The Personal Data Protection Charter aims to inform customers and users about how the personal data they provide via the website https://boutique.parisbasketball.com/ (the "Site") is collected, used and shared.
-
JOINT DATA CONTROLLERS
The joint data controllers, within the meaning of European Regulation No. 2016-679 of 27 April 2016 and the French Data Protection Act of 6 January 1978 as amended, are:
- ORECA SAS, a company with share capital of €3,672,900, registered office at Parc d'activités du plateau de Signes, Allée de Dublin – 83870 Signes, registered with the Toulon Trade and Companies Register under number 302 045 794 ("ORECA").
- Paris Basketball SA, registered office at Halle Georges Carpentier, 81 BD Massena, 75013 Paris, registered with the Paris Trade and Companies Register under number 488 120 452 ("Paris Basketball").
-
NATURE OF PERSONAL DATA COLLECTED
When using the Site, customers and users will be asked to provide certain personal data necessary to deliver the requested products and services, in particular when making purchases on the Site, creating a customer account, subscribing to communications, or contacting our customer service.
The personal data collected, the legal basis for processing and the retention periods are detailed in the table below.
The joint data controllers collect only the personal data that is relevant and necessary for the purposes for which it is processed. They undertake not to use such data for purposes other than those for which it was originally collected.
| CONTEXT | TYPES OF PERSONAL DATA | LEGAL BASIS | RETENTION PERIOD |
|---|---|---|---|
| Customer account creation | Identification data | Performance of the sales contract | 5 years after the last contact between ORECA and the customer |
| Order processing |
|
Performance of the sales contract | 10 years for sales data required to comply with legal and regulatory obligations |
| Fraud verification or suspected fraud |
|
|
13 months from the last check, and 5 years if classified as fraudulent |
| Site browsing: data collected via cookies or other trackers |
|
|
13 months from consent |
| Newsletters | Email address |
|
3 years after the last interaction with the customer, or 3 years after consent renewal |
| Contact form | Identification data | Legitimate interest | 5 years after the last interaction between ORECA and the customer |
-
PURPOSES OF PROCESSING
Personal data collected from Site customers and users is processed to enable the joint data controllers to:
- Ensure the proper performance of the sales contract concluded when purchases are made on the Site, and manage the commercial relationship, order processing and after-sales service. Without this personal data, the order cannot be processed.
- Send marketing communications and information about the Site, its products and offers (newsletters), subject to user consent.
- Carry out analyses and statistics to adapt commercial and marketing activities, in ORECA's legitimate interest.
- Ensure a good browsing and purchasing experience for Site users, in ORECA's legitimate interest.
- Comply with legal and regulatory obligations, in particular in tax, accounting and warranty matters.
-
RECIPIENTS OF DATA
Data provided by customers or Site users is collected by ORECA and/or Paris Basketball and their subsidiaries, in compliance with applicable legislation.
This data may be shared with:
- ORECA and its subsidiaries;
- Paris Basketball and its subsidiaries;
- Third-party service providers acting on behalf of ORECA or Paris Basketball to fulfil contractual obligations with customers (payment, logistics);
- Government authorities and public bodies where required by law or regulation.
Any sharing of data with third parties is governed by a contract ensuring the protection of the data shared and the respect of users' rights.
-
TRANSFER OF PERSONAL DATA
Collected personal data is stored on servers located within the European Economic Area (EEA).
Should any data need to be transferred outside the EEA, such transfers would be carried out in strict compliance with the General Data Protection Regulation No. 2016/679.
-
USER RIGHTS OVER PERSONAL DATA
In accordance with applicable legislation and regulations, Site customers and users have several rights.
- Right of access
This right allows users to enquire about the nature of the processing of their personal data (type of data, source of collection, etc.) and to request a copy of all such information. - Right of rectification
This right allows customers or users to update their personal data. - Right to erasure (right to be forgotten)
This right allows customers or users to request early deletion of processed data, subject to the mandatory nature of the processing concerned. In all cases, user data is automatically deleted at the end of the retention period set out in this policy. - Right to object
This right allows users to object to data processing or to be removed from it, subject to the mandatory nature of the processing concerned. - Right to withdraw consent
This right allows customers or users to withdraw their consent at any time for purposes where consent was requested to authorise the collection of their personal data. - Right to data portability
This right allows customers or users to receive their personal data in a technically usable format, for themselves or any person of their choice.
Each customer or user may exercise the above rights by contacting us:
- By email: dpo.ext@oreca.fr
- By post: ORECA STORE – BP706 – 83030 Toulon cedex 9
Requests must be submitted in writing with proof of identity (e.g. customer or subscription number, along with name and address).
A response will be provided within a maximum of one (1) month. This period may be extended by two (2) additional months depending on the complexity and/or volume of requests, after informing the customer or user.
If a customer or user believes their rights have not been respected, they may contact the CNIL: https://www.cnil.fr/fr/agir
-
AMENDMENTS TO THE PRIVACY POLICY
This privacy policy may be updated from time to time to comply with regulatory, legal, editorial or technical developments.
Where applicable, the "last updated" date will be changed to indicate when modifications were made.
Where necessary, customers and users will be informed and/or asked for their agreement.
We recommend checking this page regularly to stay informed of any changes or updates to the Privacy Policy.