Personal data and cookies

HOW DOES IT WORK?
OUR COMMITMENTS, FROM ATHLETE TO ATHLETE

Your data is not rented or given away
Your sportsperson's data (i.e., all the data you entrust to us…) is intended solely for DECATHLON. We undertake never to sell or rent this data, this is important to us. If we sometimes rely on subcontractors, they only act on our behalf and in accordance with our instructions.

We are transparent about all your data
On this page, you can find out how we process your personal data. Where, when, how, why we process your data and also what your rights are.

Our communications are tailored to your sport
As a sports enthusiast, our aim is to provide you with the best possible support in your practice and in your choice of products and advice. This is why we want to offer you appropriate communications.

Data controller:
The data you entrust to us is processed by DECATHLON SA, 4 boulevard de Mons in Villeneuve d'Ascq, 59650.

Processed data :
We process the data necessary to accompany your sports practices: your email address, date of birth, your energy expenditure, your resting heart rate, maximum heart rate, your gender, your sports practiced, your body mass index, your GPS data during sports activities, your name, first name, weight, height, your notes-comments.

Duration of retention:
Your personal data will be kept for as long as you practice a regular activity. Your data will be deleted 2 years after your last activity.

Your rights:
You can ask to consult, rectify or delete your personal data by withdrawing your consent. Under certain conditions, you may also request that your data be transferred to an entity other than DECATHLON. Simply email Jean-Pierre at this address: [email protected]. More information on your rights.

Recipients of the data:
Your data is intended for the Decathlon Coach development team (Decathlon SA). Technical subcontractors in charge of data hosting or sending notifications and emails may process your personal data. Their access is strictly controlled by DECATHLON. They may not use your data for any purpose other than the performance of the service.

Transfer outside the EU:
At DECATHLON, we make every effort to protect your personal data by following European regulations. Your data is stored on servers. In the context of sending email notifications, some of your data is transferred outside the EU. More information on data transfers.

Legal basis for processing:
The processing of your personal data is carried out only after your consent has been obtained.

Profiling or fully automated decision-making that has legal effects or significantly affects you:
This processing is not subject to any fully automated action or decision-making on our part.

Responsible for processing :
The data that you entrust to us is processed by DECATHLON SA, 4 boulevard de Mons in Villeneuve d'Ascq, 59650.

Processed data :
We process the data necessary to accompany your sporting activities: your email address, date of birth, your energy expenditure, your heart rate at rest, maximum heart rate, your gender, your sports practised, your body mass index, your GPS data during sporting activities, your name, first name, weight, height.

Duration of storage:
Your personal data will be kept for as long as you practice a regular activity. Your data will be deleted two years after your last activity.

Your rights:
You can ask to consult, rectify or delete your personal data by withdrawing your consent. Under certain conditions, you may also request that your data be transferred to an entity other than DECATHLON. Simply email Jean-Pierre at this address: [email protected]. More information on your rights.

Recipients of the data:
Your data is intended for the Decathlon Electronics (Decathlon SA) development team. Technical subcontractors in charge of hosting data or sending notifications and emails may process your personal data. Their access is strictly controlled by DECATHLON. They may not use your data for any purpose other than the execution of the service.

Transfer outside the EU:
At DECATHLON, we make every effort to protect your personal data by following European regulations. Your data is stored on servers. In the context of sending email notifications, some of your data is transferred outside the EU. More information on data transfers.
Legal basis for processing:
The processing of your personal data is carried out only after your consent has been obtained.

Profiling or fully automated decision-making that has legal effects or significantly affects you:
This processing is not subject to any fully automated action or decision-making by us.

Responsible for processing :
The data you entrust to us is processed by DECATHLON SA, 4 boulevard de Mons in Villeneuve d'Ascq, 59650.

Data processed:
We process the data that allows us to test products: your sports practices, age, address in order to send you the products, size, shoe size, as well as your email address and telephone number in order to remind you of the dates - times of the tests

Duration of storage:
The data is kept for three years after your registration to the testing program. You will receive an annual confirmation request.

Your rights:
You may request to view, correct or delete your personal data by withdrawing your consent. Under certain conditions, you may also request that your data be transferred to an entity other than DECATHLON. Simply email Jean-Pierre at this address: [email protected]. More information on your rights

Recipients of the data:
Your data is intended for our test engineers, research, and development and product managers. We also use subcontractors for technical purposes such as hosting or for communication purposes. Their access is strictly controlled by DECATHLON. They are not allowed to use your data for any purpose other than the execution of their service.

Transfer outside the EU:
At DECATHLON, we make every effort to protect your personal data by following European regulations. Your data is stored on servers. In the context of sending email notifications, some of your data is transferred outside the EU. More information on data transfers.

Legal basis for processing:
The processing of your personal data is carried out only after your consent has been obtained.

Profiling or fully automated decision-making that has legal effects or significantly affects you:
Your call is not subject to any fully automated action or decision-making by us.

Data controller:
The data you entrust to us is processed by DECATHLON SA, 4 boulevard de Mons in Villeneuve d'Ascq, 59650.

Data processed :
We process the data that allows us to manage the publication of your reviews, but also those necessary to contact you if necessary: your name, your first name and your email.

Duration of storage:
Your reviews are published for a period of 12 months and are deleted after 3 years.

Your rights:
You can consult, rectify or delete your personal data. All you have to do is email this address: [email protected]. More information on your rights.

Recipients of the data:
Your data is only intended for Decathlon. If our subcontractors process your data, they do so only for data hosting purposes, but also to enable us to inform you whether your opinions have been published, and finally for analysis purposes, and only on the instructions of DECATHLON.

Transfer outside the EU:
At DECATHLON, we make every effort to protect your personal data in accordance with European regulations. Your data is stored on servers. In the context of sending email notifications, some of your data is transferred outside the EU. More information on data transfers.

Legal basis for processing:
The processing of your personal data is carried out only after your consent has been obtained.

Profiling or fully automated decision-making that has legal effects or significantly affects you:
Your call is not subject to any fully automated action or decision-making by us.

Person in charge of the processing :
The data that you entrust to us is processed by DECATHLON SA, 4 boulevard de Mons in Villeneuve d'Ascq, 59650.

Processed data :
We process the following data: Your email address allowing you to exchange with our technicians, your postal address in case of home intervention, your telephone number in order to make contact and the product concerned.

Duration of storage:
We keep your data relating to your request for assistance 5 years after its closure.

Your rights:
You can consult, rectify or delete your personal data. You just have to email Jean-Pierre at this address: [email protected]. More information on your rights.

Recipients of the data :
Your data is intended for the people who are able to respond to your requests for assistance, namely our technicians or our customer relations center. We also use subcontractors for the purposes of software solutions or home visits, if necessary. Their access is strictly controlled by DECATHLON. They are not allowed to use your data for any purpose other than the execution of their service.

Transfer outside the EU:
At DECATHLON, we make every effort to protect your personal data by following European regulations. Your data is stored on servers. In the context of sending email notifications, some of your data is transferred outside the EU. More information on data transfers.

Legal basis for processing:
You have purchased your product from DECATHLON. In “legal” terms, this is called a contract. The after-sales service is part of it.

Profiling or fully automated decision-making that has legal effects or significantly affects you:
This processing is not subject to fully automated action or decision-making by us.

Responsible for the processing :
The data you entrust to us is processed by DECATHLON SA, 4 boulevard de Mons in Villeneuve d'Ascq, 59650.

Processed data :
We process the data necessary for safety recalls related to products: your name, first name, email, products purchased.

Retention period :
Your data will be deleted 5 years after the purchase of the product.

Your rights:
You can consult, rectify or delete your personal data. You just have to email Jean-Pierre at this address: [email protected]. More information on your rights.

Recipients of the data :
Your data is intended for our quality department, our sales department, our IT department and our legal department.

Transfer outside the EU:
At DECATHLON, we make every effort to protect your personal data by following European regulations. Your data is stored on servers. In the context of sending email notifications, some of your data is transferred outside the EU. More information on data transfers.

Legal basis for processing:
We may use your data to contact you in connection with a product-related safety recall. In “legal” terms, this is called the legitimate and compelling interest of the controller (DECATHLON).

Profiling or fully automated decision-making that has legal effects or significantly affects you:
Your order is not subject to any fully automated action or decision-making by us.

Data controller :
The data that you entrust to us is processed by DECATHLON SA / DECATHLON FRANCE SAS or DECATHLON LOGISTIQUE FRANCE SAS, 4 boulevard de Mons in Villeneuve d'Ascq, 59650.

Data processed :
We process the data that enables us to recruit our future TALENTS, your CV, or letter of motivation.

Duration of storage:
We keep your data related to your application for a maximum period of two years after the last contact with our recruiters, the notion of last contact being understood as the date on which you consented to the collection of your data.

Your rights:
You can consult, rectify or delete your personal data. Simply email Stéphanie at this address: [email protected]. More information on your rights.

Recipients of the data:
Your data is only intended for DECATHLON: the various Decathlon recruiters, who manage their recruitment independently. We also use subcontractors for technical purposes, such as the use of a software solution. Their access is strictly controlled by DECATHLON. They are not allowed to use your data for any purpose other than the execution of their service.

Transfer outside the EU:
At DECATHLON, we make every effort to protect your personal data by following European regulations. Your data is stored on servers. In the context of sending email notifications, some of your data is transferred outside the EU. More information on data transfers.

Legal basis for processing:
The processing of your personal data is carried out only after your consent has been obtained.

Profiling or fully automated decision-making that has legal effects or significantly affects you:
Your recruitment is not subject to any fully automated action or decision-making by us.

Do you know what cookies are? They are files installed on your computer or smartphone. They allow us to store information about your browsing on our websites and mobile applications. These cookies serve several purposes. We explain.

THE COOKIES PLACED AND USED BY DECATHLON :
Operating cookies: they allow you to use the main functions of the site, for example managing your shopping basket or maintaining your identification, throughout your browsing.

Personalization cookies: they allow you to visit the site in a personalized manner, depending on your previous visits, purchases, etc. These cookies allow you to quickly find the offers that best suit you.

Advertising cookies: they allow you to receive offers from DECATHLON on external partner sites.

What if I don't like cookies?

GOOD TO KNOW
MORE INFORMATION ON TRANSFERS

Did you know?
Your data may be transferred outside the European Union. Rest assured, these transfers are carried out with the utmost care. We explain...

Why do we transfer your data?
The transfer of your data outside the European Union is mainly due to the location of our subcontractors.
Indeed, in order to offer you a quality service, we have decided to outsource certain operations to specialized service providers who have real expertise in their fields (for example, hosting). And some of these service providers are established outside the European Union.

How are these data transfers regulated?
Regardless of the countries in which our subcontractors are established, we always select them with the utmost vigilance. This is particularly the case with regard to the way in which your data is secured. These subcontractors only act on DECATHLON's instructions and never use your data for anything other than the execution of the services we entrust to them. A contract is systematically concluded between DECATHLON and the selected subcontractors.

When our service providers are established outside the European Union, we make a point of selecting them as a priority in countries whose legal framework provides a satisfactory level of security. The list of these countries is available here https://www.cnil.fr/en/home

Where this is not possible, we use appropriate legal mechanisms to support these transfers, including the signing of additional contractual clauses specifically for this type of transfer or self-certification to the Privacy Shield (the latter mechanism being valid only for service providers based in the United States).
https://www.cnil.fr/en/home

How do you know if your data is being transferred?
If you wish to know whether your data is being transferred, you can refer to the "Transfers outside the EU" section of the description of the processing concerned.

The fact that you entrust us with your data does not mean that you lose control of them, quite the contrary!
Let me explain.

You have several rights. Some of them apply to all data processing concerning you, others depend on the type of processing carried out and, more precisely, on the legal basis on which it is based (contract, legal obligation, consent, legitimate interest, etc.).
Below you will find a brief description of these rights and how they can be exercised.
To find out more about the rights attached to the processing operations concerning you, please refer to the “your rights” section in the description of the processing operation concerned.

The right of access:
This right allows you to ask us questions about the nature of the processing operations concerning you (type of data, origin of collection, etc.). It also allows you to ask us for a copy of all the information concerning you. This right applies regardless of the legal basis for the processing of your data.

The right of rectification:
Moving house, marriage, new sport, … there are many situations that may lead you to update your data. The right of rectification serves precisely this purpose. This right applies regardless of the legal basis for the processing of your data.

The right to object:
This is the right to say “no!". The right not to be included in a data processing operation or to no longer be included. This right applies when the processing is based on Decathlon's “legitimate interest”, provided that this interest is not “compelling”.

The right to erasure:
This is the right to be forgotten…and rightly so. Decathlon has no reason to keep your data beyond what is necessary. All data concerning you is therefore automatically deleted at the end of the retention period announced when your data was collected. Where your data is processed on the basis of your consent or on the basis of Decathlon's legitimate (non-compelling) interest, you may obtain the early deletion of your data. How can you do this? All you have to do is to inform us of your wish to withdraw your consent or to exercise your right to object to the processing.
The right to portability :
This right allows you to request your data to be transferred to us, as soon as it is processed, on the basis of your consent or a contractual relationship. What is the difference with the right of access? We are obliged to provide you with data in a format that is technically usable by you or by an entity other than Decathlon.

You can exercise your rights by contacting us at one of the following addresses:
- by e-mail: [email protected].
- by post: Decathlon - personal data protection - 4 boulevard de Mons, 59650 Villeneuve d'Ascq

In order for your request to be managed as efficiently as possible, please do not forget :
- to indicate the processing operation(s) concerned by your request
- to indicate the right(s) you wish to exercise
- to provide us with a copy of your identity document (this information is used to check that the person making the request is the person concerned by the processing operation).

If, despite all our efforts, you feel that your rights have not been respected, you should know that you have the possibility of contacting the CNIL:
https://www.cnil.fr/en/home

The way we process your data does not leave you indifferent…and that is quite normal!
By appointing me as Data Protection Officer, DECATHLON has entrusted me with the mission of supporting our commercial activity without compromising on the respect of your rights and your private life. I am doing my utmost to accomplish this wonderful mission, with pride and humility.
A question, a remark, a concern…? I am at your disposal!

Jean Pierre, Data Protection Officer at Decathlon.
Contact: [email protected]