Data protection
Last update : April 3rd, 2019We take the protection of your personal data very seriously and we are committed to processing your personal data by conforming to the General Data Protection Regulation (GDPR). Below, we will inform you on the way in which we use your Personal Data and Cookies and the rights you have in relation to this information.
Newsletter Data
1) Collected Data
As part of sending newsletters, the collected data are : last name, first name, marital status, date of birth, email address.
2) The Purpose of Data Processing
We collect your data with the goal of allowing you to benefit from personalised promotional offers, to inform you of promotional contests and marketing operations. We also measure our audience and the efficiency of our advertisement campaigns.
3) Legal Base
Sending a newsletter is performed on the basis of your consent (article 6, paragraph 1, letter A of the GDPR).
If you no longer wish to receive our promotional offers by e-mail, you can notify us at any time by one of the following means:
- Click on the "click here" link at the bottom of the Newsletter
- Go to "My Account", then in the "My Dashboard" section click on "edit" in "account information" next to "Newsletters"
- By contacting us by e-mail at [email protected] or by phone at +44 (0) 2036 081 983
4) Data Conservation Period
The processed data related to the Newsletter are retained for a period of 3 years following your consent and starting at the latest activity.
You can withdraw your consent at any moment on each newsletter you have received. In this case, your data will not be used for the purpose of the newsletter following your consent withdrawal.
Web Order Data
1) Collected Data
As part of processing orders and obtaining a commercial relationship, the collected data on the website are : marital status, last name, first name, postal address, telephone number, email address, date of birth, country.
2) The purpose of data processing
The data are collected for the following purposes :
- Ensure that your order is correctly processed.
- Guarantee a Returns Service on returns and claims.
- Ensure follow-up procedures for your customer account.
- Guarantee optimal use of our website and our particular services.
- Offer you commercial prospection (via newsletters) and personalised offers.
3) Legal Base
The data mentioned in point 1 are collected with the goal of preparing and executing the concluded purchasing agreements on our online boutique. The legal base for personal data processing in using Cookies is the article 6, paragraph 1, letter B of the GDPR.
4) Data Conservation Period
We retain your data only throughout the necessary duration for the purpose of processing and within the application of legal regulations in which we are subjected. To note : the legal conservation period is 10 years starting at the accounting closure, according to the article L123-22 from the commerce code for any supporting accountable document (invoice, order form, delivery note....).
5) Payment Data
We offer several secured payment methods on our website. Your bank details are collected by service providers who issue payment methods, guarantee payment security and transmit payment identification to us. Our service providers are PCI-DSS certified : this norm is an international security standard in which the objectives are to ensure confidentiality and the integrity of card owner data, and to secure card and transaction data. Therefore, we do not collect your payment data.
Our secured service providers are required to retaining certain personal data with the objective of guaranteeing the completion of the agreement, but also to prevent potential fraud.
| Type of payment | Service Provider | Data Conservation | Data Protection Chart |
|---|---|---|---|
| Credit Card and American Express | CM-CIC payment | Last name, first name, order number, address, email address or any other necessary data to the contractual execution of the sale | https://www.cic.fr/en/bank/legal-information/cookie-management.html |
| Credit Card and American Express | Taking the payment over the telephone with our customer service | No data conservation in our files, conservation is similar to an online payment with our service provider, CM-CIC payment | |
| PayPal | PayPal | Last name, first name, order number, address, email address or any other necessary data to the contractual execution of the sale | https://www.paypal.com/uk/webapps/mpp/ua/privacy-full |
| iDeal and Bancontact | Ingenico - Ogone | Last name, first name, order number, address, email address or any other necessary data to the contractual execution of the sale |
6) Fraud fighting and prevention
The collected data is also used in the context of preventing and fighting fraud, especially with credit cards. We reserve the right to verify personal data communicated when customers place an order and to take all the appropriate measures deemed necessary to verifying that the bank account that has been debited belongs to the customer who placed the corresponding order. This is to prevent fraudulent activity and payments. This verifiction can be achieved by means of requiring proof of identification and address.
Any required justification or proof will be automatically destroyed – deleted once the additional verifications are complete within a maximum delay of 24 hours.
Failure to reply by the customer or if the verification does not acquire a positive result, we reserve the right to cancel and refund the order.
7) Order Tracking – Shipment
In the context of tracking your order, we will inform you by email of each order status. We then transmit your contact details (last name, first name, address, email address, telephone) to the chosen carrier in order to allow the carrier to transmit any useful information to you or contact you with the goal of successfully delivering your order.
Our carriers are La Poste – Colissimo, UPS, Chronopost and Fedex.
These companies are subject to the same regulations in terms of personal data protection.
8) Contact Form
You have the possibility of contacting us by email or by the contact form on our website :
https://www.tennispro.eu/contacts
Personal data transmission can be required based on your request (ex : order tracking...). This data is only used for verification purposes and to process your request on the basis of article 6, paragraph 1, letter F of the GDPR.
The electronic exchanges between you and our customer service will only be retained throughout the necessary time to successfully process your request. The data are then deleted after a maximum period of 7 days.
9) Summary of the indicated data conservation duration :
| Data | Conservation Duration |
|---|---|
| Cookies Consent | 13 months |
| Newsletter Consent | 3 years after the last contact |
| Customer Account | 3 years after the last activity |
| Customer Order | 5 years |
| Order Form / Delivery Note / Invoice / Credit Note | 10 years |
| Email Conservation | At the latest, 7 days following the moment in which the purpose of the necessary communication has been fulfilled (ex : tracking number => as soon as the information has been sent) |
| Fraud Control Proof | At the latest, 24 hours following the completion of the verification |
| RIB - Bank Information | Deletion of banking information as soon as the refund has been performed. Conservation within the software program used to perform the refund. This will be erased at the end of a 5 year period. |
| Packing Slip | 10 years |
| Return/Exchange Slip | The paper exchange/return slip will be deleted/ thrown away as soon as the refund has been performed. Computerised conservation. This information will erased at the end of a 5 year period. |
Cookies
1) Cookie Use
When you are consulting our website, information that is relative to your browser can be saved in text files, called “Cookies”, installed on your browser.
The notion of the “Cookie” is to cover non-executable text files, tracers, web tags and other technologies, such as clear and transparent GIFs... (hereinafter referred to as “Cookies”), deposited on the browser of your device (computer, tablet, mobile) by Tennispro, our subcontractors, our Partners, suject to your consent, when continuing to browse on our website, our mobile applications, our contents (hereinafter referred to as our “Services”). The contained information in this file can only be read and/or modified by the issuer.
Certain Cookies are indispensable to the use of the website, others allow optimal website use and to personalise displayed content. 5 types of Cookies can be saved in your device when visiting our website :
a. The technical Cookies that are strictly necessary :
The Cookies are necessary for browsing on our website, having access to different services as well as implementing security measures. These Cookies cannot be deactivated or configured as this can result in the risk of no longer being able to access the website and/or website services.
The “essential Cookies” to the use of our website are :
| COOKIE NAME | FUNCTION |
|---|---|
| SID | Cart username /adding to cart and order processing |
| UID | Customer username |
| ASP.NET SessionId | Session username |
| TEST | Cookie implementation test |
b. Personalisation Cookies :
These Cookies allow us to memorise your preferences on the website in order to improve your browsing comfort. This function can memorise your cart or save your username information to keep you connected to your account for your next visit. The purpose of these Cookies is to improve the website's operational abilities.
c. Audience measurement Cookies :
The Cookies are validated by us or our technical subcontractors with the purpose of measuring the audiences for various website content and sections of our website in order to evaluate and better organise the content. These Cookies may, as the case may be, detect browsing problems and thus improve our services' useability.
d. Advertisement Cookies :
Our website is susceptible to depositing issued Cookies by our service providers in the context of advertisement partnerships as long as you have given your consent to having your personal data communicated to our partners with respect to the new French Data protection and freedom act.
When you access a third party website possessing advertisement space that distributes one of our advertisements, this advertisement can be sent to you through the recognition of our Cookies that we have previously deposited on your browser.
The Cookies enable us to adapt and to send you personalised advertisements by displaying them on your device with your prior consent (behavioural advertising) within third party advertising space, such as Facebook or Google.
Issuing and using Cookies by third party companies are subject to their own terms of use.
At any moment, you can prevent the collect of your information through advertisement Cookies by accessing the Cookies management form.
e. Social Media Cookies
These Cookies share our website's content with other people, your browsing behavior or your opinion with regards to website content. This Cookie sharing particularly consists of certain buttons / plug-in, such as “share”, “like”, deriving from social media, such as Facebook or Twitter. The social network providing this applicative button is susceptible to identifying you because of this button, even if you have never used it when consulting our website. We invite you to consult the social networks' privacy policies in order to become aware of their purpose, especially with regards to advertisements and the information they can gather with these applicative buttons.
We recommend that you consult the conditions of the use of your data on these social media websites in order to understand their purpose, especially with regards to advertisements and the browsing information they can gather with these applicative buttons. It is important to note that the conditions of use for these social media websites can allow you to supervise and control the use of your data on these social media websites, particularly by configuring and customising your user account on your social media account.
There is more information on Cookies on the CNIL website : https://www.cnil.fr/en/home
2) Collected Data
In order to enable you to benefit from all of the website's features and to receive personalised communication originating from Tennispro, the history and the browsing profile are connected by means of Cookies deposited on your browser following your consent.
The Cookies are only deposited if you accept by scrolling down the page and continuing to browse on another webpage or by clicking the button “OK, accept all” on the banner or the page that is dedicated to the Cookies.
At any moment, you can deactivate the Cookies with the deactivation options that are offered to you and you are reminded of thereafter. We inform you that this can reduce or prevent you from accessing all or a part of the website's offered Services.
3) Purpose
The technical Cookies are used to enhance usage on our website. Cookies are necessary to allow you to benefit from certain features of our website.
The Cookies analyse and measure the audience and enable us to collect statistical data that are anonymous and have the objective of personalising and improving the quality of our website.
The aforementioned objectives represent our legitimate interest in processing personal data, conforming to the article 6, paragraph 1, letter F of the GDPR. Without your consent, there will only be an anonymous analysis of collected data. In addition, we cannot recognize your identity.
4) Legal Base
The legal base for processing personal data by using Cookies is the article 6, paragraph 1, letter F of the GDPR.
5) Conservation Duration and Personal Cookie Management
You can manage and modify the use of Cookies at any moment by following the procedure below. Your configuration may modify your internet browsing, your access conditions and the use of certain services on our website that require the use of Cookies. Furthermore, you can manage your Cookies : with your web browser, interprofessional platforms or when it is offered to you with a link that is available in the list below.
a. Cookies management with your web browser :
You can configure your web browser to save the Cookies in your device or to systematically reject them or to reject them based on the issuer.
To understand the applicable methods to managing stored Cookies in your browser, we invite you to consult the help menu in your browser. Please refer to the section “your footsteps” on the CNIL website :https://www.cnil.fr/en/home (Commission Nationale de l’Informatique & des Libertés – National Commission of Information Technology & Freedom) and the below information to deactivate Cookies on each of the following browsers :
o Google Chrome : https://support.google.com/chrome/answer/95647
o Internet Explorer : https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
o MozillaFirefox : https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
o Safari : https://support.apple.com/en-gb/HT201265
o Opera : http://www.opera.com/help/tutorials/security/cookies/
b. Manage Cookies online with interprofessional platforms
The below platforms are shared by hundreds of advertisement professionals on the internet and form a centralised interface to enable you to express your refusal or your consent for Cookies, as specified above.
The website, Youronlinechoices is managed by digital advertising professionals through the EDAA (European Digital Advertising Alliance) and is managed by the French Interactive Advertising Bureau in France. You can become acquainted with the companies who are registered within this plat-form and those who offer the possibility of accepting or refusing Cookies and those who use the Cookies to adapt and collect advertisements that may be shown on your browser :
http://www.youronlinechoices.com/uk/your-ad-choices
Another platform called Network Advertising Initiative will also allow you to manage Cookies and enable you to become your own Cookies administrator :
http://www.networkadvertising.org/choices/
This procedure will not prevent advertisements from being displayed on internet websites that you visit. The procedure will only block technologies that adapt advertisements to your centre of interests.
c. Direct online Cookies management starting with platforms at the origin of the deposit :
Audience measurement Cookies :
If you do not wish to have our website save Cookies in your browser with the purpose of measuring audiences, you can click on the following deactivation link that saves a Cookie within your browser. This link's sole objective is for deactivation :
• Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=en
Attention : these Cookies measure traffic or the audiences associated with our internet website, pages visited and interactions conducted on the website during your visit. Deactivating these Cookies thus prevents any collect of relative website browsing information and editorial content suggestions based on your browsing.
Social media Cookies
If you do not want our website to save social media Cookies within your browser, you can click on the following deactivation links that save a Cookie within your browser. This link's sole objective is to neutralise the use of other Cookies deriving from the same issuer. Deactivating the Cookies thus prevents any interaction with the following social media websites :
• Facebook : https://www.facebook.com/help/562973647153813
• Google+ and YouTube : https://support.google.com/accounts/answer/61416?hl=en
• Instagram : https://help.instagram.com/1896641480634370
• Pinterest : https://policy.pinterest.com/en-gb/cookies
| Type of Cookie | Conservation Duration | Blocking Consequence |
|---|---|---|
| Necessary Cookies | Short life span, generally the time of the session. | Risk of no longer being able to access the website and/or website services |
| Personalisation Cookies | Life span does not exceed 13 months. | Absence of adapting the website offers and presentation. |
| Audience Measurement and Analysis Cookies | Life span does not exceed 13 months. | No consequence on website use. |
| Advertisement Cookies | Life span does not exceed 13 months. | No consequence on website use. However, deleting this feature will not stop the advertisement from being displayed on the internet. It can thus be displayed as an advertisement that does not take your centre of interests into account. |
| Social Network Cookies | The Cookie life span is determined by each social network, but it must not exceed 13 months. | No consequence on internet website use. However, deactivating these Cookies will prevent any interaction with the concerned social media websites. |
RECRUITMENT
1) Collected Data
When you apply for one of our jobs or when you send in an unsolicited application, the collected data are : CV, last name, first name, title, family status, date of birth, email address, postal address, telephone number, professional experience and diplomas.
2) Data Processing Purpose
We collect your data to process your application and verify if your set of skills based on your background matches the desired profile.
3) Legal Basis
The preservation of your application file and your data is based on your consent (article 6, paragraph 1, letter f of the GDPR).
4) Duration of Data Preservation
The data related to recruitment will be preserved following your consent for a maximum period of 2 years.
If you are hired, the data will be preserved within your employee file.
Your data are preserved by our company and are not transmitted to third parties.
At any time, you can withdraw your consent by contacting our human ressources service or by contacting our processing manager by email at [email protected].
Your contact for data protection
Processing Manager :
TENNISPRO DISTRIBUTION SAS
11, rue des Cigognes
67960 ENTZHEIM
Data protection contact : [email protected]
Transmission to Outsiders
We call upon service providers as subcontractors. They access to your data, but their sole purpose is specifically determined by our interests.
These service providers are also subject to the GDPR obligations and we assure that they will respect these conditions.
The data recipients are : subcontractors, commercial partners and clients, particularly marketing and advertisement companies and police authorities within the framework of legal requisitions concerning fraud fighting.
Tennispro also calls upon subcontractors for the following operations : website and application audience monitoring, promotion of advertisement campaigns on the website, applications, emailing and newsletters, sending emails and newsletters, sharing content on social media, the provision of sharing features and promotional contests.
We do not transmit your data outside of the European Union.
Your rights related to your data protection
Being the data subject, you have the following rights according to:
• art. 15 GDPR, the right to obtain information about your personal data which we process, within the scope described therein.
• art. 16 GDPR, the right to immediately demand rectification of incorrect or completion of your personal data stored by us.
• art. 17 GDPR, the right to request erasure of your personal data stored with us, unless further processing is required
- to exercise the right of freedom of expression and information
- for compliance with a legal obligation
- for reasons of public interest or
- for establishing, exercising or defending legal claims
• art. 18 GDPR, the right to request restriction of processing of your personal data, insofar as
- the accuracy of the data is contested by you
- the processing is unlawful, but you refuse their erasure
- we no longer need the data, but you need it to establish, exercise or defend legal claims, or
- you have lodged an objection to the processing in accordance with art. 21 GDPR.
• art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller.
• art. 77 GDPR, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority at your habitual place of residence or workplace or at our company headquarters.
The new article 40-1 from the law of data protection and computing freedom enables people to give instructions with regards to data conservation, communication and deletion following decease.
A person may be designated to execute these tasks. The objective is, when the person has deceased, to become knowledgeable of these instructions and enquire implementation with the concerned processing manager.
These instructions are :
- general; when the instructions are performed with regards to all of the person's data;
- or particular ; when the instructions are only related to particular processing of specific data.
When these instructions are general and are concerned with all data of the deceased person, the data can be confided to an entrusted third party that is certified by the CNIL.
When these instructions are particular, the data can also be confided to a processing manager (social media, online messenger) in the case of fatality. These instructions are subject to the concerned person's specific consent and cannot result in the concerned person's sole authorisation of the general terms of service.
In the absence of particular instructions by the living person, the inheritors will have the possibility of exercising certain rights, particularly :
- the right of access, if it is necessary for the settlement of the deceased's succession;
- the right of opposition to proceed with the deceased's user account closure and to oppose the treatment of data.
https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens/my-rights/what-are-my-rights_en
Data securing
We take all necessary precautions in order to preserve the security and confidentiality of your data. The purpose is to prevent the data from being distorted, damaged, divulged and to prevent third parties from accessing it. In particular : access to your Member Account, “SUBSCRIBE” is protected by an encrypted login / pasword, the email addresses transmitted to third parties within the context of collaborating with partners are protected by hashing and access to the data base is strictly reserved to authorised personnel who are required to obtain this data in order to perform their job tasks.
In accordance with the new French Data protection and freedom act and with the European data protection regulation, Tennispro has verified that the subcontractors are also committed to respecting data security and privacy.
