Privacy

Data controller

The data controller is Masters & Events Factory, a French single-member simplified joint-stock company registered with the Paris trade register under number 828 310 425, with its registered office at 115 rue de l’Abbé Groult, 75015 Paris, France.

For any question about personal data: [email protected].

Collected data

Depending on the services used, Masters de Feu may process the following categories of data:

• Identity and contact data: name, first name, email, phone number, company.
• Request-related data: messages, subject of the request, preferences, and information shared through forms.
• Ticketing data: ticket category, order, status, and any supporting documents.
• Technical data: IP address, browser, device, pages viewed, error logs.
• Usage data: journeys, preferences, interactions with certain features.
• Spark data: functional visitor id, event year, conversation history stored on the device and in PostgreSQL, summarized preferences, optional email, and requests sent with consent.
• Service-related data: newsletter, applications, partnerships, press, votes, accreditations, or contact requests.

Purposes and legal bases

• Responding to contact requests: legitimate interest or pre-contractual measures.
• Managing ticketing and event access: performance of the contract and legal obligations.
• Sending communications: consent or legitimate interest depending on the context.
• Managing partnerships, accreditations, and recruitment: pre-contractual measures and legitimate interest.
• Securing the site and diagnosing errors: legitimate interest.
• Measuring audience and improving the experience: consent when required or legitimate interest for exempted measurements.
• Helping visitors with Spark: legitimate interest for conversational assistance and consent when a request is sent to the team.

Recipients and service providers

Data is accessible to authorized Masters de Feu teams and to technical service providers strictly necessary to operate the services: hosting, CMS, ticketing, email, analytics, security, support, mobile distribution, and diagnostic tools.

Third parties that may be involved, depending on the services actually used by the user, include the following:

• Clever Cloud: hosting of the website and execution of the web application.
• Cloudflare: DNS, registrar, network protection, CDN, cache, optimization, Cloudflare Images and, where applicable, Cloudflare Stream.
• Sanity: CMS, hosting and delivery of editorial content, images, configuration data, and managed content.
• Weezevent and Ticketmaster: official ticketing, order management, tickets, checks, and availability when the user books or checks a ticket.
• Plausible Analytics: site traffic measurement, configured to limit the collection of personal data.
• Amplitude: product analytics and understanding of journeys within the app or digital services when enabled.
• Sentry: error reports, technical diagnostics, stability, and application monitoring with sensitive-data filtering.
• Apple: distribution of the iOS app via the App Store, updates, possible payments, and Apple ecosystem services.
• Alphabet, Inc.: Android distribution via Google Play, Android services, updates, possible payments, and Google ecosystem services.
• Stripe: shop payments or transactional services when this solution is enabled.
• Instagram / Meta: social links, Instagram content, social feeds, or integrations subject to consent when required.
• OpenAI: Spark conversational assistance, translation support, or editorial rewriting services, enabled only for the relevant features.
• Sarbacane and Resend: routing transactional emails, form replies, newsletters, press invitations, or event-related communications.

This list may evolve depending on the tools actually enabled for a given edition or feature. Masters de Feu limits the data sent to each provider to what is necessary for the relevant purpose.

Retention periods

• Contact requests: up to 3 years after the last useful exchange.
• Ticketing and invoicing: for the duration required to perform the contract, then the applicable accounting and tax retention periods.
• Newsletter: until you unsubscribe or 3 years after the last active contact.
• Applications and accreditations: for the time needed to process the request, then limited archiving if necessary.
• Technical logs and security: for a period proportionate to security and diagnostic needs.
• Spark conversations: stored on the device and server-side for quality monitoring, guardrails, and conversation recovery until cleared or anonymized on request.
• Cookies and trackers: not applicable to advertising cookies, tracking cookies, or trackers subject to consent, which are not used on the site.

Transfers outside the European Union

Some service providers may process data outside the European Union. In such cases, Masters de Feu ensures that appropriate safeguards are in place, including standard contractual clauses, additional measures, or any other mechanism recognized by the applicable rules.

Cookies and trackers

The Masters de Feu website does not use advertising cookies, tracking cookies, or trackers subject to consent. No consent banner is therefore displayed while you browse.

Spark uses a functional HttpOnly cookie and browser local storage to resume a conversation. Exchanges are also stored in PostgreSQL to monitor quality, detect uncertain answers, and prevent invented information. The user can clear history from the Spark interface or request anonymization.

Your rights

Under the GDPR, you have the rights of access, rectification, erasure, restriction, objection, portability, and the right to withdraw your consent at any time when processing is based on it.

You can exercise your rights at [email protected]. Proof of identity may be requested if there is reasonable doubt about the requester’s identity.

You may also lodge a complaint with the CNIL: https://www.cnil.fr.