PRIVACY AND COOKIES POLICIES
VERSION: 5, OCTOBER 2024 | PRIVACY POLICY
This website is operated by Decathlon Sports Ireland Limited, a company incorporated under the laws of Ireland under company number 589659 with registered office at Decathlon, Saint Margaret’s Road, Ballymun, Dublin 11, D11 X2NC, Ireland (“DECATHLON”, “we”, “our” or “us”).
Unless otherwise stated below, DECATHLON is a ‘controller’ of your personal data. This means that we are responsible under data protection law for deciding the purposes and means for which we process your personal data. ‘Personal data’ means information about an individual from which that person can be identified.
This privacy notice applies to individuals (“you”, “your”) who access, browse or use our website, visit us or attend events hosted at our store, submit to us an application for employment, and/or communicate with us by email, telephone or by any other means.
PRIVACY AND COOKIES POLICIES Q&A
Our commitments
Your data is yours! At DECATHLON, we believe that you should have control over your data. Apart from the few legal obligations to which we are subject, only you can accept how your data is used by DECATHLON.
We are transparent about all data about you! You can find information on this page about all the processing relating to your personal data. Where, when, how, why do we process your data and, also, what your rights are.
Our communications are relevant to you.
Whatever your sport, whatever your passion, our aim is to support you as best we can in your sporting activities and choice of products.
About this Privacy Notice
Our Privacy Policy, described in this Notice, applies to individuals (“you”, “your”) who access, browse or use our website, visit us or attend events hosted at our store, submit to us an application for employment, and/or communicate with us by email, telephone or by any other means.
This privacy notice is structured as follows:
- It explains how we receive your personal data.
- It then goes on to list all the ways in which we use your personal data.
- It tells you about possible international transfers.
- It lists your rights, how to exercise them and how to complain.
It is important that you read this privacy notice together with our Cookie Policy and any other privacy policy we may provide on specific occasions when we are collecting or processing personal data about you, so that you are fully aware of how and why we are using your data. This privacy notice supplements other privacy notices and policies and is not intended to override them.
Review of this Notice
To ensure we are always on top of the game, we regularly review this Notice and any changes made will be posted on our website and where appropriate, it will be notified to you by email.
About Us
Decathlon Sports Ireland Limited is a company incorporated under the laws of Ireland under company number 589659 with registered office at Decathlon, Saint Margaret’s Road, Ballymun, Dublin 11, D11 X2NC, Ireland (“DECATHLON”, “we”, “our” or “us”).
Unless otherwise stated below, DECATHLON is a ‘controller’ of your personal data. This means that we are responsible under data protection law for deciding the purposes and means for which we process your personal data. ‘Personal data’ means information about an individual from which that person can be identified.
How Do We Receive Your Personal Data?
We may receive your personal data through:
- Direct interactions: You may give us your personal data when you create and manage a user account with us, purchase our products or services, participate in our events, complete surveys, submit reviews via our website, visit us in store or communicate with us by post, telephone, email, social media or any other means.
- Automated technologies or interactions: We may collect your personal data as you browse and interact with our website through the use of cookies and other similar technologies. For more information on our use of cookies and other similar technologies please see below and in our Cookies Policy.
- Third party sources: We may receive personal data about you from third parties, such as analytics providers in respect of your visits to and use of our website, and providers of payment services you choose to use when purchasing our products.
Where we need to collect personal data by law, or under our Terms and Conditions, and you do not provide that personal data when requested, you may not be able to purchase products from us.
How Do We Use Your Personal Data?
Love buying new sports gear? The pages of our website are often the first step towards new sporting adventures.
But just when you can already imagine yourself with your new products in your hands (or on your feet), you have to fill out a data collection form! Have you experienced this situation? So have we. So what's the point of these forms? Let us explain:
We collect and process your personal data in order to manage your purchase (we may need your delivery address or invoicing address, for example) and to avoid fraudulent transactions (to prevent purchases made with a stolen bank card, for example). Finally, it goes without saying that we also process the data linked to your means of payment!
Want to know more? Below is a case-by-case explanation of how we process your personal data.
Shopping: Website and Store
Personal Data Processed and Purpose of Processing:
We process personal data (your first name, last name, billing, delivery address and tracking number) to enable you to place orders online or make purchases and use our services in store, including our ‘ship from store’ service, bicycle workshop, Cycle to Work scheme, and shoe fitting service.
We also process your personal data to enable payment of your items, their delivery and where necessary their return, and to allow us to link your purchases to your DECATHLON user account. Your email address and telephone number enable you to be notified of the progress of your order (e.g. we may send you your receipt, order confirmation and dispatch notification by email).
We may also receive personal data from you when you ask us about a product (e.g. your contact details and any other personal data contained in your communication). When you use our in-store foot scanner, we process your foot measurements to recommend your perfect shoe, and when you avail of the Cycle to Work Scheme, we process your name and contact details and your employer’s name so we can invoice them.
When you take part in our BUYBACK programme, we will collect contact details such as name, address, telephone and form of identification. We will collect contact details information including address and payment details where you book our WORKSHOP.
Important: Our website is not intended for children, and we do not knowingly collect and/or process children’s data.
Data Recipients: We use outsourcers for operational purposes such as for payment and delivery, as well as IT service providers, web hosting and other technical purposes. Their access is strictly managed by DECATHLON. They are not permitted to use your personal data for any purpose other than for the service they provide. We may also disclose your personal data to third parties who provide services to us, professional service providers and to other Decathlon entities.
Legal Basis for Processing: You intend to or have placed an order with DECATHLON. In "legal” terms, this is called a contract. We need to process your personal data to fulfil our part of the contract or to help you enter into a contract with us. DECATHLON also relies on its legitimate interests in carrying out its business, operating its retail store and online retail platform, facilitating and fulfilling customers’ orders and providing a good purchase experience. We obtain your consent before processing your measurements for our shoe fitting service, bicycle or other similar purchases.
Shopping: Buyback
Personal Data Processed and Purpose of Processing: As part of the BUYBACK programme, we will buy sports products from you. To do so we will collect and process contact details information such as name, last name, e-mail address, contact information, a form of identification such as national I.D., and financial details. We will process data enabling us to protect us against buying stolen items.
Data Recipients: We may disclose your personal data to third-parties who provide services to us such as payment services, IT service providers and other professional service providers. We might also disclose your personal data to public authorities including law enforcement, should they make a request for it.
Legal Basis for Processing: By taking part in the BUYBACK scheme, you have entered into a contract with us! Thus we process your personal data on the basis of performing our contract but also with the legitimate interest of protecting us against stolen items.
Shopping: Workshop
Personal Data Processed and Purpose of Processing: For the WORKSHOP, we will collect name, last name, address, phone number, e-mail address, details about the item you are requesting services for, and financial details e.g. payment card. We will contact you with updates regarding the status of the services you have requested.
Data Recipients: We may disclose your personal data to third-parties who provide services to us.
Legal Basis for Processing: We process your personal data to ensure that we perform the obligations under our contract with you!
Prevention of Fraudulent Payments
Personal Data Processed and Purpose of Processing: We process data enabling us to protect against fraudulent online payments: your email address, customer ID number, telephone number, invoicing address, delivery address, information regarding the means of payment, order amount and order frequency.
Data Recipient: We may disclose your personal data to third parties who provide services to us such as payment services, IT service providers and other professional service providers. We might have to disclose your personal data to public authorities including law enforcement, should they make a request for it.
Legal Basis for Processing: The checks conducted prior to your order are in DECATHLON’s legitimate interest for identifying and preventing fraud, as well as to comply with any legal obligation. When you place an order, we may carry out profiling or decision-making, which may be done in a fully automated manner. These checks are necessary for the conclusion of our contract (the order) and prevention of fraud.
Payments Online or via the Store
Personal Data Processed and Purpose of Processing: We process personal data enabling us to process your payment, manage the invoicing of your online or in-store purchases and process refunds, including your name, last name, transaction ID, basket number, invoicing address, delivery address, email address, bank card details, the means of payment used, the order amount, details of the products ordered and the date of the purchase. If you pay us by cheque, we may also process your personal data for the prevention of bad cheques.
Data Recipients: We may disclose your personal data to third parties who provide services to us such as payment processors, cash collection service providers, IT service providers and other professional service providers.
Legal Basis for Processing: We process your personal data for the performance of our contract with you and for our legitimate interests in preventing fraudulent payments. We may carry out profiling or decision-making, which may be done in a fully automated manner, for the prevention of fraud. These checks are necessary for the conclusion of our contract (the order) and to comply with any legal obligation.
Gift Cards
Personal Data Processed and Purpose of Processing: We process data enabling us to manage your gift card: your email address, information connected to your means of payment, comments and photos linked to the customization of the gift card, your name, last name, telephone number, delivery address, invoicing address, tracking number and items ordered.
Data Recipients: We may disclose your personal data to third parties who provide services to us such as IT service providers and other professional service providers.
Legal Basis for Processing: You have placed an order. In "legal” terms, this is called a contract. We need to process your personal data to fulfil our part of the contract and process your order properly.
Management of your Decathlon account
Your DECATHLON account is a dashboard enabling you to keep useful and important information together in one place. For instance, your DECATHLON account offers you the possibility of tracking the status of your order, viewing your purchasing history and even finding your receipts!
By logging into your account, you can check your security, and manage some of your personal data preferences. For example, you can tell us if you want to receive our communications (sporting advice, special offers, email marketing etc.). You can withdraw your consent to receive marketing emails from us whenever you wish by using the ‘unsubscribe’ link in our marketing emails, contacting us using the contact details set out below or via the ‘My Communication Choices’ section of your user account.
By default, you will receive membership communications from us (such as points balance, vouchers expiring, etc) related to your account. You can change this preference via the ‘My Communication Choices’ section of your user account at any time. And you can delete your Account whenever you wish by accessing our Privacy Preferences and select Delete Account.
Personal Data Processed and Purpose of Processing: We process data enabling us to manage your access, authentication and personalisation of your user account, including your email address and password. Optionally we may process your name, address(es), phone number and purchase history if you provide this, or transact using your account to personalise our service or help us to fulfil our obligations under a contract with you. We may process data relating to date of birth, gender, favourite sports and favourite store as well as your body measurements, if you choose to provide these, in order to personalise our product and service offerings to you.
Data Recipients: We may disclose your personal data to other Decathlon entities and to third parties who provide services to us such as IT service providers and other professional service providers. If you choose to connect other apps and services (such as fitness apps) to your account, we may exchange your personal data with these service providers. When you consent to receive marketing communications from us, we may also share your personal data with our marketing agencies and advertising partners.
Legal Basis for Processing: This processing is carried on the basis of DECATHLON’s legitimate interests in carrying out its business, and enabling its customers to create and manage personalised user accounts.
Management of Direct Marketing
We send you messages tailored to you: advice concerning the sports you take part in, products tailored to your interests, special offers right up your street and events you might be interested in, etc.
You can withdraw your consent to receive marketing emails from us whenever you wish by using the ‘unsubscribe’ link in our marketing emails, contacting us using the contact details set out below or via the ‘My Communication Choices’ section of your user account.
Personal Data Processed and Purpose of Processing: We process personal data enabling us to manage direct marketing: your first name, last name, email address, gender, purchasing history, contents of your cart and favourite sport. If you consent as part of our cookies framework, we may use cookies and similar technologies, for example, to see whether or not you read or interact with our marketing communications. We may also process your name, city and comment if you leave us a review for publication in our marketing materials.
Data Recipients: We may disclose your personal data to third parties who provide services to us such as marketing agencies, IT service providers and other professional service providers.
Legal Basis for Processing:
Your personal data is processed only after we have obtained your consent.
As part of our management of direct marketing, we may carry out profiling or decision-making, which may be done in a fully automated manner. This operation will only take place after we have obtained your consent.
Safety Recalls
At DECATHLON, safety is our number one priority. We develop our products in compliance with the standards and regulations in force. However, we know that zero risk does not exist.
In the event of a defect in one of our products, we want to be able to contact you quickly and personally. To do this, we may decide to use your contact details (telephone, email or post) where such information is in our possession.
What if we don't have this information? We may have to ask you for it when you purchase products presenting a risk to your safety in the event of a malfunction (bike, diving equipment, climbing equipment, etc.).
Personal Data Processed and Purpose for Processing: We process the data necessary for safety recalls in connection with products: your name, last name, email address, telephone number and products purchased.
Data Controller: For the purpose of safety recalls, the data you provide us with is processed by DECATHLON SE, 4 boulevard de Mons in Villeneuve d'Ascq, 59650 - France. DECATHLON SE are independent controllers for this activity.
Recipients of the Data: Your personal data is processed by DECATHLON and DECATHLON SE. We may disclose your personal data to third parties who provide services to us such as professional service providers.
Legal Basis for Processing: We may use your personal data to contact you in the event of a safety recall in connection with a product to comply with our legal obligations, our contract with you and our legitimate interests in protecting our customers.
Analytics and Advertising
Personal data processed and purpose for processing: If you consent, we may use cookies and other similar technologies that help us to assess and improve our website and services, to personalise your user experience on the website and allow us to include ads on other websites and apps, such as social media.
The personal data we process may include information about how you interact with our website such as the products you view and search for, the products you purchase and the contents of your shopping cart, as well as technical information about your visits to our website such as your Internet Protocol (IP) address, browser type, operating system, location, length of visit. For more information on our use of cookies and other similar technologies please see our Cookies Policy below.
We might offer you the opportunity to purchase a sporting product on the website of one of our affiliates. We use third party software provided by Effinity, which places links to third party websites (e.g. Alltricks) on our website. If you consent to the use of cookies and choose to click through to a third-party websites (e.g. Alltricks), pseudonymised personal data (e.g. IP address, session ID and device identifier) may be tracked and processed by us, Effinity tracking software and the third party website, so that we can monitor the success of the affiliation and the payment of commission. See here for more information: https://www.effiliation.com/en/rgpd/
Data Recipients: We may share your personal data with other Decathlon entities and with companies that provide us services such as marketing agencies, advertising partners and analytics companies.
Legal Basis for Processing:
If you consent, as part of our cookies framework, we will use non-necessary cookies (e.g. analytics cookies) that collect data related to your interactions with our website. We will request your consent before setting non-necessary cookies on your device. You can withdraw your consent at any time. We also rely on our legitimate interests in improving our products and services and assessing, informing and implementing our advertising strategy.
As part of our management of advertising, we may carry out profiling or decision-making, which may be done in a fully automated manner.
Contacting Customer Service and Legal Correspondence
Passionate as we are, obtaining the satisfaction of our sports enthusiasts is our driving force. Unexpected situations can, however, occur: an error in your order, a delivery delay, a fault in a product, etc.
Our customer service centre is at your disposal to help you at such times and ensure you obtain the satisfaction you are entitled to expect. You can contact it in different ways such as by email, telephone or via our social media pages.
We process certain personal data concerning you in order to process your calls and messages and to resolve your queries.
Personal Data Processed and Purpose of Processing: We process the personal data necessary to manage and respond to your communications to us: your name, last name, email address, postal address, social media handle, phone number, voice recording, the product concerned, the nature of the query, complaint or defect and any other personal data contained in your communication including, where absolutely necessary and justified by the nature of the defect, data relating to your state of health.
Data Recipients: We may disclose your personal data to other Decathlon entities and to companies that provide services to us such as our IT service provider and other professional service providers.
Legal Basis for Processing:
Your personal data is processed in the legitimate interest of the data controller (DECATHLON) in responding to and resolving your queries and communications, to assist us in fulfilling a contract with you, gauging customer satisfaction and in defending or pursuing legal proceedings.
‘Special categories of personal data’ require greater protection under data protection law. This includes personal data concerning health. When we process personal data concerning your health we may do so to protect your vital interests or for the establishment, exercise or defence of legal claims.
CCTV
Personal data processed and purpose of processing: We process your personal data (for example, your image, face and car registration) to protect the premises and property from crime and damage, to ensure the health and safety of staff and visitors, in the investigation of potentially serious disciplinary matters and as evidence in legal disputes.
Data Recipients: Your personal data may be processed by technical outsourcers, responsible for hosting the data. An Garda Síochána or other law enforcement bodies may request access to your data. Outsourcers (for example security, insurance, external legal firms etc.) may also have access to your data for security, legal disputes or claims. Their access is managed by DECATHLON.
Legal Basis for Processing: The processing of your data for CCTV purposes may be to comply with a legal obligation (for example to assist the An Garda Síochána) or in the legitimate interest of the data controller (DECATHLON) to protect the premises and property from crime and damage, to ensure the health and safety of staff and visitors, in the investigation of potentially serious disciplinary matters and as evidence in legal disputes or claims.
Sporting Events Organised by Your Store
Personal data processed and purpose of processing: We process the personal data necessary to manage sporting events organised by your store, for example: your name, email address, postal address, telephone number, date of birth and your Decathlon account details. With your consent, we may also process photos or videos of you for training and/or promotional purposes.
Data Recipients: Your personal data may be processed by technical outsourcers responsible for hosting the data. Their access is strictly managed by DECATHLON.
Legal Basis for Processing: We handle the management of sporting events organised by your store in which you take part. In legal terms, this is called a contract. We need to process your personal data to fulfil our part of the contract. We also have a legitimate interest in processing personal data of those who take part in sporting events in store.
In-store Free Wi-Fi
Personal data processed and purpose of processing: If you visit our store and connect to our free Wi-Fi, we may process data that allows your identification (name, last name, email, terminal used, IP address) as well as your navigation. The purpose of processing is to allow Decathlon to provide you with free WIFI access in its stores, for information security purposes, and to comply with any legal obligations.
Data Recipients: Your personal data may be processed by technical outsourcers responsible for hosting the data and other IT service providers. Their access is strictly managed by DECATHLON.
Legal Basis for Processing: We process your personal data for our legitimate interests in safeguarding our networks. We will process your personal data only after you have provided your consent.
Job Applications
Personal data processed and purpose of processing: If you apply for a job with us, we may collect personal data contained in your job application, CV, record of interview, verification documentation, copies of right to work documentation, copy passport or other identification, work history, references and other personal data included in a cover letter, communications or as part of the application and selection process. We process this personal data for the purpose of responding to your application and managing our recruitment and selection process.
Data recipients: We may disclose your personal data to companies that provide services to us such as our IT service providers and other professional service providers.
Legal basis for processing: We process your personal data in order to take steps, at your request, prior to entering into a contract with you and for our legitimate interests in assessing the suitability of candidates.
Information on Data Transfers
Did you know? In some circumstances, it may be necessary for us to process or transfer your personal data outside the European Economic Area (EEA) for the purposes described in this privacy notice. Rest assured, such transfers are carried out very carefully. Let us explain...
Why do we transfer your data? The transfer of your data outside the European Union (EU) is chiefly explained by the location of other DECATHLON entities worldwide and of our service providers. In effect, in order to offer you a high-quality service, we outsource certain operations to specialised service providers with extensive expertise in their fields (e.g. web hosting). Some of these service providers are established outside the European Economic Area (EEA).
How are these data transfers governed? We comply with applicable data protection law when transferring your personal data outside of the EEA, such as by ensuring that the country or territory where your personal data will be processed is deemed, by the European Commission, to have an adequate level of protection for personal data. If no such adequacy decision is in place, we have measures in place (namely standard contractual clauses approved by the European Commission) to ensure that your personal data receives an adequate level of protection.
Data RetentionWe keep your personal data for no longer than is necessary, based on the purposes set out in this notice and for the purposes of complying with any legal or regulatory requirements, or in order for us to establish, exercise or defend our legal rights. When determining the appropriate period to retain personal data, we consider various factors, including relevant regulatory guidance, specific legal or regulatory obligations and applicable statutory limitation periods. In some circumstances, we will anonymise your personal data for research and statistical purposes. In general, your data will be deleted 3 years after our last contact with you. CCTV Data is retained for 28 days, unless we need to retain it for a longer period for a specific reason.
Data Retention
Your Rights
You have a number of rights. Some apply to all data processing concerning you, while others depend on the type of processing concerned and, in particular, the legal grounds on which it is based (contract, legal obligation, consent, legitimate interest, etc.).
Right of access: The right enables you to question us as to the nature of the data processing concerning you and to ask us for a copy of all information concerning you.
Right of rectification: You can request to have any incomplete or inaccurate personal data we control corrected.
Right to object: This is the right not to be included in data processing, applicable where the processing is based on DECATHLON's "legitimate interest".
Right to erasure: This is the right to be forgotten, applicable under certain conditions.
Right to portability: This right entitles you to request to obtain the data concerning you where such data is subject to automated processing based on your consent or on a contractual relationship.
Right of restriction: This right entitles you to request that we suspend processing of your personal data under certain conditions.
Right to withdraw your consent: If you provided your consent for a specific purpose, you have the right to withdraw your consent at any time.
Right not to be subject to automated decision making and profiling: This applies where a decision is based solely on automated processing.
Exercising Your Rights
You can exercise your rights by contacting us in one of the following ways:
- by e-mail: [email protected]
- by post: “Decathlon – Personal Data Protection, St. Margaret's Road, Ballymun, Dublin 11, D11 X2NC”.
To ensure your request is processed efficiently, please include:
- The type(s) of processing your request pertains to
- The right(s) you wish to exercise
- A copy of your ID for security purposes
We aim to respond to all legitimate requests within one month. In complex cases, we may take longer and will keep you updated.
Our Data Protection Officer
If you have any questions or concerns regarding this notice or our handling of your personal information, you may contact our Data Protection Officer (DPO) at:
- by e-mail: [email protected]
- by post: “Decathlon – Data Protection Officer, St. Margaret's Road, Ballymun, Dublin 11, D11 X2NC”.
Your Right to Complain
If you believe your rights have not been respected, you have the right to complain to the Data Protection Commission (DPC):
- by webform on their website: Data Protection Commission Webform
- by post: “Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28”.
Cookies Policy
We, DECATHLON, use cookies and other similar technologies (e.g., pixels and tags) to provide you with a seamless experience on our website.
What Are Cookies?Cookies are files stored on a computer, smartphone, or other electronic device. They are created when a browser loads a website and allow that website to recognize the user on subsequent visits.
Types of Cookies We Use- Essential Cookies: These cookies are necessary for the website to function correctly and cannot be switched off.
- Performance Cookies: These cookies help us understand how visitors interact with our website, providing insights into areas that can be improved.
- Functional Cookies: These cookies allow the website to provide enhanced functionality and personalization.
- Advertising Cookies: These cookies are used to deliver advertisements relevant to you and your interests.
You can manage cookies via your browser settings. You can choose to block all cookies, accept cookies only from certain sites, or delete cookies when you close your browser. However, disabling cookies may affect your experience on our website.
For more information about cookies, including how to manage your preferences, please visit All About Cookies.