Privacy policy – processing of personal data

AND processing of personal data

We take a serious approach to the protection and security of your Personal Data.

This policy allows us to keep you up to date about the use and protection of your Personal Data. We have simplified our Policy to provide you with clear and transparent information about how your Personal Data is collected and used.

1. What is Personal Data?

For the purposes of this Policy, “Personal Data” or “Data” means any information that directly or indirectly identifies you, including your surname, first name, e-mail address, IP address, and any other Data provided by you, especially on our website, or generated by your browsing activity or communications we may have with you through our customer service.

2. Who is responsible for the processing of my Personal Data?

The Data Processor is the person or organisation that determines the purposes and methods of processing your Personal Data.

The WLSB company, whose registered office is located at 460 Avenue des Bigos, 34740 Vendargues, France, registered in the Montpellier Trade and Companies Register under the number 902 897 024 (“WLSB”, “we”, “us”) is responsible for the processing of your Personal Data, under the conditions described in the Policy.

The Data Protection Officer who can be contacted by email for any question relating to your Personal Data is available at the following address: dpo@privatesportshop.com or by mail at the above postal address.

3. What type of Data is collected and when?

The Data we collect and process varies depending on the features of our website that you use. We collect the Data you provide when you use our services and particularly when you:

• Access and browse our website (the Site) via cookies and trackers;

• Get in contact with us via email, the contact form or by mail;

During these activities, the Data collected will be:

• Browsing data on the website collected by cookies and trackers;

• Identification Data, such as your first name, surname and email address when you get in contact via our form for any question, comment or suggestion.

4. Why do we collect your Personal Data?

WLSB processes your Personal Data for the following reasons only:

PURPOSE	LEGAL BASIS	MORE INFORMATION ON USE OF DATA
To process the messages received via the contact form or via email.	Legitimate interest	To handle your requests and complaints properly and to answer your questions.
	Legal basis	If your question concerns the exercise of the rights set out in the article “What are my rights and how can I exercise them?” we will need to process your Data to comply with our legal obligations.
To improve the Site and your user experience	Legitimate interest	To ensure the functioning of the Site
To improve the Site and your user experience	Legitimate interest	To measure the audience of the Site and establish anonymous statistics of visits on the basis of legitimate interest.

5. Who can access my Data?

Your Personal Data is processed by the WLSB company’s authorised personnel. We may also disclose your Personal Data to:

• Subcontractors such as:

– our IT service providers;

– our marketing solutions providers;

• Lawyers, auxiliaries of justice and ministerial officers, the administrative or judicial authorities seized of a litigation if necessary, within the framework of the respect of the legal obligations incumbent on WLSB or to allow WLSB to ensure the defence of its rights and interests;

6. Will my Data be transferred abroad?

None of your Data will be transferred to recipients located outside the European Union.

7. How long is my Persona Data stored?

WLSB only keeps the collected Data for the time necessary for the purposes of the processing and in accordance with the applicable legislation.

More specifically, in the first instance, the Data is kept for no longer than is necessary for the purposes for which it was collected.

Secondly, regardless of the retention period necessary to fulfil the purpose of the Data processing, it may be justified for us to archive your Data for a limited period of time, in a secure manner and with restricted access, for various reasons (e.g. to fulfil a legal obligation) detailed below.

Once the retention period imposed by law has expired and any legal action has been taken, your Personal Data will be deleted or made anonymous.

NATURE OF PROCESSING		RETENTION PERIOD
Your questions, comments or suggestions made via the contact form online	Management of customer requests	Conserved for a period of three (3) years from the last contact made
Managing cookies and trackers	Managing cookies and trackers	Duration necessary to achieve the purpose of the cookie or tracker and no longer than 13 months.
Managing cookies and trackers	Choice of whether or not to accept cookies and trackers	Duration of 6 months.

8. What are my rights and how do I exercise them?

8.1 The content of your rights

You have the following rights in relation to your Data.

• Right of access: this right allows you to obtain, when we process your Data, access to your Data and information related to its processing.

• Right of rectification: you can ask to update or modify your Data.

• Right to erasure: this is the right to oblivion which allows you to obtain the deletion of your Data except if they are necessary for the execution of the services or if they are necessary for WLSB to respect its legal obligations or to establish and exercise its rights; • The right to define directives concerning the fate of your Data after your death, and this with a trusted third party, certified and responsible for enforcing your wishes.

You also have:

• a right to obtain the limitation of processing: this right allows you to have your Data “frozen” in certain cases covered by the regulations in force.

• a right to the portability of the Data provided: this right allows you to recover your Data or to have them transferred to another organisation, as soon as they are the subject of processing based on your consent or on a contractual relationship.

• a right to object: this is the right not to be included in a data processing operation or to no longer be included.

8.2 Withdrawal of consent

You can withdraw your consent at any moment, in cases where you have been asked for it.

To withdraw your consent, you can send us a request at the address below, set your preferences in your account or via the Cookie page.

8.3 Exercising your rights

The communication of specific post-mortem directives and the exercise of your rights can be done by email to dpo@privatesportshop.com, or by post to the following address: WLSB, for the attention of the Data Protection Officer, 460 avenue des Bigos, 34740 Vendargues, France, specifying information that can be used to establish your identity.

8.4 Making a complaint

You also have the right to lodge a complaint with the relevant national data protection authority. The French authority is the Commission Nationale de l’Informatique et des Libertés (CNIL) – 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07 – FRANCE.

9. How is my Data protected?

Technical and organisational measures have been put in place to protect your Personal Data, in particular against possible breaches that could lead to the accidental or unlawful destruction, loss, alteration, unauthorised access or disclosure of your Personal Data.

These measures ensure an appropriate level of security for the Data and take into account the state of knowledge, the costs of implementation in relation to the risks and the nature of the Data to be protected.