Personal data management policy

Manage my Cookies

Introduction

The conditions set out below (hereinafter "Data Protection Policy") apply to all areas of the business activity of Decathlon Sports Switzerland SA (hereinafter " Decathlon " or "We"). For users of the www.decathlon.chwebsite, they apply in addition to the General Terms and Conditions of Sale and the General Terms and Conditions of Use. These can be accessed as follows:
- General terms and conditions of sale
- Terms and conditions of use
Our Data Protection Policy informs you of the data processing operations we carry out if you provide us with personal data when you purchase a product in-store or when you visit our website www.decathlon.ch and/or use the online services offered there (see section I below). In the latter case, our Data Protection Policy also informs you about the storage of data by means of cookies and the storage of data by third parties (see sections II and III below).
If, after reading this document, you provide us with personal data during an in-store purchase, or if you visit our website and/or use the services offered there, you accept this Data Protection Policy.
The Data Protection Policy is subject to change. It is available at all times in our stores and on the website https://www.decathlon.ch (hereinafter the "Site"). The current version of the Data Protection Policy prevails over any other version or any other contradictory document. You can print it out or download it at format PDF so that you can refer to the current version at a later date.

I - PROCESSING OF PERSONAL DATA

1. CATEGORIES OF PERSONAL DATA PROCESSED | DEFINITIONS

Personal data provided by you, or collected in accordance with the legal and contractual provisions in force and which are inherent, linked and/or useful to the management of your experience on our e-commerce site will be processed in accordance with the provisions of the LPD and the confidentiality obligations.
In particular, we will process the following personal data: browsing data (for more information on data collected by means of cookies, please see our Cookie Policy); data voluntarily provided by the user (to place an online order and/or to register for MyDecathlon on our website), such as: account name, surname, first name, gender, date of birth, delivery address, billing address, e-mail address, telephone number, payment information (e.g. credit/debit card number), favorite sports; history of items purchased through your account (if applicable). If your purchases are linked to a company/legal entity, we also process information concerning: name, VAT number, company identification number (EIN).
Personal data: any information concerning an identified or identifiable person.
Data subjects: natural or legal persons whose data is processed (also referred to as "you").
Processing: any operation involving personal data, regardless of the means and procedures applied, and in particular: the collection, storage, use, modification, communication, archiving or destruction of data.
Communication: the act of making personal data accessible, for example by allowing access, transmission or publication.

2. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER

The company that determines the purposes and means of the processing of personal data is DECATHLON SPORT SWITZERLAND SA, a company incorporated under Swiss law with registered office at Route de Meyrin 171, 1214 Vernier, Switzerland, VAT no. CHE-106.127.042 (also referred to as " Decathlon " or the "data controller", or the "company" or "we"). The contact details of the file owner are as follows: [email protected].
2.1 CONTACT DETAILS OF OUR DATA PROTECTION OFFICER We have appointed a Data Protection Officer, who can be contacted at the following e-mail address: [email protected].

3. PURPOSES OF PROCESSING | DATA RETENTION PERIOD

PURPOSE OF PROCESSING DATA RETENTION PERIOD
a) Activities strictly necessary to enable the user to navigate this website and to monitor its proper functioning. Data will be stored until the end of the browsing session. For data processed using technical cookies, please read our Cookie Policy.
b) Collection of anonymous information for statistical purposes on the use of the website and services. Please read our Cookie Policy
c) Creation of a personal account (MyDecathlon) which is our loyalty program. If you wish to purchase products through our eCommerce/Application please note that you will be asked to create a MyDecathlon account. During the registration process the file owner verifies the identity of the user requesting the account by means of the e-mail address/mobile phone number entered in the registration form. You will then receive the link to access our website/application again and complete the creation of your account. For registration via your social network account: Login Social is a technology that allows the user to automatically share certain personal data entered in a social network with the operator of a website (e.g. us). For example, the user can use this technology to quickly register on a website/application. In short, with the user's authorization, the social network will send the website operator the personal data needed to register on the website, without the user having to enter the required data manually. Data will be kept for 3 years after inactivity or deleted on request.
d) Fulfilment of contractual obligations. Processing of purchases you have made via our e-commerce site - including commercial communications related to your purchase (e.g. order confirmation), issuing of receipts/invoices and delivery of purchased products. Data will be kept for at least 10 years from the issue of the corresponding invoice/receipt in accordance with the Swiss Code of Obligations.
e) Canvassing/direct marketing activities (if consented) by automated processes (e.g. newsletter) The data will be kept until objection.
f) Profiling (if consented): your personal data will be stored in our CRM/platform systems for internal analysis. We will also aggregate personal data into homogeneous groups based on your purchasing history and/or trends in order to better organize our services and send you personalized promotional communications. The data will be kept until objection.
g) Fulfilment of contractual obligations. Processing your rental order through a dedicated online platform, including commercial communications related to this service (e.g. order confirmation) and receipts/invoices. The data will be kept until you return the rented equipment to us and we have checked its conditions in accordance with the rental agreement. Please note that all identification documents will be copied. Identification documents will only be processed for the time strictly necessary for our team to verify your identity.
h) Communication/transfer of personal data to group companies Decathlon for statistical and customer satisfaction analysis purposes: parent company or controlled or related or affiliated companies. A list of group companies is available on request from the following e-mail address [email protected]. The data will be kept until the data subject objects.
i) Management of your contact and information requests made via our online forms and chatbot. The data will be kept for 3 years after the closure of your request.
l) Gift card management Decathlon In accordance with the Swiss Code of Obligations, data will be kept for at least 10 years from the issue of the gift card.
m) Communication/transfer of personal data to group companies Decathlon for marketing purposes (if consented to): parent company or controlled or related or affiliated companies. The data will be kept until objection.
n) To enable the owner of the file to determine, exercise or defend its own rights (including the recovery of debts) before any court or competent authority. Data will be kept for as long as is necessary for the purpose of processing.

4. RECIPIENTS OF PERSONAL DATA

Your personal data may be shared with employees and/or personnel working under the authority of our data controller and duly trained in the above-mentioned purposes or with third parties contractually bound to Decathlon, in order to perform contractual obligations and to achieve one or more of the above-mentioned processing purposes. These third parties will process your data as independent subcontractors or data controllers. In particular, your personal data may be shared with the following categories of recipients: a) subjects who provide maintenance services for the information system used by Decathlon and the telecommunications network (including the provision of MyDecathlon and the website); b) assistance and consultancy companies or firms (e.g. web agencies, law firms); c) third parties (e.g. companies that provide services to the company). agencies, law firms); c) carriers or providers of payment systems; d) competent authorities for the enforcement of legal obligations and/or provisions emanating from public bodies (upon request); e) group companies, including those headquartered outside the territory of the Swiss Confederation; f) payment service providers; g) vendors and other third parties having a contractual relationship with Decathlon for the sale and delivery of their own products through this website.

5. TRANSFER OF PERSONAL DATA OUTSIDE THE SWISS CONFEDERATION

Personal data may be transferred to foreign countries in accordance with the provisions of the Data Protection Act. More specifically, personal data is communicated outside Switzerland (for example, it may be stored in France, where some of the tools we use to process your data store it), if the following requirements are met: -- appropriate safeguards are provided, such as contractual measures ensuring sufficient protection abroad; the list can be consulted at the following link: https://www.fedlex.admin.ch/eli/cc/2022/568/fr#annex1/lvlu1 -- the processing is directly linked to the conclusion or performance of a contract and the data processed concerns the other contracting party; -- communication takes place within the same legal entity or company, or between legal entities or companies controlled by the same management, provided that the sender and recipient are subject to data protection provisions guaranteeing sufficient protection.

6. RIGHTS OF THE PERSON CONCERNED

In accordance with the provisions of the DPA, the owner of the file acknowledges that, as a data subject, you have the right (non-exhaustive list): -- to obtain rectification of personal data concerning you that is inaccurate or obsolete; -- to be informed, free of charge and in writing, of the processing of personal data concerning you; -- to revoke any consent you may have previously given to the processing of your data; -- to refuse the communication of your sensitive personal data to third parties (if applicable); -- express your opinion on an automated individual decision or request that it be verified by a natural person (if applicable); -- obtain portability of your personal data or request that it be transferred to third parties; -- request that the processing of your data, in particular communication to third parties, be restricted or prohibited, or that your data be rectified or destroyed; -- to object: to a specific processing of your personal data, to a specific communication of your data to third parties, to the deletion or destruction of some of your personal data. -- to request, if the accuracy or inaccuracy of personal data cannot be established, that the data be marked as disputed; -- to request that the data be rectified or destroyed, that it not be communicated to third parties, that the contentious nature of the data be mentioned, or that the decision be communicated to third parties or published; -- that the unlawful nature of personal data processing be declared. To exercise your rights under the DPA, you can contact the data controller by post at our head office in Vernier (CH), Route de Meyrin 171, 1214 Vernier, or by writing to the e-mail address: [email protected]. You can also contact our Data Protection Officer at [email protected] or the Swiss supervisory authority (Swiss Federal Data Protection and Information Commissioner - FDPIC).

7. ADDITIONAL INFORMATION | CHANGES | UPDATES

We do not sell your data.
The file owner reserves the right to revise, update, add or remove any part of this privacy policy at any time and at its convenience. In the event of modification, the date of revision will be indicated.
Date of last revision: 01.09.2023

8. Privacy policy regarding the processing of personal data (special commercial operations)

In accordance with the Federal Data Protection Act (DPA), we provide you with the necessary information regarding the processing of personal data collected and processed as part of special commercial operations, accessible on www.decathlon.ch, on our application and/or in our stores. This policy applies exclusively to international members of Decathlon, i.e. customers who do not have a Decathlon account based in Switzerland, but in another country where the Decathlon group operates (for example, if your Decathlon account is based in Germany and you join one of our special commercial operations, available in Switzerland according to the conditions of the corresponding operation, this privacy policy applies to you). This privacy policy only applies to the processing of personal data in connection with our special business operations. For more information on our special commercial operations, please read the conditions of the corresponding operation. Depending on the context in which personal data is collected, this policy may be supplemented by other applicable policies. It is intended that Decathlon members' data will be processed in accordance with our personal data management policy, available on www.decathlon.ch, our app and in our stores, in addition to this policy.

8.1. CATEGORIES OF PERSONAL DATA PROCESSED | DEFINITIONS

Please find below a list of definitions according to the DPA that may be useful to you when reading this privacy policy: Personal data: any information relating to an identified or identifiable person. Data subjects: natural or legal persons whose data is processed (also referred to as "you"). Processing: any operation involving personal data, regardless of the means and procedures applied, and in particular: the collection, storage, use, modification, communication, archiving or destruction of data. Communication: the act of making personal data accessible, for example by allowing access, transmission or publication. In particular, we will process the following personal data: data voluntarily provided by you, such as: account number, surname, first name, gender, date of birth, delivery address, billing address, e-mail address, telephone number, payment information (e.g. credit/debit card number), preferred sports.

8.1.2 SOURCE OF PERSONAL DATA PROCESSED

In general, we process the personal data you provide to us directly and voluntarily. However, at your request, we may ask Decathlon SE to obtain this data (e.g. your account number, e-mail address, etc.). If you are an international member of Decathlon, we do not have direct access to your Decathlon account information.

8.2. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

The company that determines the purposes and means of processing personal data is Decathlon Sport Switzerland SA, a company incorporated under Swiss law with its registered office in Vernier (CH), Route de Meyrin 171, 1214 Vernier, VAT no. CHE-106.127.042 (also referred to as " Decathlon " or the "Data Controller", or the "Company" or "we"). The contact details of the Data Controller are as follows: [email protected].

8.2.1. CONTACT DETAILS OF OUR DATA PROTECTION OFFICER

We have appointed a Data Protection Officer who can be contacted at the following e-mail address: [email protected].

8.3 PURPOSES OF PROCESSING | DATA RETENTION PERIOD

PURPOSE OF PROCESSINGDATA RETENTION PERIOD
a) Fulfilment of contractual obligations. Processing of personal data within the framework of special commercial operations as described in the conditions of the corresponding operation, including communications in connection with the operation (e.g. order confirmation), issue of receipts/invoices and delivery of purchased products. In accordance with the Swiss Code of Obligations, the data will be stored for at least 10 years from the date of joining the corresponding special business transaction.
b) Communication/transfer of personal data to group companies Decathlon for statistical and customer satisfaction analysis purposes: parent company, related or affiliated controlled companies. The data will be kept until objection.
c) To enable the Data Controller to determine to exercise or defend its own rights (including the recovery of debts) before any court or competent authority. Data will be kept for as long as is necessary for the purpose of processing.

8.4 CONTACT DETAILS FOR OUR DATA PROTECTION OFFICER

Your personal data may be shared with employees and/or staff working under the authority of our Data Controller and duly trained on the above-mentioned purposes or with third parties contractually bound to Decathlon, in order to perform contractual obligations and to achieve one or more of the above-mentioned processing purposes. These third parties will process your data as subcontractors or independent data processors. In particular, your personal data may be shared with the following categories of recipients: a) subjects who provide maintenance services for the information system used by Decathlon and for the telecommunications network (including our websites); b) assistance and consultancy companies or firms (e.g. web agencies, law firms); c) third parties (e.g. companies that provide services to our customers). agencies, law firms); c) carriers or providers of payment systems; d) competent authorities for the enforcement of legal obligations and/or provisions emanating from public bodies (upon request); e) group companies, including those headquartered outside the territory of the Swiss Confederation; f) payment service providers; g) vendors and other third parties having a contractual relationship with Decathlon for the sale and delivery of their own products through this website.

8.5. TRANSFER OF PERSONAL DATA OUTSIDE THE SWISS CONFEDERATION

Personal data may be transferred to foreign countries in accordance with the provisions of the Data Protection Act. In particular, personal data may be communicated outside Switzerland (for example, to France, where some of the tools we use to process your data store it), if the following requirements are met:
appropriate safeguards are provided, such as contractual measures ensuring sufficient protection abroad; the list can be consulted at the following link "www.fedlex.admin.ch/eli/cc/2022/568/fr#annex_1";
the processing is directly linked to the conclusion or performance of a contract, and the data processed concerns the other contracting party;
the communication takes place within the same legal entity or company or between legal entities or companies controlled by the same management, provided that the sender and recipient are subject to data protection provisions guaranteeing sufficient protection.

8.6. RIGHTS OF THE PERSON CONCERNED

In accordance with the provisions of the DPA, the Data Controller acknowledges that, as a data subject, you have the right (non-exhaustive list):
obtain the rectification of personal data concerning you that is inaccurate or obsolete;
to be informed, free of charge and in writing, of the processing of personal data concerning you;
to revoke your consent to the processing of your personal data (if applicable);
to refuse the communication of your sensitive personal data to third parties (if applicable);
express your opinion on an automated individual decision or request that it be verified by a natural person (if applicable);
obtain portability of your personal data or request that it be transferred to third parties;
request that the processing of your data, in particular communication to third parties, be restricted or prohibited, or that your data be rectified or destroyed;
to object: to a specific processing of your personal data, to a specific communication of your data to third parties, to the deletion or destruction of some of your personal data.
to request, if the accuracy or inaccuracy of personal data cannot be established, that the data be marked as disputed;
request that the data be rectified or destroyed, that it not be communicated to third parties, or that the contentious nature of the data or the decision be communicated to third parties or published;
to declare that the processing of personal data is unlawful.

To exercise your rights under the DPA, you can contact the Data Controller by post at our head office in Vernier (CH), Route de Meyrin 171, 1214 Vernier, or by writing to the e-mail address [email protected]. You can also contact our Data Protection Officer at [email protected] or the Swiss supervisory authority (Swiss Federal Data Protection and Information Commissioner - FDPIC).

8.7. ADDITIONAL INFORMATION | CHANGES | UPDATES

We do not sell your data. The Data Controller reserves the right to revise, update, add or remove any part of this Privacy Policy at any time and at its own discretion. In the event of modification, the date of revision will be indicated. Date of last revision: November 28, 2023