PERSONAL DATA MANAGEMENT POLICY

• The conditions set out below (hereinafter "Data Protection Policy") apply to all areas of the business activity of Decathlon Sports Switzerland SA (hereinafter " Decathlon " or "We"). For users of the www.decathlon.ch website, they apply in addition to the General Terms and Conditions of Sale and the General Terms and Conditions of Use. These can be accessed as follows:
  - General terms and conditions of sale
  - Terms and conditions of use
• Our Data Protection Policy informs you of the data processing operations we carry out if you provide us with personal data when you purchase a product in-store or when you visit our website www.decathlon.ch and/or use the online services offered there (see section I below). In the latter case, our Data Protection Policy also informs you about the storage of data by means of cookies and the storage of data by third parties (see sections II and III below).
• If, after reading this document, you provide us with personal data during an in-store purchase, or if you visit our website and/or use the services offered there, you accept this Data Protection Policy.
• The Data Protection Policy is subject to change. It is available at all times in our stores and on the website https://www.decathlon.ch (hereinafter the "Site"). The current version of the Data Protection Policy prevails over any other version or any other contradictory document. You can print it out or download it at format PDF so that you can refer to the current version at a later date.

• Personal data provided by you, or collected in accordance with the legal and contractual provisions in force and which are inherent, linked and/or useful to the management of your experience on our e-commerce site will be processed in accordance with the provisions of the LPD and the confidentiality obligations.
• In particular, we will process the following personal data: browsing data (for more information on data collected by means of cookies, please see our Cookie Policy); data voluntarily provided by the user (to place an online order and/or to register for MyDecathlon on our website), such as: account name, surname, first name, gender, date of birth, delivery address, billing address, e-mail address, telephone number, payment information (e.g. credit/debit card number), favorite sports; history of items purchased through your account (if applicable). If your purchases are linked to a company/legal entity, we also process information concerning: name, VAT number, company identification number (EIN).
• Personal data: any information concerning an identified or identifiable person.
• Data subjects: natural or legal persons whose data is processed (also referred to as "you").
• Processing: any operation involving personal data, regardless of the means and procedures applied, and in particular: the collection, storage, use, modification, communication, archiving or destruction of data.
• Communication: the act of making personal data accessible, for example by allowing access, transmission or publication.

The company that determines the purposes and means of the processing of personal data is DECATHLON SPORT SWITZERLAND SA, a company incorporated under Swiss law with registered office at Route de Meyrin 171, 1214 Vernier, Switzerland, VAT no. CHE-106.127.042 (also referred to as " Decathlon " or the "data controller", or the "company" or "we"). The contact details of the file owner are as follows: [email protected].

2.1 CONTACT DETAILS OF OUR DATA PROTECTION OFFICER

We have appointed a Data Protection Officer, who can be contacted at the following e-mail address: [email protected].

Your personal data may be shared with employees and/or personnel working under the authority of our data controller and duly trained in the above-mentioned purposes or with third parties contractually bound to Decathlon, in order to perform contractual obligations and to achieve one or more of the above-mentioned processing purposes. These third parties will process your data as independent subcontractors or data controllers. In particular, your personal data may be shared with the following categories of recipients: a) subjects who provide maintenance services for the information system used by Decathlon and the telecommunications network (including the provision of MyDecathlon and the website); b) assistance and consultancy companies or firms (e.g. web agencies, law firms); c) third parties (e.g. companies that provide services to the company). agencies, law firms); c) carriers or providers of payment systems; d) competent authorities for the enforcement of legal obligations and/or provisions emanating from public bodies (upon request); e) group companies, including those headquartered outside the territory of the Swiss Confederation; f) payment service providers; g) vendors and other third parties having a contractual relationship with Decathlon for the sale and delivery of their own products through this website.

If you are a Decathlon Member and have given us your explicit consent, we shall also use your data to display personalized advertising to you on third-party platforms. Your data will not be forwarded as such, but in pseudonymized form (as "Hashed Data"). You may withdraw your consent to the sharing of your data for the purpose of personalized advertising on third-party platforms at any time in your account settings.

Personal data may be transferred to foreign countries in accordance with the provisions of the Data Protection Act. More specifically, personal data is communicated outside Switzerland (for example, it may be stored in France, where some of the tools we use to process your data store it), if the following requirements are met: -- appropriate safeguards are provided, such as contractual measures ensuring sufficient protection abroad; the list can be consulted at the following link: https://www.fedlex.admin.ch/eli/cc/2022/568/fr#annex1/lvlu1 -- the processing is directly linked to the conclusion or performance of a contract and the data processed concerns the other contracting party; -- communication takes place within the same legal entity or company, or between legal entities or companies controlled by the same management, provided that the sender and recipient are subject to data protection provisions guaranteeing sufficient protection.

In accordance with the provisions of the DPA, the owner of the file acknowledges that, as a data subject, you have the right (non-exhaustive list): -- to obtain rectification of personal data concerning you that is inaccurate or obsolete; -- to be informed, free of charge and in writing, of the processing of personal data concerning you; -- to revoke any consent you may have previously given to the processing of your data; -- to refuse the communication of your sensitive personal data to third parties (if applicable); -- express your opinion on an automated individual decision or request that it be verified by a natural person (if applicable); -- obtain portability of your personal data or request that it be transferred to third parties; -- request that the processing of your data, in particular communication to third parties, be restricted or prohibited, or that your data be rectified or destroyed; -- to object: to a specific processing of your personal data, to a specific communication of your data to third parties, to the deletion or destruction of your personal data. -- to request, if the accuracy or inaccuracy of personal data cannot be established, that the data be marked as disputed; -- to request that the data be rectified or destroyed, that it not be communicated to third parties, that the contentious nature of the data be mentioned, or that the decision be communicated to third parties or published; -- that the unlawful nature of personal data processing be declared. To exercise your rights under the DPA, you can contact the owner of the file by post at our head office in Vernier (CH), Route de Meyrin 171, 1214 Vernier, or by e-mail: [email protected]. You can also contact our Data Protection Officer at [email protected] or the Swiss supervisory authority (Préposé fédéral à la protection des données et à la transparence - PFPDT).

We do not sell your data.
The file owner reserves the right to revise, update, add or remove any part of this privacy policy at any time and at its convenience. In the event of modification, the date of revision will be indicated.
Date of last revision : 01.09.2023

In accordance with the Federal Data Protection Act (DPA), we provide you with the necessary information regarding the processing of personal data collected and processed as part of special commercial operations, accessible on www.decathlon.ch, on our application and/or in our stores. This policy applies exclusively to international members of Decathlon, i.e. customers who do not have a Decathlon account based in Switzerland, but in another country where the Decathlon group operates (for example, if your Decathlon account is based in Germany and you join one of our special commercial operations, available in Switzerland according to the conditions of the corresponding operation, this privacy policy applies to you). This privacy policy only applies to the processing of personal data in connection with our special business operations. For more information on our special commercial operations, please read the conditions of the corresponding operation. Depending on the context in which personal data is collected, this policy may be supplemented by other applicable policies. It is intended that Decathlon members' data will be processed in accordance with our personal data management policy, available on www.decathlon.ch, our app and in our stores, in addition to this policy.

Please find below a list of definitions according to the DPA that may be useful to you when reading this privacy policy: Personal data: any information relating to an identified or identifiable person. Data subjects: natural or legal persons whose data is processed (also referred to as "you"). Processing: any operation involving personal data, regardless of the means and procedures applied, and in particular: the collection, storage, use, modification, communication, archiving or destruction of data. Communication: the act of making personal data accessible, for example by allowing access, transmission or publication. In particular, we will process the following personal data: data voluntarily provided by you, such as: account number, surname, first name, gender, date of birth, delivery address, billing address, e-mail address, telephone number, payment information (e.g. credit/debit card number), preferred sports.

In general, we process the personal data you provide to us directly and voluntarily. However, at your request, we may ask Decathlon SE to obtain this data (e.g. your account number, e-mail address, etc.). If you are an international member of Decathlon, we do not have direct access to your Decathlon account information.

The company that determines the purposes and means of processing personal data is Decathlon Sport Switzerland SA, a company incorporated under Swiss law with its registered office in Vernier (CH), Route de Meyrin 171, 1214 Vernier, VAT no. CHE-106.127.042 (also referred to as " Decathlon " or the "Data Controller", or the "Company" or "we"). The contact details of the Data Controller are as follows: [email protected].

We have appointed a Data Protection Officer who can be contacted at the following e-mail address: [email protected].

Your personal data may be shared with employees and/or staff working under the authority of our Data Controller and duly trained on the above-mentioned purposes or with third parties contractually bound to Decathlon, in order to perform contractual obligations and to achieve one or more of the above-mentioned processing purposes. These third parties will process your data as subcontractors or independent data processors. In particular, your personal data may be shared with the following categories of recipients: a) subjects who provide maintenance services for the information system used by Decathlon and for the telecommunications network (including our websites); b) assistance and consultancy companies or firms (e.g. web agencies, law firms); c) third parties (e.g. companies that provide services to our customers). agencies, law firms); c) carriers or providers of payment systems; d) competent authorities for the enforcement of legal obligations and/or provisions emanating from public bodies (upon request); e) group companies, including those headquartered outside the territory of the Swiss Confederation; f) payment service providers; g) vendors and other third parties having a contractual relationship with Decathlon for the sale and delivery of their own products through this website.

• Personal data may be transferred to foreign countries in accordance with the provisions of the Data Protection Act. In particular, personal data may be communicated outside Switzerland (for example, to France, where some of the tools we use to process your data store it), if the following requirements are met:
• appropriate safeguards are provided, such as contractual measures ensuring sufficient protection abroad; the list can be consulted at the following link "www.fedlex.admin.ch/eli/cc/2022/568/fr#annex_1";
• the processing is directly linked to the conclusion or performance of a contract, and the data processed concerns the other contracting party;
• the communication takes place within the same legal entity or company or between legal entities or companies controlled by the same management, provided that the sender and recipient are subject to data protection provisions guaranteeing sufficient protection.

In accordance with the provisions of the DPA, the Data Controller acknowledges that, as a data subject, you have the right (non-exhaustive list):
to be informed, free of charge and in writing, of the processing of personal data concerning you;
to revoke your consent to the processing of your personal data (if applicable);
to refuse the communication of your sensitive personal data to third parties (if applicable);
express your opinion on an automated individual decision or request that it be verified by a natural person (if applicable);
obtain portability of your personal data or request that it be transferred to third parties;
request that the processing of your data, in particular communication to third parties, be restricted or prohibited, or that your data be rectified or destroyed;
to object: to a specific processing of your personal data, to a specific communication of your data to third parties, to the deletion or destruction of your personal data.
to request, if the accuracy or inaccuracy of personal data cannot be established, that the data be marked as disputed;
request that the data be rectified or destroyed, that it not be communicated to third parties, or that the contentious nature of the data or the decision be communicated to third parties or published;
to declare that the processing of personal data is unlawful.
To exercise your rights under the DPA, you can contact the Data Controller by post at our head office in Vernier (CH), Route de Meyrin 171, 1214 Vernier, or by e-mail at [email protected]. You can also contact our Data Protection Officer at [email protected] or the Swiss supervisory authority (Préposé fédéral à la protection des données et à la transparence - PFPDT).

We do not sell your data. The Data Controller reserves the right to revise, update, add or remove any part of this Privacy Policy at any time and at its own discretion. In the event of modification, the date of revision will be indicated. Date of last revision: November 28, 2023