Data privacy policy

1. WHAT IS THE IDENTITY OF THE DATA PROCESSING MANAGER?

The processing is defined by Company Stade Français Paris SA, with a share capital of 4 316 990.02 euros, whose registered office is at Parc d’activités du 9 Allée Charles Brennus, 75016 Paris, registered with the Registre du Commerce et des Sociétés of Paris (France) under number 420 211 880 (« SFP »).

2. THE NATURE OF THE PERSONAL DATA COLLECTED

As part of the use of the https://store.stade.fr/ (the « Website »), its customers and users will be asked to provide certain Personal Data necessary to provide the products and services requested, in particular during purchases made on the Website, when creating a customer account, when registering for communications or when contacting our customer service.

The Personal Data collected, the legal basis of the processing and their duration are detailed in the table below

SFP only collects Personal Data that is relevant and necessary for the purposes for which it is processed.

Situation Personal data collected Legal basis Recipients of personal data Durations
Create an account on the online shop
  • Civil status
  • First Name
  • Last Name
  • Email address
  • Phone number
  • Address
  • Password associated with the email address
  • Date of birth
  • VAT number
  • SIRET or SIREN number for professionals
  • Legitimate interest
  • Performance of the sales contract
  • Authorised personnel within the SFP company, each having limited access to the only data necessary for the purpose it implements
  • The ORECA company that operates the online shop
  • Service providers, agents providing IT and/or technical services such as those in charge of hosting and providing the Website
  • The competent authorities on request, in accordance with the regulations in force.
At the latest 5 (five) years after last contact between ORECA company and customer
Order processing
  • Civil status
  • Invoicing address
  • Shipping addresses
  • Name of the address if different
  • Company name (not required)
  • Credit card details (card type and number, expiry date, cardholder name, visual cryptogram): voluntary recording of this data is done in accordance with the PCI DSS data security standard and is not accessible to ORECA company staff
  • PayPal account
  • Purchase history and associated invoices
  • Customer or user interactions on the Website, necessary for the realization of its various solicitations: products placed in your basket, ordering, customer service request, clothes or shoes sizes
  • Legitimate interest
  • Performance of the sales contract
  • Legal and regulatory obligation
  • Authorised personnel within the SFP company, each having limited access to the only data necessary for the purpose it implements
  • The ORECA company that operates the online shop
  • Service providers, agents providing IT and/or technical services such as those in charge of hosting and providing the Website
  • The competent authorities on request, in accordance with the regulations in force.
At the latest 5 (five) years after your last order
10 (ten) years for sales data necessary to comply with legal and regulatory obligations (limitation period, guarantee or archiving period)
Verification following fraud or suspicion of fraud
  • Electronic copy of the buyer’s ID
  • IP Address and Authentication data (connection and usage logs, unique identifier)
  • Phone number
  • Email address
  • Address and proof of residence
  • Bank details
  • Performance of the sales contract
  • Legal and regulatory obligation
  • Authorised personnel within the SFP company, each having limited access to the only data necessary for the purpose it implements
  • The ORECA company that operates the online shop
  • The competent authorities on request, in accordance with the regulations in force.
13 (thirteen) months from last check and 5 (five) years if considered fraud
Online browsing: Data collected by cookies or other tracking technologies
  • The various statistics related to the use of the Website
  • Information relating to the navigation of users on the Website in an « anonymized » manner in order to offer the products corresponding to their search on the Website
  • Legitimate interest
  • Performance of a contract
  • Consent
  • Authorised personnel within the SFP company, each having limited access to the only data necessary for the purpose it implements
  • The ORECA company that operates the online shop
  • Service providers, agents providing IT and/or technical services such as those in charge of hosting and providing the Website.
13 (thirteen) months following your consent
Newsletters
  • Email address
  • Consent
    Your individual consent will be obtained via your voluntary subscription to the newsletter.
  • Authorised personnel within the SFP company, each having limited access to the only data necessary for the purpose it implements
  • Authorised persons within the ORECA company that operates the online shop
  • Service providers, agents providing IT and/or technical services such as those in charge of hosting and providing the Website
  • The competent authorities on request, in accordance with the regulations in force.
5 (five) years following your consent

3. PURPOSES OF PROCESSING

The Personal Data collected on the customer and the user of the Website are the subject of computer processing enabling SFP to:

  • Guarantee the proper execution of the sales contract concluded during purchases made on the Website, ensure the proper management of our commercial relationship and the proper processing of purchases and orders as well as after-sales service;
    If this Personal Data is not transmitted, the order cannot be processed.
  • Receive marketing communications and information about the Website, its products and its offers (newsletters), with the consent or users of the Website;
  • Conduct analytics and statistics to adapt business and marketing activities for the legitimate interest of SFP;
  • Guarantee a good browsing and shopping for users of the Website, in the legitimate interest of SFP;
  • Meet legal and regulatory obligations, including tax, accounting and guarantee obligations.

4. THE RECIPIENTS OF THE DATA

The Data communicated by the customer or by the user of the Website are collected by ORECA and its subsidiaries, in compliance with the legislation applicable to this practice.

These Data may be communicated to:

  • The ORECA company and its subsidiaries;
  • Third-party compagnies, service providers involved in the provision of services at the request of SFP and/or ORECA in order to ensure the proper fulfilment of obligations arising from contracts concluded with its customers (payment, logistical services);
  • Administration and public bodies where there is a legal or regulatory requirement.

Any communication of these Data to a third-party is governed by the conclusion of a contract guaranteeing the protection of the Data communicated and the respect of the rights enjoyed by the users of the Website.

5. TRANSFER OF PERSONAL DATA

SFP keeps Personal Data collected on servers located in the European Economic Area (EEA).

In the event that some of this Data should be communicated outside the European Economic Area, SFP will ensure that these transfers are carried out in strict compliance with General Data Protection Regulation no. 2016/679.

6. WHAT ARE YOUR RIGHTS ON YOUR PERSONNAL DATA?

The customer and user of the Website have, subject to the limits provided for by the regulations in force, the following rights with respect to the processing of your Personal Data:

Right of access

The right of access allows to obtain from SFP the nature of the processing of the Personal Data of the customer or the user of the Website (type of Data, origin of collection, etc.). It also makes possible to request a copy of all this information.

Right of rectification

The right of rectification allows to obtain from SFP, as soon as possible, the correction of the Personal Data of the customer or the user of the Website.

Right of cancellation (or right to be forgotten)

This right allows the customer or the user of the Website to obtain the early deletion of the Personal Data processed by SFP. This right may be exercised subject to the compelling nature of the treatment in question.

In all circumstances, the data of the users are automatically deleted at the end of the retention period stipulated by this Data protection policy.

Right to oppose the processing of Personal Data

This right makes it possible to refuse Data processing or no longer appear in it. This right may be exercised subject to the compelling nature of the treatment in question.

Right to withdrawal of consent

This right allows the customer or the user of the Website to withdraw his content at any time, for the purposes for which SFP has requested his consent authorizing the collection of his Personal Data.

Right to portability of Personal Data

This right allows the customer or the user of the Website to have his Personal Data handed over in a format that can be technically exploited by him or any person of his choice.

For any question relating to this Charter and/or to exercise your rights as described above, you may contact SFP:

  • by email: contactsfp@oreca.fr
  • by post: Stade Français Paris Official Shop chez ORECA STORE – BP706 – 83030 Toulon cedex 9

Each request must be submitted in writing and must be signed and accompanied by a photocopy of an identity document.

SFP undertake to reply within a maximum of 1 (one) month of receipt of your application. If necessary, this period may be extended by 2 (two) months given the complexity and/or the number of requests addressed to SFP. In this case, the customer will be informed of this extension and the reasons for the postponement.

In the event that a customer or a user of the Website considers that his rights have not been respected, he may request the intervention of the CNIL: https://www.cnil.fr/fr/agir

^Top