Data protection policy

1. WHO WE ARE

SPORT 2000 FRANCE is a société par actions simplifiée (simplified joint stock company) with a share capital of 500,000 euros, having its registered office at Route d'Ollainville 91520 EGLY, registered with the Registre du Commerce et des Sociétés de EVRY under number 421 925 918, intracommunity VAT number FR 31 421925918, SIRET number 42192591800011, tel: +33 1.69.26.20.00, fax: +33 1.69.90.32.89, email address: contact@sport2000.fr (hereinafter the "company" or "we"). To find out more about our company, click here.

The Sport 2000 Group is a group of independent retailers including Sport 2000, Mondovélo, Espace Montagne, WAS We Are Select, S2 Sneakers Specialist and Ekosport-Rent, organised as a cooperative. The company specialises in the distribution of sporting goods. As such, it offers a ski equipment hire service.

It operates this website, which is accessible to the public at https://www.ekosport-rent.com/ (hereinafter referred to as the "site"). The purpose of the site is to provide Internet users (i.e. any natural or legal person who visits or uses the site, hereinafter referred to as "users" or "you") with information enabling them to discover the activity and services offered by the company as well as its news (events, publications, etc.).

The site also offers functions enabling users to hire ski equipment from a member, an independent retailer under the Ekosport-Rent banner, contact the company (contact request, unsolicited application, etc.) or sign up for the newsletter (good deals).

During your browsing and your interactions with the site or with the company, the latter may collect and process personal data concerning you, in its capacity as data controller.

Respectful of privacy, the company attaches great importance to the protection of your personal data. The purpose of this policy is to provide you with a transparent explanation of the methods and characteristics of the data processing carried out by the company by means of or through all or part of the website.

2. WHAT IS THE PURPOSE OF THIS POLICY?

The purpose of this policy is to inform users of the procedures for collecting, processing and using their personal data, as well as the rights conferred on them in this context with regard to the provisions applicable in this area.

3. WHEN DO WE PROCESS YOUR DATA?

Your personal data is collected or processed in whole or in part when you browse the site, when you enter information in the data collection forms on the site and, more generally, as part of your relationship and subsequent dealings with the company.

As a general rule, your data is therefore collected directly from you in the aforementioned cases.

In addition to this information, you are informed that the data we collect and process about you may be supplemented by us, in particular for commercial, canvassing, communication or marketing purposes, using other sources of information (social networks, so-called "public" information, file rentals, etc.).

Furthermore, with regard more specifically to information processed as part of our membership recruitment operations, we use the information you provide us (e.g. form for this purpose on the site), which we include in our file of candidates. However, we may also contact third parties to collect information about you in order to study your application or profile.

4. WHAT CATEGORIES OF DATA DO WE COLLECT?

Several categories of personal data concerning you may be collected, and in particular the following data:

• identification data: this includes data such as your title, your first and last name, your contact details (e-mail address, telephone number, postal address), etc;
• your traffic and browsing history on the site, including information relating to the traceability of your actions on and interactions with the site, as well as location data (location of the IP address for example), data relating to your terminal or tracking data on your actions with regard to emails that we may send you (openings, clicks, etc.);
• data relating to the monitoring of your relationship with the company: requests for contact, information or documentation, correspondence exchanged, data relating to transactions carried out and means of payment, economic and financial information, data relating to your family, personal or even professional situation (for candidates for employment), services subscribed to / products ordered and details, order history, data relating to the payment of invoices, data necessary for carrying out loyalty, canvassing, research, surveys, product testing and promotional activities, etc.
• your information and documents communicated in the context of applications to open a shop, as well as information that we may collect for this purpose in the context of selection operations (educational and university background, training and qualifications, experience and professional background, information relating to professional life in general, information of an economic or financial nature, information relating to personal life where applicable, etc.).

We do not collect any sensitive data about you. By "sensitive data" we mean your political opinions, religious or philosophical beliefs, racial or ethnic origin, trade union membership, medical information or sexual orientation. If such information is communicated to us, it will be deleted immediately.

5. IS IT COMPULSORY TO COLLECT THIS DATA?

Within the site, you are informed, on each personal data collection form, of the compulsory nature of the answers, and more generally of the information collected, by the presence of an asterisk next to the field(s) concerned. If there is no asterisk, the information requested is optional.

If you do not provide the mandatory information, the request linked to this data collection (for example: online order, request for information, application, etc.) may not be processed or its processing may be delayed.

6. FOR WHAT PURPOSES IS YOUR DATA COLLECTED?

Depending on the case, the company processes your data collected via the site in whole or in part for the following main purposes:

• the management, processing and follow-up of your requests and your exchanges with the company by means of or initiated via the site (for example: request for contact, information or documentation, application, etc.), and the company's relations with its contacts (customers, prospects, etc.) in general;
• the management of your relations with the company concerning contracts, orders, invoices, payments and transactions (including the management of outstanding payments and disputes, and the associated accounting) as well as the provision of a reserved area;
• canvassing, soliciting and communicating (emails including newsletters and post, telemarketing, targeting, segmentation and personalisation of exchanges, communication of job offers);
• the development of customer loyalty, the management and implementation of competitions, commercial operations, communication and marketing by the company in the broadest sense;
• building up customer files, managing customer accounts, implementing after-sales service and managing complaints;
• monitoring and processing applications and operations prior to the opening of a shop, including the evaluation and selection of applicants and professional profiles, in particular by compiling a file of applicants;
• access to and use of the functionalities offered on the site;
• to understand and study site users' use of the site and their browsing behaviour with a view to improving our online communication;
• improving and optimising the quality and functionality of the site;
• carrying out and preparing studies, analyses, reports and statistics;
• the management and processing of requests from users of the site, and more generally from the company's contacts, to exercise their rights with regard to the protection of personal data;
• compliance with legal and regulatory obligations arising in particular from the company's activities.

The basis for such processing of personal data may vary depending on the purposes for which it is carried out. Generally speaking, such processing is necessary :

• for the management, processing and follow-up of your requests to the company (in particular responding to requests for information, processing orders and transactions, studying job applications, etc.), these operations may in some cases be qualified as operations necessary for the performance of a contract to which you are a party (in the context of an online order, for example) or pre-contractual measures taken at your request (in the context of an application to open a shop, for example);
• to pursue the company's legitimate interests in managing and monitoring its relations, particularly commercial relations, with users of the site, and more generally with its contacts, and in organising its marketing, canvassing and communication operations in general;
• to comply with legal and regulatory obligations imposed on the company.

7. WHO IS YOUR DATA INTENDED FOR?

Your personal data is intended for the authorised departments and staff of the company and the entities of the group to which it belongs (in particular the shops).

It may be communicated, for some of the aforementioned purposes, and only if such communication proves necessary, to their possible service providers and partners, both contractual and commercial, who may be involved in the aforementioned processing of personal data.

In addition, your data may be communicated to any authority legally entitled to know about it, in particular in the event of a requisition from the judicial, police or administrative authorities.

Please note that the recipients referred to above are not necessarily recipients of all your data, but only of that which is necessary for the purpose for which it is communicated.

8. HOW LONG WILL YOUR DATA BE KEPT?

Unless otherwise specified:

• Your data collected and processed by the company will be kept for a period of three years from the date of your last contact with the company (online request, e-mail or post, telephone call, newsletter subscription, click on an e-mail sent to you by the company, participation in an event, etc.) or from the end of your contractual or commercial relationship with the company;
• Payment card details are only kept for as long as is necessary to complete the transaction;
• Information relating to your applications is kept for a maximum of two years;
• connection, browsing and traffic data are kept for a maximum of one year.

It should be noted, however, that all such data may be kept for longer than the above-mentioned periods:

• or after obtaining your agreement;
• or, in the form of archives, to meet any legal and regulatory obligations imposed on the company or during the statutory limitation or objection periods (see payments).

The aforementioned retention periods have been defined to enable us to process your requests (for information, orders, contacts, etc.) and/or to carry out our sales, communication, marketing and recruitment operations, while respecting the principle of proportionality, according to which personal data must not be retained for longer than is necessary to achieve the purpose for which it was collected.

In the case of Prospects, i.e. potential customers with whom we do not yet have a contractual relationship but with whom we are canvassing, their personal data will be kept for a maximum of 3 years.

Finally, the information we obtain from applications made via our website is kept for a maximum of 2 years.

9. WHAT ARE YOUR RIGHTS?

In accordance with the aforementioned legal and regulatory provisions, you have the right to query and access your data.

You also have the right to rectify, delete and limit the processing of your data to a certain extent, as well as the right to the portability of your data.

You also have the right to object to your personal data being processed, and the right to object to your data being used for canvassing purposes, particularly commercial canvassing.

You also have the right to define general and/or specific directives concerning the fate of your personal data and the way in which you wish your rights to be exercised after your death. In this respect, in the event of your death which is brought to our attention, your data will be deleted, unless it needs to be kept for a specific period of time for reasons relating to our legal and regulatory obligations and/or legal limitation periods, and after having been communicated to a third party designated by you.

All requests to exercise any of these rights, as well as all requests for information concerning the protection of personal data, must be made by post to the company at the following e-mail address contact@sport2000.fr or postal address: Société Sport 2000 France, Ekosport-Rent, Route d'Ollainville, 91520 Egly, France.

You can also click on the unsubscribe link in each message you receive to modify or delete your details.

In the interests of confidentiality and the protection of your personal data, the company must verify your identity before responding to such a request. Any request to exercise these rights must be accompanied by a copy of a signed identity document.

Some online forms on our site ask users to enter their telephone number. Users who do not wish to be canvassed, in particular commercially, by telephone are informed of their right to register free of charge on the national list of opposition to telephone canvassing via the website accessible at https://www.bloctel.gouv.fr/.

In any event, you have the right to lodge a complaint with a national authority responsible for the protection of personal data (in France, this is the Commission Nationale de l'Informatique et des Libertés or 'CNIL') if you feel that your data is not being processed in accordance with the applicable provisions.

10. COOKIES AND OTHER TRACERS OR SIMILAR TECHNOLOGIES

Cookies and other tracers or similar technologies (hereinafter referred to as "cookies") may be installed and/or read in your browser when you visit the site. To find out more, click here.

11. ADVERTISING BY E-MAIL, SMS AND POST :

Commercial prospecting by electronic means

In accordance with the rules of article L34-5 of the French Post and Electronic Communications Code, we obtain the prior and express consent of prospective customers for the sending of commercial canvassing by electronic means (e-mail and SMS).

• As far as e-mails are concerned, we send you an initial e-mail designed to obtain your consent to receive commercial canvassing or your opposition to such canvassing (Opt-in). You can, of course, opt out of receiving such solicitations at any time by clicking on the unsubscribe link in each e-mail (free of charge).
• As regards SMS, we also send you an initial SMS to obtain your consent to receive commercial canvassing or your opposition to such canvassing (Opt-in). Here too, you can remove yourself from our lists at any time and free of charge by contacting the party responsible for processing your personal data (at the following e-mail address: contact@sport2000.fr or at the following postal address: Société Sport 2000 France, Ekosport-Rent, Route d'Ollainville, 91520 Egly, or by visiting the following website: https://www.bloctel.gouv.fr/ or by using the STOP SMS mechanism.

However, by virtue of the same article, when we offer you products or services similar to those already provided, your express prior consent is not required if you are already a customer of Ekosport-Rent[KK1] [JC2]  (Opt-out). In this case, you always have the option of objecting to receiving commercial canvassing by electronic means (email and SMS) by using the means mentioned above (unsubscribe, Bloctel list, STOP SMS mechanism or by contacting our data controller directly).

Commercial prospecting by post

With regard to commercial prospecting by post, whether you are a customer or a prospective customer, we are authorised to send our commercial prospecting directly to your home address (opt-out). However, you may object to this at any time and free of charge by sending a letter to the person responsible for processing your personal data by e-mail to the following address: contact@sport2000.fr or by post to the following address: Société Sport 2000 France, Ekosport-Rent, Route d'Ollainville, 91520 Egly. You may also object to any commercial prospecting by post by subscribing to the Robinson Stop Publicité list by post to the following address: Union française du marketing direct, Service Liste Robinson Stop Publicité, 60 rue de la Boétie, 75008 Paris.

12. PROTECTION OF CHILDREN'S PRIVACY

The company does not knowingly collect information from children under the age of 15, as the website is not aimed at such children.

Furthermore, in accordance with Article 8 of European Regulation 2016/679 on the protection of personal data, the processing of the data of a child of at least 16 years of age is lawful provided that the child consents. Therefore, in the event of the recruitment of a minor aged 16 or over, the processing of the latter's personal data by the company does not require authorisation to be given by the holder of parental responsibility.

13. WHAT MEASURES HAVE BEEN TAKEN TO ENSURE THE SECURITY OF YOUR DATA?

With a view to guaranteeing the security of your data, the company takes all useful and appropriate precautions and measures, whether physical, logical, technical, functional, administrative or organisational, taking into account the state of knowledge, the costs of implementation and the nature, scope, context and purposes of the processing as well as the risks, of varying degrees of probability and seriousness, for the rights and freedoms of natural persons, to preserve the security and confidentiality of the data and to guarantee a level of security appropriate to the risk, and in particular to prevent the data from being distorted, damaged or accessed by unauthorised third parties.

Because of the difficulties inherent in doing business on the Internet and the risks, of which you are aware, resulting from the transmission of data by electronic means, the company cannot be held to an obligation of result. Should any difficulties arise, the company will make its best efforts to limit the risks and will take all appropriate measures, in accordance with its legal and regulatory obligations (corrective action, informing the national authority responsible for the protection of personal data and, where applicable, the persons concerned, etc.).

Where all or part of the processing of personal data is subcontracted, the company contractually requires its subcontractors to provide security guarantees, in particular with regard to the confidentiality of the personal data to which they may have access (appropriate technical and organisational data protection measures).

14. WHAT HAPPENS TO YOUR DATA ON THIRD PARTY WEBSITES?

Links on the site may take you to third-party sites outside the company's site.

In this respect, your attention is drawn to the fact that the personal data protection policies of these sites may differ from that of the company.

We therefore recommend that you read the personal data protection policy of each of the sites concerned.

In any event, the company may not be held liable in the event that the data processing carried out via one of these sites contravenes the applicable legal and regulatory provisions.

15. HOW CAN I BE INFORMED OF UPDATES TO THIS POLICY?

This personal data protection policy may be amended or adjusted at any time.

In the event of modification or adjustment, the new policy will be posted on the site in the dedicated section. In addition, all personal data collection forms on our site provide a link to this policy.

We invite you to consult it regularly.