← Back to blog

Competitions and legal notices: the 8 mandatory pieces of information you forget (and that expose you legally)

Legal notices vs rules: don't confuse these two obligations

A competition requires two distinct and complementary documents: the rules and the legal notices. The rules describe the conditions of participation, the eligibility criteria and the draw procedures. The legal notices, for their part, inform the participant about the identity of the organiser, the data retention period, the risks of non-compliance and the remedies in the event of a dispute. Many brands think that rules are enough; this is a major mistake. The DGCCRF (Directorate General for Competition, Consumer Affairs and Fraud Control) penalises competitions that lack clarity on both fronts. Ignoring the legal notices exposes the organiser to fines, to challenges to the draw and to complaints filed with the CNIL or the courts.

The 8 critical legal notices forgotten by 80% of organisers

1. Full identity of the organiser

The participant must immediately know who is launching the competition. This means: exact trade name, company name, SIRET or SIREN number, registered office address, and an email address or contact number dedicated to the competition. Many brands omit the SIRET number or only provide a generic customer service address. Yet, in the event of a dispute, the participant must be able to identify the responsible entity without ambiguity. This notice is mandatory under French law (Article L.121-1 of the Consumer Code) and European law (Directive 2005/29/EC).

2. Participation period and key dates

The competition must explicitly state: the start date and time, the closing date and time, the draw date, and the announced date of the results. Many landing pages display "Competition ongoing" without specifying when it closes. This imprecision creates frustration (users don't know if they are still in time) and creates legal exposure. The DGCCRF considers this absence a failure of transparency. In the event of a challenge, a participant could argue that they did not understand the deadlines and demand cancellation or an extension.

3. Precise and unambiguous eligibility conditions

Who can participate? The conditions must be spelled out: minimum age (often 18), nationality or geographic residence (metropolitan France, EU, etc.), excluded groups (public officials, company employees, direct family of the organiser), and any other restriction. A competition "open to all" without clarification is risky. If an excluded participant takes part and wins, they can challenge the draw. Conversely, if the organiser refuses a winner without a clear legal basis, the participant can go to court. This notice must appear before the form, not in small grey text at the bottom of the page.

4. Precise draw and selection procedures

How is the winner chosen? A random draw among all participants? A creativity criterion (photo or text contest)? A random algorithm? This description must be precise and understandable by a non-technical person. Many organisers write "random draw" without explaining how this randomness is generated or audited. If it is a computerised draw, mentioning that it is carried out by an independent third party strengthens credibility and protects you legally. The CNIL, in its recommendations on competitions, insists on this transparency.

5. Prize(s) at stake and their value

The participant must know exactly what they can win: description of the prize, approximate market value, number of prizes if there are several winners, and conditions of use of the prize (if applicable). A competition announcing "a trip to Europe" without specifying the destination, duration, number of people or travel class leaves too much unclear. This imprecision can lead to a dispute over the actual value of the prize received versus what was promised. Also mandatory under French and European law, this notice protects both the participant and the organiser.

6. Delivery or use deadlines and procedures for the prize

When will the winner receive their prize? Within 30 days? Within 90 days? Are there shipping costs? How is the winner contacted? By email? By SMS? If the prize is virtual (voucher, subscription), how is it delivered? This notice clarifies expectations and avoids disappointment. Many competitions forget this step, which leads to complaints filed with the CNIL or consumer mediators.

7. Privacy policy and data retention period

How will the data collected (email, name, address) be processed? Will it be kept after the competition? Sold to a third party? Used for future marketing? The retention period must be specified: for example, the data is kept for up to 1 month after the prize is awarded, then deleted, unless the user agrees to remain subscribed to the newsletter. This notice falls under the GDPR but also under the general transparency obligations of French law. Its absence or vagueness creates major CNIL exposure.

8. Dispute clause and remedies in the event of a dispute

What should you do if a participant challenges the result? Or if the designated winner refuses their prize? Or if a participant reports a technical bug? The organiser must specify: the contact person for complaints, the response time (e.g., 15 days), and the remedies (mediation, competent court). Many competitions ignore this notice, which creates a legal vacuum. In its absence, an unhappy participant can go directly to court without having given the organiser a chance to rectify the situation. This notice, although less well known, is strongly recommended by French case law and the DGCCRF good practice guides.

Where to place these notices on your form and landing page

Before the form: the critical notices made visible

The eligibility conditions (point 3), the duration of the competition (point 2) and the description of the prize (point 5) must be visible before the user fills in the form. If this information is hidden under a "Rules" tab at the end of the page, many users will not read it, and the organiser may be criticised for not having provided sufficient information. At a minimum, place a box at the top of the page with: "Competition open until [DATE], reserved for [CONDITIONS], prize: [DESCRIPTION]".

In the form: explicit consents

Before the "Participate" checkbox, two boxes must be unchecked by default (no pre-checked consent, this is a GDPR requirement): an acceptance of the rules and an acceptance of the privacy policy with a direct link. The link must lead to a separate document setting out data retention, third-party recipients and rights (access, rectification, deletion). This structure protects you legally and strengthens conversion (users see that compliance is taken seriously).

At the bottom of the page: full legal notices

The identity of the organiser (point 1), the draw procedures (point 4), the delivery deadlines (point 6) and the remedies (point 8) can be detailed at the bottom of the page in a "Legal notices" or "Full rules" section. But none of this information must be absent from the visible content; it must be summarised or repeated in the main body or in a clickable box.

The concrete risks of non-compliance with legal notices

DGCCRF fines

The DGCCRF can impose fines of up to €3,000 (natural person) or €15,000 (legal person) for lack of transparency, absence of legal notices or unfair terms. These checks are rare but real, particularly if a consumer reports a suspicious competition. The procedure is quick: investigation, then formal notice to comply, then a fine if not complied with.

Challenge to the draw and cancellation

If a participant demonstrates that critical information was missing or ambiguous (e.g., the draw procedures), they can challenge the result in court. The organiser could be forced to cancel the draw or compensate the aggrieved participant. These disputes are infrequent but very costly in time and reputation.

CNIL complaint

If the privacy policy is absent or insufficient, a participant can file a complaint with the CNIL. An investigation may be launched, and the organiser may receive a formal notice to comply with the GDPR. If data has been processed without a clear legal basis or kept for too long, sanctions (fines) may follow.

Complaints to the consumer mediator

Even without an official fine, an unhappy participant can contact a consumer mediator (free and quick) to challenge delivery deadlines, the quality of the prize or the absence of remedies. The mediator can recommend compensation or a public corrective action, damaging your reputation.

Differences between jurisdictions (France vs EU)

France

In France, competitions are governed by the Consumer Code (Articles L.121-1 et seq.) and by the Criminal Code (Article 413-1 on games and betting). The legal notice obligations are strict. The DGCCRF enforces these rules. A French specific: the conditions of "free" entry to the competition must be clearly displayed; a competition disguised as free but generating hidden costs for the participant (mandatory purchase, participation fees) can be prosecuted.

European Union

In the EU (outside France), the obligations depend on Directive 2005/29/EC (unfair commercial practices) and on national legislation. For example, Germany has strict rules on draw procedures, Italy on the disclosure of winners. If your competition targets a European audience, it is advisable to consult a local lawyer or to comply with French standards, which are often stricter.

Best practices for drafting your competition legal notices

Clarity and accessibility

Avoid pure legal jargon. Prefer short, active sentences: "You must be at least 18 years old" rather than "Participation is reserved for persons who have reached the legal age of majority". Format with bullet points and bold text for key points.

Regular audit

After each competition, review your legal notices in light of user feedback or events (a technical bug, a CNIL complaint, a change in the prize's price). Update your template for future competitions.

Legal consultation

If your competition exceeds a certain budget (e.g., prize > €10,000) or targets a sensitive audience (minors, regulated sectors such as gambling), consult a lawyer specialising in consumer law. The cost is low compared to the risks.

Compliance documentation

Keep a record of your legal notices, the privacy policy and the result of the draw for at least 3 years. This documentation may be requested by the DGCCRF in the event of an investigation and proves your good faith.

Checklist: the 8 mandatory notices before launching your competition

  1. ☐ Full identity of the organiser (name, SIRET, address, contact)
  2. ☐ Start, end, draw and results announcement dates
  3. ☐ Eligibility conditions (age, residence, exclusions)
  4. ☐ Draw procedures (random, criterion, third-party auditor if applicable)
  5. ☐ Detailed prize(s) and value(s)
  6. ☐ Delivery deadlines and procedures for the prize
  7. ☐ Privacy policy and data retention
  8. ☐ Remedies clause and contact for complaints

This checklist can be integrated into your internal process, for example in your CMS or your competition platform, to avoid forgetting a critical element.

Frequently asked questions

What is the difference between rules and legal notices for a competition?

The rules describe the participation procedures, the eligibility criteria and the draw conditions. The legal notices inform about the legal identity of the organiser, the data retention period, the remedies in the event of a dispute and the transparency obligations. Both documents are mandatory and complementary: the rules answer "how do I participate?", the legal notices answer "who is responsible and what are my rights?".

What are the legal risks of a competition without clear legal notices?

The absence or vagueness of legal notices exposes the organiser to DGCCRF fines (up to €15,000 for a company), to challenges to the draw, to CNIL complaints if the data is not processed correctly, and to complaints filed with consumer mediators. A participant can also request the cancellation of the draw in court if they believe they were insufficiently informed.

Where should I place the legal notices on my competition landing page?

The critical conditions (eligibility, duration, description of the prize) must be visible *before* the form, preferably in a box at the top of the page. The consents (acceptance of the rules, privacy policy) must be unchecked by default in the form. The full notices (identity of the organiser, draw procedures, remedies) can appear at the bottom of the page in a "Legal notices" section.

Is the GDPR policy enough for a competition or do I need additional legal notices?

No, the GDPR only covers the processing of personal data. The legal notices for competitions also include the identity of the organiser, the draw procedures, the exact description of the prize and the remedies in the event of a dispute—obligations under French consumer law that go beyond the GDPR. Both must be compliant and distinct.

How long should I keep the data collected during a competition?

The period depends on your privacy policy. Generally, data collected solely for the draw can be deleted 1 month after the prize is awarded. If the participant accepts a newsletter, you can keep it for as long as they remain subscribed (plus the right to unsubscribe at any time). This period must be explicitly mentioned in your legal notices and your privacy policy.