DATA PROTECTION POLICY

We therefore set out below the purposes for which the data is processed, the legal bases envisaged as set out in the applicable Data Protection Regulations and the retention periods applied in relation to such processing :

When the provision of information is obligatory, this is indicated by an asterisk (*) on the collection forms. This information is required either as a result of a legal obligation, a contractual requirement or a need related to the purpose of the processing (e.g. contact details in order to be able to respond to your request for information). If you do not provide this "mandatory" information, the LFP may find it impossible to follow up your registration, the request or the form in question. - DATE OF BIRTH: Why is date of birth required to register? We need to be able to determine whether you are old enough to register (to accept the General Terms and Conditions, for example) and to consent, for example, to receiving communications (the applicable regulations stipulate that only minors aged 15 and over can give their consent without the agreement of their parents or legal representatives). Anyone giving a date of birth under the age of 15 will be refused an account. In addition, we use this date of birth to adapt the content sent to you as part of email communications, as some communications are reserved exclusively for adults (over 18). Proof of age may be requested by the LFP in case of doubt. he fields in a form that are not compulsory are left to your discretion. It is up to you to decide whether or not to fill them in.

We do not disclose the Data we collect about you, except in the following cases: - to the departments responsible for the aforementioned purposes within the LFP (including the other entities acting as joint controllers within the LFP, namely LFP Subsidiary 1 and LFP Subsidiary 2), for internal purposes, primarily for operational/administrative reasons related to the purposes described in the table under point 4. “Purposes, Legal Bases, and Data Retention Periods”; - to LFP Partners* when you have given your consent for such sharing (in your user/subscriber account preferences); - to social media platforms when you accept the associated cookies – for example, when you log into a Site or App using your Facebook, Google, or other account and/or when you click on the share buttons available on our website; - to our Processors (Data Processors) in the context of the services they perform on behalf of the LFP (for example, our technical and operational providers who host data for us or provide maintenance for our services, send communications, or perform other tasks at our request and on our behalf); - to courts, legal representatives, and auditors when necessary for our legal defense or to conduct audits of our activities and services, as well as to police or gendarmerie services upon official request, in accordance with applicable legal provisions. We may share aggregated, pseudonymized, or even anonymized information, which does not or no longer allows you to be identified, for statistical analysis purposes related to our objectives. This includes, for example, the number of visitors to our Sites and Apps, or the response rate following email campaigns.

A cookie is a small text file that may be stored on the hard disk of your terminal (e.g. computer, mobile phone, tablet) when you visit an online service (website or application). It enables the issuer of the cookie to identify the terminal in which it has been stored and to keep a record, for the duration of the cookie's validity, of certain information relating to your visit, in order, for example, to simplify your browsing on a website, to secure your connection or to adapt the content of a page to your areas of interest. Other technologies with similar functionalities may also be used, particularly in environments that do not support cookies, such as mobile applications. The term "cookies" used in this Policy applies to all these technologies. These cookies may come from various sources: • LFP cookies: these are cookies that may be placed by the LFP on your terminal when you browse our Sites and Apps. These cookies enable us in particular to personalise and continually improve your experience on our Sites and Apps. • Third-party cookies: these are cookies that may be placed by third-party companies (e.g. advertising agencies, social networks, LFP partners, etc.) on your terminal while you are browsing our Sites and Apps. In particular, they enable these third-party companies, during the period of validity of their cookies: to enable your connection when you log in using an account that you have with a social network or other (SSO system), to identify your centres of interest, to collect browsing information relating to the consultation of our Sites and the App and to personalise advertising likely to correspond to your centres of interest and user profile to which you may be exposed on our Sites and Apps. Our Sites and Apps use the following cookies: • Technical cookies: to enable you to use the Site/Application and its functionalities, to enable you to access the services of the Sites and Appliances. These cookies are deposited without your consent being required insofar as their purpose is purely technical. However, you may object to the deposit of these cookies and delete them by using the Cookie Manager (access link at the bottom of the Site or App pages) or by configuring your browser (in the absence of a Cookie Manager - for Sites and Apps containing only technical cookies). If you object to the deposit of these so-called "technical" cookies, we inform you that use of the Site/Application may be impaired. • Advertising and audience cookies - subject to your prior consent to their deposit: audience measurement cookies, social network cookies and cookies for video content, in order to adapt the Sites and Apps and their content according to the use and browsing habits of visitors, to measure the number of visits, pages viewed, User activity on the Sites or Apps and the frequency of User returns. At any time, you may refuse to accept these cookies and delete them by using the Cookie Manager (access link at the bottom of the Site or App pages). To find out more about the different cookies, their purpose and duration, and to manage your consent, please click on the Cookie Manager link at the bottom of the Site or App pages.

You are informed that some of your Data may be transmitted, in certain limited circumstances, by the LFP to countries outside the European Union. Where LFP transfers your personal data to a country outside the EU, we ensure that adequate security measures are put in place to provide protection for your personal data equivalent to that which you would enjoy within the EU and in accordance with the applicable Data Protection Regulation. We have put in place standard contractual clauses (SCC) based on the European Commission's model to provide adequate protection for transfers outside the EU to countries not recognised as adequate by the EU. To date, the countries to which the LFP can make transfers are the following: - United States (supervision of transfers by the SCC and/or by the adequacy decision between the EU and this country) - China (supervision of transfers by SCC) - England (matching decision between the EU and England) - Monaco (supervision of transfers by SCC) - Switzerland (matching decision between the EU and this country) For more details on how we protect your data transferred outside the EU, please contact us using the contact details mentioned in point 12 below.

Our Sites and Apps have sharing buttons, which allow access to content that the LFP distributes on social networks. These sharing buttons lead to the collection of Data in particular when you are connected to these social networks, but also when you have accepted the deposit of social network cookies. Transmissions are also possible when you connect to the Sites and Apps using an account you have with a social network (SSO system). These transmissions are limited to your confirmation. As a user of social networks, you can also post content on the LFP pages. We draw your attention to the fact that content presented on our social platforms may be seen by the public. This is why you must be careful when you provide certain Data (or information) on these platforms that you do not wish to be exposed to the public. We are not responsible for the actions of others if you post Data on our social platforms.

In accordance with the applicable Data Protection Regulations and under the conditions set out in said Regulations (certain rights apply depending on the legal basis for processing, see 4. PURPOSE, LEGAL BASIS AND DURATION OF DATA PROCESSING), you have the following rights with regard to your Data: - a right of access (in particular to find out what Data is processed by the LFP) - rectification (to modify Data that is incorrect, incomplete or out of date - e.g. a change of email address) - erasure (under the conditions laid down by the RGPD - article 17 - examples: if you have objected to the processing of your Data or withdrawn your consent) - the right to withdraw any consent given (when you give your consent, you should be aware that you can withdraw it at any time without having to give any reason - for example when you unsubscribe from our newsletters by clicking on the link provided for this purpose or via your user account on our Sites and App). - portability (subject to the conditions laid down by the RGPD - article 20 - when the processing is linked to the performance of a contract or consent, is automated and you wish to recover your Data or have it recovered by a third party) - limitation (under the conditions laid down by the RGPD - Article 18 - when you wish the processing of your Data to be temporarily suspended due to an event meeting the above conditions) - to object to the processing carried out by the LFP on the basis of its legitimate interests, such as the management of requests, the management of personalisation and at any time in relation to the sending of communications. - the right to define what happens to your Data after your death. You may exercise these rights by contacting us as set out below in "12. Contacting us". Please note that if necessary, we may ask you for a copy of your identity document (ID card or passport) before responding to your request. Sending communications and canvassing. At all times and without justification, you have: • the right to withdraw any consent given ; • but also a right to object to the processing of your data for the purposes of sending communications by email or other electronic means. You may opt out of receiving these messages by clicking on the unsubscribe link at the bottom of our communications emails, by logging into your account on our Sites and Apps, or by sending a request to the following email address: dpo@lfp.fr You also have the option of lodging a complaint with any competent data protection authority - in France, this is the CNIL - either directly online or by mail: 3 Place Fontenoy - TSA 80715 - 75334 Paris Cedex 07. If you wish to delete a user or subscriber account, you can go directly to the relevant Site or Application, access your personal space, and select the "Delete Account" section. The deletion will take effect across all associated platforms (e.g., MPG, MPP), with the exception of the Ligue 1+ subscriber account, which is managed separately and must be deleted independently. Alternatively, you may send an email to dpo@lfp.fr with a deletion request. For technical and operational reasons, the email address associated with deleted accounts is retained in encrypted form for a maximum period of 30 days from the effective deletion date of the account. This temporary retention ensures the proper execution of the deletion operations and prevents any abusive re-registration attempts during this time.

This Data Protection Policy may be periodically updated to reflect changes in our Personal Data Processing practices. It is your responsibility to consult this document regularly. LFP reserves the right to change this Privacy Policy at any time without notice. However, we will notify you by email if we make any significant changes.

For further information on the protection of your personal data, please contact us : • by email: dpo@lfp.fr • by mail: LFP, Attention: DPO, 34-36 Boulevard de Courcelles, 75017 Paris. Last updated : [01/08/2025]