Data protection policy

SPORT 2000 FRANCE is a simplified joint-stock company (société par actions simplifiée) with share capital of €500,000, whose registered office is located at Route d’Ollainville, 91520 EGLY, France, registered with the Evry Trade and Companies Register under number 421 925 918, intra-Community VAT number FR 31 421925918, SIRET number 42192591800011, tel.: +33 1.69.26.20.00, fax: +33 1.69.90.32.89, email address: contact@sport2000.fr (hereinafter referred to as the “company” or “we”). To find out more about our company, click here

Sport 2000 is a group of independent retailers operating under the Sport 2000 brand and organised as a cooperative. The company specialises in the distribution of sports equipment and products. As part of this activity, it offers a ski equipment rental service.

It operates this website, which is publicly accessible at https://location-ski.sport2000.fr/ (hereinafter referred to as the “website”). The website is intended to provide internet users (i.e. any individual or legal entity visiting or using the website, hereinafter referred to as “users” or “you”) with information about the company’s activities and services, as well as its latest news (events, publications, etc.).

The website also provides features enabling users to rent ski equipment from a Sport 2000 member retailer, an independent retailer operating under the Sport 2000 brand, contact the company (contact requests, unsolicited applications, etc.) or subscribe to the newsletter (“special offers”).

The company also markets its services through the website and allows users, subject to certain conditions, to create a member account and refer another person.

When you browse the website and interact with the website or the company, the company may collect and process personal data relating to you as the data controller.

Respecting your privacy, the company attaches great importance to the protection of your personal data. This policy is intended to explain, in complete transparency, the procedures and characteristics of the data processing operations carried out by the company through or via all or part of the website.

The purpose of this policy is to inform users about how their personal data is collected, processed and used, as well as the rights granted to them in this respect under the applicable regulations.

Your data may be collected or processed, in whole or in part, when you browse the website and enter information in the data collection forms available on the website, and more generally as part of your relationship and subsequent interactions with the company.

In general, your data is therefore collected directly from you in the circumstances described above.

In addition to this information, please note that the data we collect and process about you may, where applicable, be supplemented by us, particularly for commercial, prospecting, communication or marketing purposes, using other sources of information (social networks, so-called “public” information, mailing lists, etc.).

More specifically, in relation to our operations for recruiting Sport 2000 members, we use the information you provide to us (e.g. via the relevant form on the website), which we incorporate into our candidate database. However, we may also contact third parties to obtain information about you for the purpose of assessing your application or profile.

Several categories of personal data relating to you may be collected, including in particular the following:

• identification data: including information such as your title, surname and first name, contact details (email address, telephone number, postal address), etc.;

• your traffic and browsing history on the website, including information relating to the tracking of your actions on and interactions with the website, as well as location data (such as the location associated with your IP address), information relating to your device and tracking data concerning your interactions with emails we may send you (opens, clicks, etc.);

• data relating to the monitoring of your relationship with the company: contact, information or documentation requests, correspondence exchanged, data relating to transactions carried out and payment methods, economic and financial information, information relating to your family and personal circumstances and, where applicable, professional circumstances, subscribed services / products ordered and details thereof, order history, information relating to invoice payments, data required to carry out loyalty, prospecting, research, survey, product testing and promotional activities, etc.;

• information and documents provided as part of applications to open a store, as well as information that we may collect for this purpose during the selection process (educational background and qualifications, training and diplomas, professional experience and career history, information relating generally to your professional life, economic or financial information, information relating to your personal life where applicable, etc.).

We do not collect any sensitive data relating to you. By “sensitive data”, we mean your political opinions, religious or philosophical beliefs, racial or ethnic origin, possible trade union membership, medical information or sexual orientation. If such information were provided to us, it would be immediately deleted.

On the website, you are informed on each personal data collection form whether the information requested is mandatory, generally by means of an asterisk next to the relevant field(s). Where there is no asterisk, the information requested is optional.

If mandatory information is not provided, the request associated with the collection of such information (for example, an online order, information request or application) may not be processed or its processing may be delayed.

Depending on the circumstances, the company processes the data collected through the website, in whole or in part, for the following main purposes:

• managing, processing and monitoring your requests and interactions with the company made through or initiated via the website (for example, requests for contact, information or documentation, applications, etc.), and more generally managing the company’s relationships with its contacts (customers, prospects, etc.);

• managing your relationship with the company in relation to contracts, orders, invoices, payments and transactions (including the management of unpaid amounts and disputes, and associated accounting), as well as providing access to a dedicated account area;

• carrying out prospecting, solicitation and communication activities (emails, including newsletters, and postal mail, telemarketing, targeting, segmentation and personalisation of communications, communication of job offers);

• carrying out loyalty programmes, managing and organising competitions, commercial activities, communication and marketing activities undertaken by the company in general;

• maintaining customer databases, managing customer accounts, providing after-sales service and handling complaints;

• monitoring and processing applications and activities carried out prior to the opening of a store, including the assessment and selection of applications and professional profiles, in particular through the creation of a candidate database;

• providing access to and enabling the use of the features offered on the website;

• understanding and analysing how users use the website and their browsing behaviour in order to improve our online communications;

• improving and optimising the quality and functionality of the website;

• carrying out and preparing studies, analyses, reports and statistics;

• managing and processing requests from website users and, more generally, from the company’s contacts relating to the exercise of their rights regarding personal data protection;

• complying with legal and regulatory obligations arising in particular from the company’s activities.

Depending on the purposes pursued, the legal basis for such personal data processing may vary. In general, such processing is necessary:

• to manage, process and monitor your requests addressed to the company (including responding to information requests, processing orders and transactions, assessing applications, etc.), where such operations may in certain cases qualify as necessary for the performance of a contract to which you are a party (for example, in the context of an online order) or as pre-contractual measures taken at your request (for example, in the context of an application to open a store);

• for the purposes of the company’s legitimate interests in managing and monitoring its relationships, particularly commercial relationships, with website users and, more generally, with its contacts, as well as organising its marketing, prospecting and communication activities in general;

• to comply with the legal and regulatory obligations applicable to the company.

Your personal data is intended for the authorised departments and personnel of the company and the entities belonging to the group of which it is part.

For certain of the purposes described above, and only where such disclosure is necessary, it may be communicated to the company’s service providers and contractual and commercial partners who may be involved in the aforementioned personal data processing activities.

Your data may also be disclosed to any authority legally entitled to receive it, particularly in the event of a request from judicial, police or administrative authorities.

It is specified that the recipients referred to above will not necessarily receive all of your data, but only the data necessary for the purpose requiring such disclosure.

Unless otherwise specified:

• your data collected and processed by the company is retained for three years from your last contact with the company (online request, email or postal correspondence, telephone call, newsletter subscription, click on an email sent to you by the company, participation in an event, etc.) or from the end of your contractual or commercial relationship with the company;

• payment card data is retained only for the period necessary to complete the transaction;

• information relating to applications is retained for a maximum period of two years;

• connection, browsing and traffic data is retained for a maximum period of one year.

Please note, however, that all of this data may be retained for longer than the periods specified above:

• with your consent;

• in archived form, in order to comply with any applicable legal and regulatory obligations or for the duration of applicable statutory limitation or objection periods (see payments).

The retention periods specified above have been defined to enable us to process your requests (information, orders, contact requests, etc.) and/or carry out our commercial, communication, marketing and recruitment activities, while complying with the principle of proportionality, according to which personal data must not be retained for longer than necessary to fulfil the purpose for which it was collected.

With regard to Prospects, i.e. potential customers with whom we do not yet have a contractual relationship but whom we contact for prospecting purposes, the maximum retention period for their personal data is three years.

Finally, information obtained through applications submitted via our website is retained for a maximum period of two years.

In accordance with the aforementioned legal and regulatory provisions, you have the right to request information about and access your data.

You also have, to a certain extent, the right to rectify, erase and restrict the processing of your data, as well as the right to data portability.

You also have the right to object to the processing of your personal data and the right to object to your data being used for prospecting purposes, particularly commercial prospecting.

You also have the right to establish general and/or specific instructions concerning what happens to your data and how you wish your rights to be exercised after your death. In this regard, if we become aware of your death, your data will be deleted, unless it needs to be retained for a specified period due to our legal and regulatory obligations and/or statutory limitation periods, and, where applicable, after having been communicated to a third party designated by you.

All requests relating to the exercise of any of these rights, as well as requests for information concerning the protection of personal data, must be sent to the company by email at contact@sport2000.fr or by post to: Société Sport 2000 France, Route d’Ollainville, 91520 Egly, France.

You can also click on the unsubscribe link included in each message you receive to modify or delete your data.

In order to protect the confidentiality and security of your personal data, the company must verify your identity before responding to such a request. Therefore, any request relating to the exercise of these rights must be accompanied by a signed copy of an identity document.

Some online forms on our website allow users to enter their telephone number. Users who do not wish to receive commercial prospecting by telephone are informed of their right to register free of charge on the national telephone marketing opt-out list via the following website: https://www.bloctel.gouv.fr/.

Finally, please note that you may lodge a complaint with a national authority responsible for personal data protection if you believe that your data is not being processed in accordance with the applicable regulations. In France, this authority is the Commission Nationale de l’Informatique et des Libertés, or “CNIL”.

Cookies and other trackers or similar technologies (hereinafter referred to as “cookies”) may be installed and/or read in your browser when you visit the website. To find out more, click here

Electronic commercial prospecting

In accordance with Article L34-5 of the French Postal and Electronic Communications Code, we obtain the prior and express consent of prospects before sending commercial prospecting communications electronically (email and SMS).

• Regarding emails, we send you an initial email intended to obtain your consent to receive commercial prospecting communications or your refusal of such communications (Opt-in). You may, of course, unsubscribe from these communications at any time by clicking the unsubscribe link included in each email (free of charge).

• Regarding SMS, we also send you an initial SMS intended to obtain your consent to receive commercial prospecting communications or your refusal of such communications (Opt-in). Here too, you may withdraw from our lists at any time and free of charge by contacting the data controller responsible for processing your personal data at contact@sport2000.fr or by post at Société Sport 2000 France, Route d’Ollainville, 91520 Egly, or by visiting https://www.bloctel.gouv.fr/, as well as by using the STOP SMS mechanism.

However, under the same article, where we offer products or services similar to those already provided, obtaining your prior express consent is not mandatory if you are already a Sport 2000 customer (Opt-out). In this situation, you may still object to receiving commercial prospecting communications electronically (email and SMS) using the methods described above (unsubscribe link, Bloctel list, STOP SMS mechanism or by contacting our data controller directly).

Commercial prospecting by post

For commercial prospecting by post, whether you are a customer or a prospect, we are authorised to send commercial communications directly to your home address (Opt-out). However, you may object to this at any time and free of charge by contacting the data controller responsible for your personal data by email at contact@sport2000.fr or by post at Société Sport 2000 France, Route d’Ollainville, 91520 Egly.

You may also object to any commercial prospecting by post by registering with the Liste Robinson Stop Publicité by post at: Union française du marketing direct, Service Liste Robinson Stop Publicité, 60 rue de la Boétie, 75008 Paris.

The company does not knowingly collect information from children under 15 years of age, as the website is not intended for such children.

Furthermore, in accordance with Article 8 of European Regulation 2016/679 on the protection of personal data, the processing of personal data relating to a child aged 16 or over is lawful where the child has given consent. Therefore, in the event of recruiting a minor aged 16 or over, processing that minor’s personal data by the company does not require authorisation from the holder of parental responsibility.

In order to ensure the security of your data, the company takes all useful and appropriate physical, logical, technical, functional, administrative and organisational precautions and measures, taking into account the state of knowledge, implementation costs and the nature, scope, context and purposes of the processing, as well as the risks, whose likelihood and severity may vary, in order to preserve the security and confidentiality of data and ensure a level of security appropriate to the risk, and in particular to prevent it from being altered or damaged or accessed by unauthorised third parties.

Given the difficulties inherent in conducting business online and the risks, of which you are aware, associated with the electronic transmission of data, the company cannot, however, be held to an obligation of result. If difficulties arise, the company will use its best efforts to contain the risks and will take all appropriate measures in accordance with its legal and regulatory obligations (corrective measures, notification to the national data protection authority and, where applicable, the persons concerned, etc.).

Where part or all of the processing of personal data is outsourced, the company contractually requires its processors to provide security guarantees, particularly regarding the confidentiality of the personal data to which they may have access (appropriate technical and organisational measures to protect such data).

Links on the website may redirect you to third-party websites outside the company’s website.

Please note that the personal data protection policies of these websites may differ from that of the company.

You are therefore advised, in all cases, to read the personal data protection policy of each website concerned.

In any event, the company cannot be held liable if processing activities carried out via one of these websites contravene the applicable legal and regulatory provisions.

This personal data protection policy may be amended or updated at any time.

In the event of an amendment or update, the new policy will be published on the website in the dedicated section. In addition, all personal data collection forms on our website provide a link to this policy.

We invite you to consult it regularly.

Last modified: 31/03/2021