Basketball Play Privacy Policy
Version
29 / 01 / 2024
To view previous versions, click here.
YOUR DATA AND DECATHLON: HOW DOES IT WORK?
OUR COMMUNICATIONS ARE ADAPTED TO YOUR SPORTS ACTIVITIES
HOW DO WE USE YOUR DATA?
PRECISION ON GEOLOCATION
RECIPIENTS OF YOUR DATA
MORE INFORMATION ON TRANSFERS
YOUR RIGHTS
EXERCISE YOUR RIGHTS:
INTERACTIONS WITH YOUR SOCIAL NETWORKS
COOKIES AND OTHER TRACKERS
OUR DATA PROTECTION OFFICER
YOUR DATA AND DECATHLON: HOW DOES IT WORK?
Your data is yours! At DECATHLON, we believe that you should have control over
your data. This is the direction we are taking, bearing in mind that we still have a long
way to go. Apart from the few legal obligations to which we are subject, only you can
agree to your data being used by DECATHLON. If we sometimes rely on
subcontractors, they only act on our behalf and in accordance with our instructions.
We are transparent about all your personal data! On this page, you can find out how
we process your personal data. Where, when, how and why we process your data
and, also, what your rights are. By logging into your account.decathlon.com account,
you can control your security and manage some of your personal data. We are
working to give you control over all your personal data here.
HOW DO WE USE YOUR DATA?
DECATHLON SE, 4 boulevard de Mons, Villeneuve d'Ascq 59650 (France), is
responsible for processing your personal data. You will find below all the processing
carried out within the framework of the Decathlon Basketball Play:
Processing, purposes
and legal bases
Data processed
Data retention periods
To enable you to register on
the Decathlon Basketball
Play application and benefit
from the service. This
processing is based on the
performance of the contract
concluded between you and
DECATHLON.
- Email ;
- Full name ;
- Phone number ;
- Information from
your Decathlon
account.
For the lifetime of your
Decathlon account or up to
3 years of inactivity.
To allow you to identify
yourself via your
DECATHLON account and
to manage it. This
processing is based on
DECATHLON's legitimate
interests.
- User ID ;
- Password; Email
- Email address
- Last name and first
name ;
- Customer ID;
- Sports activities.
For the lifetime of your
Decathlon account or up to
3 years of inactivity.
Allow you to make
purchases on the
application. This processing
is based on the performance
of the contract entered into
between you and
DECATHLON.
- User ID ;
- Full name ;
- Email ;
- Address and billing
information ;
- Payment method
used;
- Purchase amount
and details.
10 years for invoicing, in
accordance with applicable
regulations
To ensure the security of the
application. This processing
is based on DECATHLON's
legitimate interests.
Connection data ;
Phone model;
OS version.
Data kept for up to 12
months after collection.
To measure the
performances, improve the
service and navigation of the
application via the data
collected by our cookies.
This processing is based on
your consent.
- Browsing data linked
to cookies/trackers to
which you have
given your consent.
Data retained for up to 24
months after collection.
Consent to cookies and their
lifetime are renewed every 6
months.
To offer you support on the
use of the service. This
processing is based on the
performance of the contract
- Full name ;
- Email address ;
- Request completed.
Data retained throughout the
processing of the request,
up to 1 year after the
concluded between you and
DECATHLON.
request has been
processed.
To enable you to exercise
your rights with regard to
personal data. This
processing is based on
compliance with a legal
obligation.
- Full name ;
- Email ;
- Nature of your
request.
Data retained for up to 5
years after the calendar year
in which your request was
processed.
RECIPIENTS OF YOUR DATA
We, DECATHLON SE, as the party responsible for the processing indicated above,
may in certain cases share your data with third parties. We will only share your data
with third parties who present sufficient guarantees as to the implementation of
appropriate "technical, organizational and legal measures" so as to guarantee the
protection of your rights and your data.
These recipients are :
- Our subcontractors ;
- Our in-house teams;
- The potential buyer of one of the entities responsible for processing the data
listed in this privacy policy;
- Any administration or judicial authority in the event of justified requests from
the latter;
- Any company or organization for fraud protection purposes
MORE INFORMATION ON TRANSFERS
Did you know? Your data may be transferred outside the European Union. Rest
assured, these transfers are carried out with the utmost care. We'll explain!
Why do we transfer your data?
The transfer of your data outside the European Union is mainly due to the location of
some of our subcontractors.
In order to offer you a high-quality service, we have decided to outsource certain
operations to specialist service providers with real expertise in their fields (for
example, hosting). And some of these service providers are based outside the
European Union.
How are these data transfers regulated?
Whatever the countries in which our subcontractors are based, we always select
them with the utmost vigilance. This is particularly the case when it comes to the
security of your data. These subcontractors only act on documented instructions from
DECATHLON and at no time use your data for anything other than the performance
of the services we entrust to them. A contract is systematically concluded between
DECATHLON and its selected subcontractors in order to provide a framework for the
subcontracted processing.
When our service providers are based outside the European Union, we make a point
of selecting them first and foremost from countries whose legal framework provides a
satisfactory level of security. This is referred to as an adequacy decision adopted by
the European Commission. The list of these countries is available here:
https://www.cnil.fr/fr/la-protection-des-donnees-dans-le-monde.
Where this is not possible, we use appropriate legal mechanisms to support these
transfers, in particular by signing additional contractual clauses specifically designed
for this type of transfer and adopted by the European Commission.
YOUR RIGHTS
Entrusting us with your data does not mean that you lose control of it - quite the
contrary! Here are some explanations...
You have a number of rights. Some of these apply to all processing of your personal
data, while others depend on the type of processing carried out and, more
specifically, the legal basis on which it is based (contract, legal obligation, consent,
legitimate interest, etc.).
Below is a brief description of these rights and how to exercise them.
To find out exactly what rights are attached to the processing operations concerning
you, please refer to the "your rights" section in the description of the processing
operation concerned.
Right of access:
This right allows you to ask us questions about the nature of the processing
concerning you (type of data, origin of collection, etc.). It also allows you to ask us for
a copy of all the information concerning you. This right applies regardless of the legal
basis for the processing that concerns you.
Right to rectification:
Moving house, getting married, taking up a new sport... There are many situations in
which you may need to update your data. The right of rectification is designed to do
just that. This right applies regardless of the legal basis for the processing of your
data.
Right to object:
This is the right to say "no", the right not to be included in a data processing
operation or to have your personal data processed. This right applies where the
processing is based on Decathlon's "legitimate interest", provided that this interest is
not "overriding".
Right to erasure:
It's the right to be forgotten... and it should be. DECATHLON has no reason to keep
your data beyond what is necessary. All data concerning you is therefore
automatically deleted at the end of the retention period announced when your data
was collected.
When your data is processed on the basis of your consent or DECATHLON's
legitimate (non-compelling) interest, you may obtain the early deletion of your data.
How can this be done? All you have to do is express your wish to withdraw your
consent or exercise your right to object to the processing.
Don't forget, by logging into your DECATHLON account, you can delete it (and the
data associated with it) yourself: Click here
Right to portability:
This right allows you to request data concerning you, as soon as this data is
processed on the basis of your consent or a contractual relationship. What is the
difference with the right of access? We are obliged to send you the data in a format
that is technically usable by you or by an entity other than Decathlon.
Right to limitation:
This right is complementary to some of the other rights set out above. In fact, it allows
you to have your data "frozen" after a request for rectification, for example. If you
have any doubts about the lawfulness of any of our processing operations, this right
would allow you to ask our teams to stop processing your data, but without deleting
it. Finally, if you wish to establish, exercise or defend your rights in court, you could
also use this right to request that your personal data be "frozen". If you have any
questions, please do not hesitate to contact us!
EXERCISE YOUR RIGHTS:
●Send us a message: Click here. To ensure that your request is handled as
efficiently as possible, please do not forget to :
○ to indicate the processing operation(s) concerned by your request to
indicate the right(s) you wish to exercise;
○ to provide us with any information enabling us to ensure that the person
making the request is the person concerned by the processing
(Decathlon card number, last order number, date of birth, etc.).
●By email:vosdonneespersonnelles@decathlon.com. To ensure that your
request is handled as efficiently as possible, please do not forget to :
○ to indicate the processing operation(s) concerned by your request to
indicate the right(s) you wish to exercise;
○ to provide us with any information enabling us to ensure that the person
making the request is the person concerned by the processing
(Decathlon card number, last order number, date of birth, etc.).
●By post: DECATHLON - protection des données personnelles - 4 boulevard
de Mons, 59650 Villeneuve d'Ascq (France).
To ensure that your request is handled as efficiently as possible, please do not
forget to :
○ to indicate the processing operation(s) concerned by your request to
indicate the right(s) you wish to exercise;
○ to provide us with any information enabling us to ensure that the person
making the request is the person concerned by the processing
(Decathlon card number, last order number, date of birth, etc.).
If, despite all our efforts, you feel that your rights have not been respected, please
note that you can take your case to the CNIL: https://www.cnil.fr/fr/agir or to your local
data protection authority:
Country
Data Protection Authority
Webiste
Austria
Österreichische Datenschutzbehörde
http://www.dsb.gv.at/
Belgium
Commission de la protection de la vie
privée, Gegevensbeschermingsautoriteit
http://www.privacycommission.
be/
Bulgaria
Комисия за защита на личните данни
http://www.cpdp.bg/
Croatia
Agencija za zaštitu osobnih
podataka
https://azop.hr/
Cyprus
Γραφείο Επιτρόπου Δεδομένων
Προσωπικού Χαρακτήρα
http://www.dataprotection.gov.c
y/
Czech Republic
Úřad pro ochranu osobních údajů
http://www.uoou.cz/
Denmark
Datatilsynet
http://www.datatilsynet.dk/
Estonia
Andmekaitse Inspektsioon
http://www.aki.ee/en
Finland
Dataombudsmannens byrå
http://www.tietosuoja.fi/en/
France
Commission Nationale de l'Informatique et
des Libertés - CNIL
http://www.cnil.fr/
Germany
Die Bundesbeauftragte für den
Datenschutz und die Informationsfreiheit
http://www.bfdi.bund.de/
Greece
Αρχή προστασίας δεδομένων
προσωπικού χαρακτήρα
http://www.dpa.gr/
Hungary
Nemzeti Adatvédelmi és
Információszabadság Hatóság
http://www.naih.hu/
Ireland
Data Protection Commissioner
http://www.dataprotection.ie/
Italy
Garante per la protezione dei dati
personali
http://www.garanteprivacy.it/
Latvia
Datu valsts inspekcija
http://www.dvi.gov.lv/
Lithuania
Valstybinė duomenų apsaugos inspekcija
http://www.ada.lt/
Luxembourg
Commission Nationale pour la Protection
des Données
http://www.cnpd.lu/
Malta
Office of the Data Protection
Commissioner
http://www.dataprotection.gov.
mt/
Netherlands
Autoriteit Persoonsgegevens
https://autoriteitpersoonsgegev
ens.nl/nl
Poland
Prezes Urzędu Ochrony Danych
Osobowych, PUODO
http://www.giodo.gov.pl/
Portugal
Comissão Nacional de Protecção de
Dados - CNPD
http://www.cnpd.pt/
Romania
Autoritatea Naţională de Supraveghere a
Prelucrării Datelor cu Caracter Personal
http://www.dataprotection.ro/
Slovakia
Úrad na ochranu osobných údajov
Slovenskej republiky
http://www.dataprotection.gov.s
k/
Slovenia
Informacijski pooblaščenec
https://www.ip-rs.si/
Spain
Agencia de Protección de Datos
https://www.agpd.es/
Sweden
Datainspektionen
http://www.datainspektionen.se
/
United Kingdom
The Information Commissioner’s Office
https://ico.org.uk
INTERACTIONS WITH YOUR SOCIAL NETWORKS
You can create a DECATHLON account via the "Social Login" feature. To use this
feature, you must have an account on a social network (Facebook, Twitter,
Instagram, Google, etc.) and authorize this network to share your information. By
using the Social Login feature, you expressly authorize DECATHLON to retrieve
certain information about you from your social network.
What data does DECATHLON collect from my social network via Social Login?
Only the data strictly necessary to create your account will be collected by
DECATHLON (last name, first name, e-mail). DECATHLON will not, at any time, have
access to your discussions, preferences, friends lists, etc. Although DECATHLON
undertakes not to collect any information that it does not deem necessary, we advise
you to set up your social network account to limit the volume of data that can be
shared with DECATHLON by your social network to what is strictly necessary.
What data does DECATHLON send to my social network via Social Login?
We guarantee that DECATHLON will not send any data to your social network about
your interactions with our company. However, your social network will necessarily
have the information that you used the Social Login feature to create an account with
DECATHLON. We assume that this information may be used by your social network,
in accordance with its personal data management policy, which we invite you to read
carefully before using the Social Login feature.
Who should I contact to delete data shared via Social Login?
Data obtained via the Social Login functionality is the responsibility of DECATHLON
and will be processed in accordance with our personal data management policy.
Consequently, requests for access, rectification, deletion, etc. should be sent directly
to us by clicking here. Please note that any deletion made at DECATHLON will have
no effect on the data concerning you processed directly by your social network and
vice versa.
COOKIES AND OTHER TRACKERS
DECATHLON uses cookies on its website. All the information on these cookies is
available below:
Name of
cookie/tracker
Purpose of the cookie/tracker
Lifetime of the
cookie/tracker
Decathlon SAS
(Mobiles)
Testing new features
13 months
Firebase Analytics
/ Audience
(Mobiles)
Measuring audience and content performance
13 months
Firebase
Crashlytics
(Mobile)
Collecting and analyzing the app errors
13 months
Firebase Analytics
(Mobile)
Essential cookies
13 months
You can change your preferences/consent regarding cookies and tracers at any time
from the settings page, "Information" tab, "Cookie management" button.
OUR DATA PROTECTION OFFICER
The way in which we process your data does not leave you indifferent... and quite
rightly so!
By appointing me Data Protection Officer, DECATHLON has entrusted me with the
task of supporting our commercial activity without compromising on respect for your
