Privacy Policy, notably to take account of any developments in the applicable law. Users will be notified by email of any updates to the Privacy Policy.
The French version of this Privacy Policy is the only authoritative version and prevails over any translation.