Privacy Policy APPLICATION DECATHLON HUB
Version | 04 / 07 / 2025 |
To view next versions, click here.
YOUR DATA AND DECATHLON: HOW DOES IT WORK?
PRECISIONS REGARDING WELLNESS DATA
Your data is yours! At DECATHLON, we believe that you should have control over your data. This is the direction we are taking, bearing in mind that we still have a long way to go. Apart from the few legal obligations to which we are subject, only you can agree to your data being used by DECATHLON. If we sometimes rely on subcontractors, they only act on our behalf and in accordance with our instructions.
DECATHLON SE, 4 boulevard de Mons, Villeneuve d'Ascq 59650 (France), is responsible for processing your personal data. Below you will find all the processes carried out as part of the Decathlon HUB application:
Processing, purposes and legal bases | Data processed | Data retention periods |
To allow you to register on the application and benefit from the service. This processing is based on the performance of the contract concluded between you and DECATHLON. |
| For the entire lifetime of your DECATHLON account, or up to three years after its last activity. |
To allow you to identify yourself via your DECATHLON account and to manage it. This processing is based on DECATHLON's legitimate interests. |
| For the entire lifetime of your DECATHLON account, or up to three years after its last activity. |
To ensure the security of the application. This processing is based on DECATHLON's legitimate interests. |
| Data kept for up to 12 months after collection. |
To measure the performances, improve the service and navigation of the application via the data collected by our cookies. This processing is based on your consent. |
| Data retained for up to 24 months after collection. Consent to cookies and their lifetime are renewed every 6 months. |
To allow you to update your connected device. This processing is based on DECATHLON’s legitimate interest. |
| The data is retained for up to 5 years after the purchase of the device. |
To allow you to transfer your wellness data to the application through synchronization. This processing is based on your consent. |
| For the entire duration of your consent, and until its withdrawal or the deletion of the device |
To allow you to optimize the settings (e.g., weather service) and the functioning (e.g., GPS signal acquisition speed) of your device through geolocation. This processing is based on your consent. |
| For the entire duration of your consent, and until its withdrawal. |
To provide you with customized settings for your device, and to enable you to view, analyze, and compare your activity data, wellness data, and sports data over different periods, in order to adapt your habits and improve your personal performance. This processing is based on the performance of the contract concluded between you and DECATHLON. |
| For the entire lifetime of your Decathlon account or up to 3 years from its inactivity. |
To allow you to benefit from the advantages of your Decathlon account. This processing is based on the performance of the contract concluded between you and DECATHLON. |
| For the entire lifetime of your Decathlon account, or up to 3 years from its inactivity |
To provide you with support regarding the use of the service. This processing is based on the performance of the contract concluded between you and DECATHLON. |
| Data is retained for the entire duration of the request processing, and up to 1 year after its completion. |
To manage the quality recall of your connected device. This processing is based on the performance of the contract concluded between you and DECATHLON |
| The data is retained for up to 5 years after the purchase of the product. |
Allows you to synchronise sports data from third-party devices and/or applications (e.g. Garmin) OR to third-party applications (e.g. Strava). The legal basis for consent is managed via the interface https://account.decathlon.com/, outside the Decathlon HUB application. |
| According to the duration defined by these third parties |
To process and use your information in order to improve and further develop our products. This processing is based on your consent. |
| For the entire duration of your consent or until its withdrawal |
To enable you to exercise your rights with regard to personal data. This processing is based on compliance with a legal obligation. |
| Data retained for up to 5 years after the calendar year in which your request was processed. |
We process your wellness data only with your consent. However, without this consent, the service offered by DECATHLON in connection with the use of your device and the Decathlon HUB application cannot be provided to you in its entirety. Nevertheless, even if you refuse the processing of this data, you can still benefit from the basic service that Decathlon makes available to you through your device and this application
We process your geolocation data only with your consent. However, without this consent, the service offered by DECATHLON in connection with the use of your device and the Decathlon HUB application cannot be provided to you in an optimal way. Nevertheless, even if you refuse the processing of this data, you can still benefit from the basic service that Decathlon makes available to you through your device and this application
We, DECATHLON SE, as the data controller indicated above, may in certain cases share your data with third parties.
We will only share your data with third parties who present sufficient guarantees as to the implementation of appropriate "technical, organizational and legal measures" so as to guarantee the protection of your rights and your data.
These recipients are :
Did you know? Your data may be transferred outside the European Union. Rest assured, these transfers are carried out with the utmost care. We'll explain!
Why do we transfer your data?
The transfer of your data outside the European Union is mainly due to the location of some of our subcontractors.
In order to offer you a high-quality service, we have decided to outsource certain operations to specialist service providers with real expertise in their fields (for example, hosting). And some of these service providers are based outside the European Union.
How are these data transfers regulated?
Whatever the countries in which our subcontractors are based, we always select them with the utmost vigilance. This is particularly the case when it comes to the security of your data. These subcontractors only act on documented instructions from DECATHLON and at no time use your data for anything other than the performance of the services we entrust to them. A contract is systematically concluded between DECATHLON and its selected subcontractors in order to provide a framework for the subcontracted processing.
When our service providers are based outside the European Union, we make a point of selecting them first and foremost from countries whose legal framework provides a satisfactory level of security. This is referred to as an adequacy decision adopted by the European Commission. The list of these countries is available here: https://www.cnil.fr/fr/la-protection-des-donnees-dans-le-monde.
Where this is not possible, we use appropriate legal mechanisms to support these transfers, in particular by signing additional contractual clauses specifically designed for this type of transfer and adopted by the European Commission.
Entrusting us with your data does not mean that you lose control of it - quite the contrary! Here are some explanations...
You have a number of rights. Some of these apply to all processing of your personal data, while others depend on the type of processing carried out and, more specifically, the legal basis on which it is based (contract, legal obligation, consent, legitimate interest, etc.).
Below is a brief description of these rights and how to exercise them.
To find out exactly what rights are attached to the processing operations concerning you, please refer to the "your rights" section in the description of the processing operation concerned.
Right of access:
This right allows you to ask us questions about the nature of the processing concerning you (type of data, origin of collection, etc.). It also allows you to ask us for a copy of all the information concerning you. This right applies regardless of the legal basis for the processing that concerns you.
Right to rectification:
Moving house, getting married, taking up a new sport... There are many situations in which you may need to update your data. The right of rectification is designed to do just that. This right applies regardless of the legal basis for the processing of your data.
Right to object:
This is the right to say "no", the right not to be included in a data processing operation or to have your personal data processed. This right applies where the processing is based on Decathlon's "legitimate interest", provided that this interest is not "overriding".
Right to erasure:
It's the right to be forgotten... and it should be. DECATHLON has no reason to keep your data beyond what is necessary. All data concerning you is therefore automatically deleted at the end of the retention period announced when your data was collected.
When your data is processed on the basis of your consent or DECATHLON's legitimate (non-compelling) interest, you may obtain the early deletion of your data. How can this be done? All you have to do is express your wish to withdraw your consent or exercise your right to object to the processing.
Don't forget, by logging into your DECATHLON account, you can delete it (and the data associated with it) yourself: Click here
Right to portability:
This right allows you to request data concerning you, as soon as this data is processed on the basis of your consent or a contractual relationship. What is the difference with the right of access? We are obliged to send you the data in a format that is technically usable by you or by an entity other than Decathlon.
Right to limitation:
This right is complementary to some of the other rights set out above. In fact, it allows you to have your data "frozen" after a request for rectification, for example. If you have any doubts about the lawfulness of any of our processing operations, this right would allow you to ask our teams to stop processing your data, but without deleting it. Finally, if you wish to establish, exercise or defend your rights in court, you could also use this right to request that your personal data be "frozen". If you have any questions, please do not hesitate to contact us!
If, despite our best efforts, you feel that your rights have not been respected, please note that you can refer the matter to the main supervisory authority, the CNIL : https://www.cnil.fr/fr/agir
You can also contact the data protection authority in your country of residence if you believe that your rights are not being respected :
Country | Supervisory authority Website |
Spain | Agencia de Protección de Datos https://www.agpd.es/ |
Italy | Garante per la protezione dei dati personali http://www.garanteprivacy.it/ |
Belgium | Commission de la protection de la vie privée Gegevensbeschermingsautoriteit http://www.privacycommission.be/ |
Germany | BFDI Informationsfreiheit http://www.bfdi.bund.de/ |
Portugal | Comissão Nacional de Protecção de Dados - CNPD http://www.cnpd.pt/ |
Swiss | |
Czech Republic | Úřad pro ochranu osobních údajů http://www.uoou.cz/ |
Poland | Prezes Urzędu Ochrony Danych Osobowych, PUODO http://www.giodo.gov.pl/ |
United Kingdom | The Information Commissioner’s Office https://ico.org.uk |
The Netherlands | |
Turkey |
DECATHLON uses cookies and trackers on the Decathlon HUB app :
Name of cookie/tracker | Purpose of the cookie/tracker | Lifetime of the cookie/tracker |
Firebase Collection and analysis of application errors | It allows us to collect data during crashes or errors in the application. With this data, we analyze the issues encountered in order to resolve them as quickly as possible. | The collected data is retained for a maximum period of 24 months. |
Amplitude , Datadog Audience and content performance measurement | They help us improve the features and content of our website. To do this, we collect and analyze data related to the number of visitors, the pages visited, the duration of visits, and the sources of traffic | The collected data is retained for a maximum period of 24 months. Consent is renewed every 6 months. |
Firebase Customization usage | This allows us to offer you content that matches your preferences: sports advice and personalised offers, events organised in your store or near you, products you are likely to enjoy. | The collected data is retained for a maximum period of 24 months. Consent is renewed every 6 months. |
You can modify your preferences and consents from the device and/or profile pages of the application.
The way in which we process your data does not leave you indifferent... and quite rightly so!
By appointing me Data Protection Officer, DECATHLON has entrusted me with the task of supporting our commercial activity without compromising on respect for your rights and your privacy. I will do my utmost to fulfill this mission with pride and humility.
Do you have a question, a comment or a concern? I'm here to help!
Grégory, Data Protection Officer at Decathlon.
To contact me, just send me a message by clicking here.