Personal data

How does it work?

YOUR DATA IS YOURS

At Decathlon Mauritius, we consider that you should have control over your data. This is the direction we are taking, bearing in mind that we still have a long way to go. Apart from the few legal obligations to which we are subject, only you can accept that they are used by Decathlon Mauritius. We promise never to sell or rent this data. If we sometimes rely on subcontractors, they only act on our own behalf and in accordance with our instructions.

WE ARE TRANSPARENT
ON ALL DATA CONCERNING YOU

You can find on this page all the processing related to your personal data. Where, when, how, why do we process your data and, also, what are your rights. By logging into your decathlon.fr account, you can find all the information that Decathlon Mauritius may have about you.

OUR COMMUNICATIONS ARE ADAPTED TO YOUR SPORTING LIFE

One of our priorities is to offer you suitable offers and content: the right message, at the right time via the right media and never without your consent. Indeed, your data related to your purchases, your journeys on our websites, your visits to our in-store workshops or even during your free product tests, allow us to better understand you and thus send you the right offers at the right times. whether by email or when you connect to one of our services (decathlon.mu, etc.).

By joining the alliance, Decathlon Mauritius wishes to go even further in our commitment to relevance.

The principle Valiuz, is to put in common, with a sign group information about you with those in which you are already a customer. information, purchasing habits...for even more relevance in our communications.

For example: If you are sensitive to organic products, Decathlon Mauritius will offer you eco-designed products as a priority, inform you about Decathlon's progress on its sustainable development strategy, advice for practicing your sports while respecting the environment, ..... Convenient, right?

If despite this, you prefer not to share your data with Valiuz, no problem, just tell us in an email at this address: non_a_valiuz@decathlon.com

VOS DROITS

The fact of entrusting us with your data does not mean that you lose control of them, quite the contrary! A little explanation...

You have several rights. Some are applicable to all data processing concerning you, others depend on the type of processing implemented and, more specifically, the legal basis on which it is based (contract, legal obligation, consent, legitimate interest, etc.).

You will find below a brief description of these rights as well as the terms of their implementation.

To know precisely the rights associated with the processing concerning you, refer to the section “your rights” present in the description of the processing concerned.

The right of access:

This right allows you to ask us questions about the nature of the processing concerning you (type of data, origin of the collection, etc.). It also allows you to ask us for a copy of all information about you. This right applies regardless of the legal basis of the processing concerning you.

The right of rectification:

Moving, marriage, new sport, ... there are many situations that may lead you to update your data. The right of rectification serves precisely that. This right applies regardless of the legal basis of the processing concerning you.

The right to object:

It is the right to say “no!” , the right not to be included in a data processing or to no longer be included in it. This right applies when the processing is based on your consent or on the “legitimate interest” of Decathlon Mauritius, provided that this interest is not “compelling”.

Right to erasure:

It's the right to be forgotten... and that's normal. Decathlon Mauritius has no reason to keep your data beyond what is necessary. All data concerning you is therefore automatically deleted on expiry of the retention period announced when your data was collected.
When your data is processed based on your consent or on the legitimate (non-compelling) interest of Decathlon Mauritius, you can obtain the early deletion of your data. How? All you have to do is tell us that you want to withdraw your consent or assert your right to oppose the processing.

Right to portability:

This right allows you to request to obtain data concerning you, as soon as they are processed based on your consent or a contractual relationship. What is the difference with the right of access? We are obliged to send you the data in a format that can be used technically by you or by an entity other than Decathlon Mauritius.

You can exercise your rights by.

If, despite all our efforts, you feel that your rights have not been respected, know that you have the option of contacting the Mauritius Data Protection Office: dpo@govmu.org

Right to restriction:

This right is a complementary right to some of the other rights set out above. In fact, it allows you to "freeze" your data after a request for rectification, for example. In case of doubt about the legality of one of our processing operations, this right would allow you to ask our teams to no longer process your data, but without erasing them. Finally, if you wish to have your rights recognized, exercised or defended in court, you could also request, thanks to this right, to have your personal data "frozen". For any questions do not hesitate to contact us !

Version dated December 01, 2021

Preamble

The Data Protection Act of Mauritius (which entered into force on January 15, 2018) and the General Data Protection Regulation (GDPR) (which entered into force on May 25, 2018) come, depending on their applicability, provide personal data protection legislation.

For your information, personal data corresponds to any information relating to a natural person identified or who can be identified, directly or indirectly, by reference to an identification number or to one or more elements specific to him (name, first name, address, email, telephone, contract number, credit card number, etc.).

Personal data processing means any operation on this type of data (collection, storage, transmission, deletion, etc.), whether on paper or computer. The data controller is the person who determines the purposes of each processing and the means to achieve these ends.

For the Company ENSPORT LIMITED, franchisee of the Decathlon brand in Mauritius, the protection of your data is a priority. Also, for the sake of transparency, this Privacy Policy aims in particular to explain to you why your personal data is collected and processed by ENSPORT LIMITED, in its capacity as data controller, how it is processed, what are the rights you have over your data and how you can exercise them.

ENSPORT LIMITED reserves the right to modify this Privacy Policy at any time. Any changes will take effect immediately.

Therefore, we invite you to regularly consult our Policy, accessible from all pages of the Website, in order to keep you informed of the latest applicable online version. We also invite you to check the date indicated on this Policy in order to know the date of the last update.

Summary

Why does ENSPORT LIMITED need to collect your data?

The data that ENSPORT LIMITED collects is necessary to enable it to meet the following purposes:

For customer and prospect data:

Contract management;
Management of our website;
Management and security of our stores;
Establishment of financial or other statistics as well as everything relating to the management of our company;
Management of your Decathlon account;
Conducting customer satisfaction surveys and studies including surveys, product tests, sales statistics carried out by the organization concerned;
Management of complaints, after-sales service and guarantees;
Carrying out commercial prospecting and marketing actions (sending promotions, contests, surveys);
Selection of suppliers;
Management of requests for the right of access, rectification and opposition;
The management of unpaid bills and litigation, provided that it does not relate to offenses and/or that it does not lead to the exclusion of the person from the benefit of a right, a service or a contract ;
The management of people's opinions on products, services or content;
Legal obligations;
“legitimate interest”

With regard to candidate data,

Application management.

In general, ENSPORT LIMITED does not process any of your data for purposes incompatible with those for which it was collected, except with your prior consent.

What data does ENSPORT LIMITED collect?

ENSPORT LIMITED collects different types of personal data about you:

▪ The personal data that you communicate to us directly:

When you fill out a contact form to ask a question or file a complaint via our decathlon.mu website,
When you fill out a delivery note in our stores so that the products purchased in store are delivered to your home,
In general, when you interact with ENSPORT LIMITED in any other way.

The communication of your personal data is voluntary. However, certain information, identified by an asterisk, is essential for ENSPORT LIMITED to process your request. Without this information, ENSPORT LIMITED will not be able to process your request.

▪ The personal data communicated to us

As part of our franchise agreement, data is sent to us by Decathlon France SAS This data concerns your customer account created with Decathlon France SAS This data is useful to us for the purposes described in point 1 of this privacy policy.

▪ The personal data we collect automatically

We automatically collect certain information about you when you access the decathlon.mu Site, in particular information about your browsing. ENSPORT LIMITED uses cookies and other tracking technologies to collect information about you when you interact with the decathlon.mu Site.

To find out more about cookies and how to disable them, please see the Cookies policy.

On what legal basis is the processing of your data based?

ENSPORT LIMITED collects your personal data for the purposes described in point 1 of this Privacy Policy. In all cases, ENSPORT LIMITED collects your data only when their collection and processing are based on a legal basis.

The execution of contractual relations with ENSPORT LIMITED

Your data is necessary for the execution of the contract to which you have subscribed or wish to subscribe. On this contractual legal basis, any refusal to communicate your personal data will prevent the conclusion and execution of the contract.

Compliance with a legal obligation to which ENSPORT LIMITED is subject

Some of your data is processed by ENSPORT LIMITED to meet its legal obligations, in particular:

the applicable accounting rules, in terms of managing customer accounts but also supplier accounts,
manage requests for the right of access, rectification and opposition,
manage a list of opposition to canvassing,
verify the age of the participant in a contest.

Your consent

Subject to having obtained your prior consent, ENSPORT LIMITED may process your data for:

send you commercial offers on its products and services,
to offer you offers from its partners,
deposit cookies under the conditions described in the Cookies policy.

At any time, you can reconsider your choice and withdraw your consent, according to the methods described in section 5.2 of this Policy, without however calling into question the legality of the processing based on the consent and implemented before the withdrawal.

The legitimate interests of ENSPORT LIMITED

ENSPORT LIMITED may process your personal data for the purposes of pursuing its legitimate interests, in particular for:

offer you a loyalty program,
carry out satisfaction surveys,
organize competitions,
manage pre-litigation, litigation and unpaid bills,
the establishment of financial and commercial statistics,
send commercial offers to professionals subject to allowing them to oppose them beforehand and at any time,
allow them to oppose it beforehand and at any time,
select suppliers,
keep documentation on suppliers,
CCTV cameras in our premises,
in terms of recruitment, the verification of the professional skills of the candidate with regard to the position to be filled or the positions likely to be filled.

How long are your data kept?

Your data is kept by ENSPORT LIMITED for the time necessary to achieve the purposes referred to in point 1 hereof, plus the legal limitation periods.

Regarding customer and prospect data

The data concerning you and necessary for the execution of a contract are kept for the duration of the contractual relationship. They may also be kept by ENSPORT LIMITED for the management of commercial activities, including those relating to commercial prospecting, for example, if you are a customer, a purchase or the expiry date of a guarantee or, if you are a prospect, a click on a hypertext link contained in an e-mail. After the execution of the contract, the Company ENSPORT LIMITED may be required to archive some of your data to meet accounting or tax obligations or for evidentiary purposes, in the event of a dispute or claim, within the limit of the applicable limitation period. .

If you exercise your right of opposition (cf. article 5) to receive commercial prospecting from the Company ENSPORT LIMITED, the information allowing your right of opposition to be taken into account will be kept for a minimum of three (3) years from of the exercise of this right. Under no circumstances will these data be used for purposes other than the management of the right of opposition and only the data necessary to take into account the right of opposition will be kept (for example, the e-mail address) unless there is no other legal basis allowing the processing of your data.

Cookies will be kept for a maximum of thirteen months and then deleted.

As part of the organization of a contest, the data collected will be kept for the duration of the contest until the awarding of the prizes won. In terms of survey, poll, study, product test, your data will be kept for the duration of the survey, poll, study, product test.

Regarding Partner Suppliers files

The personal data collected during the management of supplier files is kept in accordance with the applicable legal provisions.

In terms of recruitment

Unless otherwise specified by the candidate, the Company ENSPORT LIMITED will keep his file for 6 months in order to contact him again if his profile corresponds to one of the future searches of the Company ENSPORT LIMITED. At the end of this two-year period, his data will be automatically destroyed, except with his formal agreement.

For more information on the retention periods of your data, you can contact the DPO of ENSPORT LIMITED (Cf. Art. 5.2 of this Policy).

What are your rights and how to exercise them?

5.1. Your rights over your data

Right of access to your data

You can obtain confirmation from ENSPORT LIMITED that your data is or is not being processed and, when it is, access to all data and information held by ENSPORT LIMITED.

Right to rectification of your data

You can obtain from the Company ENSPORT LIMITED, as soon as possible, the rectification of the data concerning you which would be inaccurate or erroneous. You can also request that your data be completed, if necessary.

Right to erasure of your data

Barring legal exceptions, you can ask ENSPORT LIMITED to erase your data as soon as possible, if in particular you consider that the processing carried out by ENSPORT LIMITED on your data is no longer necessary with regard to the purposes for which they were collected.

Right to portability of your data

You have the possibility to recover part of your data in an open and machine-readable format or to ask ENSPORT LIMITED to transmit it to another organization. Only data that you have actively and consciously provided to ENSPORT LIMITED (for example, data that you have entered in an online form) or data generated when using a service are concerned by this right. or a device in connection with the conclusion or management of your contract, and which are processed automatically, on the basis of consent or the performance of a contract.

Right of opposition

You can object to your data being used by an organization for a specific purpose. You must then put forward reasons relating to your particular situation, except in the case of commercial prospecting, to which you can oppose without reason. In the event of the processing of your data for commercial prospecting purposes, you can oppose it at any time (See point 5.2 of this Policy), just as you can oppose the deposit of cookies at any time (cf. Article 10 of this Policy).

Right to limit the processing of your data

You can ask ENSPORT LIMITED to keep your data without being able to use it in one of the following cases:

you dispute the accuracy of the data used by ENSPORT LIMITED,
you object to your data being processed,
in the event of unlawful use but you oppose their deletion,
you need it for the establishment, exercise or defense of legal claims.

Right to withdraw your consent to the processing of your data

When the processing of your personal data is based on your consent (sending our electronic commercial offers, for example), you have the option of withdrawing your consent at any time (See point 5.2 of this Policy).

Right to give post-mortem instructions

You have the option of defining directives relating to the storage, erasure and communication of your data after your death. These directives define the way in which you wish to exercise your rights to your data after your death. You can send us these directives by sending a letter to the DPO of ENSPORT LIMITED (Cf. Art. 5.2) mentioning in the subject line “Post mortem directives”. You can modify or revoke your instructions at any time.

Right to complain to the Data Protection Commissioner

If you consider that your rights are not respected or that the protection of your data is not ensured in accordance with the applicable legislation in force, you can, at any time, file a complaint with a competent supervisory authority (a Mauritius, the Data Protection Office), directly on its site or by post to: Data Protection Commissioner, Data Protection Office, Level 5, SICOM Tower, Wall Street, Ebene Cyber City, Ebene, Ile Maurice.

Tel: 4600251
Fax: +4897341
Email Address: dpo@govmu.org

5.2. Exercise of your rights

To exercise one of your rights, send your request to: dataprotectionofficer@enl.mu

or DECATHLON MAURICE - For the attention of the DPO

All requests must specify, in the subject line, the reason for the request (exercise of the right of access, opposition, etc.) and the company concerned by the request. The request must also be accompanied by proof of identity and specify the address to which the response must be sent.

ENSPORT LIMITED will send you its response within a maximum period of one (1) month from the date of receipt of your request. However, this period may be extended due to the complexity and number of requests.

If you believe, after contacting ENSPORT LIMITED, that your computer rights and freedoms are not respected, you can file a complaint with the Data Protection Commissioner of Mauritius.

Prospecting and targeted advertising

Once you have accepted to receive commercial offers from ENSPORT LIMITED, you can, at any time, reconsider your choice by clicking on the unsubscribe link at the bottom of each communication by email sent by ENSPORT. LIMITED or by returning STOP, as indicated in the text messages sent to you.

In general, for any question relating to this data protection policy or for any request relating to the management of your personal data by the Company ENSPORT LIMITED, you can send your request by email or by post, as indicated above. .

With whom does ENSPORT LIMITED share your data?

ENSPORT LIMITED is also likely to transmit your data to the following entities when this is necessary to meet one of the purposes referred to in point 1 hereof:

In terms of managing customer and prospect files, the following may have access to your data or be recipients of your data:

authorized personnel from the sales department, departments responsible for handling customer relations and prospecting, administrative departments, logistics and IT departments as well as their line managers;
the authorized personnel of the departments responsible for control (auditor, departments responsible for internal control procedures, etc.);
the authorized personnel of the subcontractors when the contract signed between the subcontractors and the Company ENSPORT LIMITED mentions the obligations incumbent on the subcontractors in terms of protection of the security and confidentiality of the data and specifies in particular the objectives security to be achieved;
organizations, legal assistants and ministerial officers, as part of their debt collection mission.
the Decathlon France SAS group

In terms of supplier file management, your data may be transmitted:

to the personnel in charge of the purchasing department, the administrative and accounting departments, their hierarchical superiors as well as the persons contractually linked to the company or organization to ensure its accounts;
persons responsible for control (statutory auditors, chartered accountants, department responsible for internal control procedures);

the authorized personnel of the subcontractors when the contract signed between the subcontractors and the Company ENSPORT LIMITED mentions the obligations incumbent on the subcontractors in terms of protection of the security and confidentiality of the data and specifies in particular the objectives security to be achieved;

to external companies contractually bound for the execution of the contract;
to public bodies, exclusively to meet legal obligations;
to legal assistants and ministerial officers as part of their debt collection mission;
to the financial institutions holding the accounts in question.

In terms of recruitment, candidate data is intended for the HR department of ENSPORT LIMITED.

Are your data transferred outside Mauritius?

Your data is hosted on secure servers by SHOPIFY INC located in CANADA. As the latter is the subject of a decision of partial adequacy by the European Commission, we have paid particular attention to ensuring that it processes your data in the strictest respect of the regulations in force in terms of data protection. personal.

How does ENSPORT LIMITED secure the processing of your data?

ENSPORT LIMITED implements all technical, physical and organizational measures to ensure the security and confidentiality of your data during the collection, processing and transfer of your data.

The infrastructures of ENSPORT LIMITED are protected against malicious software (viruses, spyware, etc.). Physical and remote access to the servers hosting the data is controlled. Intrusion tests are carried out, as well as regular backups with restoration tests. The security of your terminal, from which you connect to our Site, is your responsibility.

In the event that the Company ENSPORT LIMITED is likely to call on service providers to process part of your data, it undertakes to verify that they present sufficient guarantees to ensure the protection of the personal data entrusted to them and to have them sign confidentiality clauses in accordance with the applicable laws in force.

In the event of a breach of personal data, i.e. in the event of a security incident, of malicious origin or not and occurring intentionally or not, having the consequence of compromising the integrity, confidentiality or the availability of your personal data, we undertake to respect the legal obligations, in particular, to notify the Data Protection Commissioner of Mauritius within the prescribed deadlines (currently 72 hours) and to document any violation of said data in a register internal:

The “Violations Log” contains the following:

the nature of the breach;
the categories and approximate number of data subjects;
the categories and approximate number of files affected;
the likely consequences of the breach;
the measures taken to remedy the violation and, if necessary, to limit the negative consequences of the violation;
where applicable, the justification for not notifying the Data Protection Commissioner or informing data subjects.

However, and in accordance with the regulations in force, ENSPORT LIMITED is not required to inform you of a violation in the following cases:

your personal data is protected by measures making it incomprehensible to any person who is not authorized to have access to it;
measures have been taken so that the risk is no longer likely to materialise;
this communication requires disproportionate efforts for the Company ENSPORT LIMITED, in particular not having any element allowing to contact you to inform you.

Required fields

Fields marked with an asterisk in our forms are mandatory. The consequences in the event of a lack of response are only the failure to take your request into account. The obligation to provide the requested data is contractual, as it is necessary for the performance of the contract to which you are a party or pre-contractual measures carried out at your request, in particular in the event of a request for information or a quote concerning our products and services.

Personal data & Cookies

Personal data & Cookies.

Privacy by Design / Default

ENSPORT LIMITED undertakes to integrate the protection of personal data from the design of a project, service or any other tool related to the handling of personal data, in particular the minimization of personal data, limitation of the purposes of data collection, respect for the integrity and confidentiality of data, limitation of retention periods.

Liability

In order to respect the principle of Accountability, ENSPORT LIMITED:

adopts internal procedures with the aim of ensuring compliance with the regulations (IT charter, personal data protection charter);
keeps a documentary record of all processing carried out under its responsibility or that of the subcontractor (keeping of the processing register, confidentiality agreements with employees and service providers, company security policy, procedures for managing access requests , rectification, opposition, etc.);
carries out impact analyzes (PIA) for processing operations presenting specific risks with regard to rights and freedoms.

The objective is to provide rich documentation to demonstrate compliance with data protection rules at all times.

Personal data

Follow us on social media!

Our partners

Our mobile apps