PRIVACY NOTICE

When we say “Decathlon” (“we”, “us” or “our”) in this privacy notice, we are referring to Decathlon Sports Ireland Limited and its holding company Decathlon S.E. based in France. We process personal data in a manner that respects individuals' privacy rights and complies with legal obligations. This notice reflects our data protection and privacy policy and displays our compliance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018.

This Privacy Notice is structured as follows:

• It explains the categories of personal data we collect.
• How we receive such data and how long we keep it for.
• The ways in which we use your personal data.
• It tells you about possible international transfers, and safeguards.
• It explains the rights you may have, how to exercise them.
• And it tells you how to make a complaint.

This Privacy Notice supplements other privacy notices and policies, which we, from time to time, may make available to you, and is not intended to override them. We have a separate Cookie Notice which you can find here Cookie Policy. We regularly review this Notice and any changes made will be posted on our website.

Your data is yours! We are transparent about the personal data we process! You can find information about the processing relating to your personal data in this notice, along with where, when, how, and why we process your data, and what your rights are.

Unless otherwise stated below,
Decathlon Sports Ireland Limited
St Margaret's Road, Ballymun, Dublin 11, D11 X2NC, Ireland
Company Number: 589659

is the 'controller' of your personal data. This means that we are responsible, under data protection laws, for deciding the purposes and means for which we process your personal data.

This policy applies to all physical locations and online sites operated by Decathlon, including but not limited to our stores and websites. It applies to all employees, contractors, online and in-person visitors, customers and prospective customers, and anyone whose personal data we process.

We may collect, use, store and transfer different kinds of personal data about you, which we have grouped together as follows:

Category	Details
Identity Data	Your first name, surname, username or similar identifier like social media handle, date of birth, gender, CCTV, photos, audio and video
Contact Data	Your billing address, delivery address, email address and telephone number
Financial Data	Your bank account and payment card details
Transaction Data	Details about payments to and from you and other details of products and services you have purchased from us, including your tracking number, customer ID number, order amount and order frequency, transaction ID, basket number, details of the products ordered and the date of the purchase
Technical Data	Your internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, device type and identifier, operating system and platform, and other technology on the devices you use to access the website
Profile Data	Your Decathlon account details, such as your Decathlon membership account number, username and password, purchases or orders made by you, your interests, preferences, reviews, feedback and survey responses, as well as information contained in your communications with us.
Usage Data	Information about how you use our website, products and services, including your navigation activity when connected to our in-store free Wi-Fi.
Marketing and Communications Data	Your preferences in receiving marketing from us and our third parties, your communication preferences, as well as your interaction with our marketing communications if you have provided consent through our cookie framework.
Recruitment Data	Information contained in your job application, CV, record of interview, copies of right to work documentation, copy of your passport or other identification, work history, references, and any other personal data included in a cover letter, communications, or provided as part of the application and selection process.
Physical Measurements Data	Your measurements such as foot measurements.
Special Category Data	Your data relating to your state of health, which we may collect where absolutely necessary.

Important: Our website is not intended for children, and we do not knowingly collect and/or process children's data.

We may collect your personal data through:

Direct Interactions	You may give us your personal data through various means, including when you create and manage a user account with us, purchase our products or services, participate in our events, complete surveys, submit reviews via our website, apply for a job with us, visit us in store or communicate with us by post, telephone, email, social media or any other means.
Automated technologies or interactions	We may collect your personal data as you browse and interact with our website through the use of cookies and other similar technologies. For more information please see our Cookie Notice here Cookie Policy.
Third-party sources	We may receive personal data about you from third parties, such as social media platforms (e.g. for social login), analytics providers in respect of your visits to and use of our website, and providers of payment services you choose to use when purchasing our products.

There are some circumstances where we need to collect personal data by law, or under our Terms and Conditions. If you do not provide that personal data when requested, you may not be able to purchase products from us.

We process your personal data to manage your purchase (we may need your delivery address or invoicing address, for example) and to avoid fraudulent transactions (to prevent purchases made with a stolen bank card, for example). We also process the data linked to your means of payment! Want to know more? In this Notice you will find a case-by-case explanation of how we process your personal data. Where we process your personal data on the basis of our or a third-party’s legitimate interest we will ensure that this legitimate interest does not outweigh your interests or fundamental rights and freedoms.

SHOPPING: WEBSITE AND STORE

Purpose	Type of Data	Legal Basis	Data Recipients
To enable you to place orders online or make purchases and use our services in store.	Identity Data Contact Data Transaction Data	Performance of our contract with you. Our legitimate interest in carrying out our business, operating our retail store and online retail platform, facilitating and fulfilling customers' orders and providing a good purchase experience.	Other Decathlon entities. Service providers supporting operational functions such as delivery, as well as IT, web hosting, and other technical service providers.
To process the delivery and, where necessary, the return of your purchased items.	Identity Data Contact Data Transaction Data	Performance of our contract with you.	Other Decathlon entities. Service providers supporting operational functions such as delivery
To notify you of the progress of your order (e.g. order confirmation, dispatch notification, digital receipts).	Contact Data Transaction Data	Performance of our contract with you.	IT providers and Service providers supporting operational functions
To allow linking of your purchases to your Decathlon user account.	Transaction Data Profile Data	Our legitimate interest in providing account functionality and purchase history tracking for user benefit.	IT providers
To provide fitting services for shoes with our In-Store Foot Scanner or for bicycle and other similar purchases.	Physical Measurements Data	Consent.	IT providers and Service providers supporting operational functions
To enable you to avail of the Cycle to Work Scheme.	Identity Data (and your employer's name) Contact Data	Performance of our contract with you.	IT providers

SHOPPING: BUYBACK

Purpose	Type of Data	Legal Basis	Recipients
To buy sport products from you as part of the BUYBACK programme.	Identity Data Contact Data Financial Data	Performance of our contract with you.	Payment service providers, IT service providers
To protect us against buying back stolen items.	TBC	Our legitimate interest in fraud prevention.	Public authorities including law enforcement, should they make a request for it.

SHOPPING: WORKSHOP

Purpose	Type of Data	Legal Basis	Recipients
To provide workshop services and to contact you with updates regarding the status of the services you have requested.	Identity Data Contact Data Financial Data Transaction Data	Performance of our contract with you.	Payment service providers, IT service providers

PREVENTION OF FRAUDULENT PAYMENTS

Purpose	Type of Data	Legal Basis	Recipients
To conduct checks prior to your online order being placed with us to protect us against fraudulent online payments.	Contact Data Financial Data Transaction Data	Our legitimate interest for identifying and preventing fraud and to comply with any legal obligation	Payment service providers, IT service providers and other professional service providers. Public authorities including law enforcement, should they make a request for it.

When you place an order, we may carry out profiling or decision-making, which may be done in a fully automated manner. These checks are necessary for the conclusion of our contract (the order) and prevention of fraud.

PAYMENTS ONLINE OR VIA THE STORE

Purpose	Type of Data	Legal Basis	Recipients
To process your payment, manage your invoice, process refunds and prevent bad cheques.	Identity Data Contact Data Financial Data Transaction Data	Performance of our contract with you Our legitimate interests in preventing fraudulent payments.	Payment processors, cash collection service providers, IT service providers and other professional service providers.

MARKETPLACE, RENTAL AND OTHER SERVICES/INITIATIVES

Purpose	Type of Data	Legal Basis	Recipients
To provide you with rental services.	Identity Data Contact Data Financial Data Transaction Data Profile Data	Performance of our contract with you.	Payment service providers
As part of the Marketplace Service, to enable you to place orders online or make purchases and use our services in store.	Identity Data Contact Data Financial Data Transaction Data	Performance of our contract with you (or to help you enter into a contract with us or with Marketplace Service Sellers) Our legitimate interests in carrying out our business, operating our retail store and online retail platform, facilitating and fulfilling customers' orders and providing a good purchase experience.	Third-parties ("Sellers") who provide Marketplace Services, payment services, IT service providers and other professional service providers. Public authorities including law enforcement, should they make a request for it.
To provide you with sports facilities (such as pitch booking) to support you in your sports activities.	Identity Data Contact Data Profile Data	Performance of our contract with you	IT service providers Payment service providers
To manage your participation in the Membership Programme.	Identity Data Contact Data Transaction Data	Performance of our contract with you	Other Decathlon entities Customer service providers IT service providers
To manage the appointments you booked with us for shopping in our store or for our repair, maintenance and personalisation service.	Identity Data Contact Data	Performance of our contract with you	Product technicians
To notify you when a product you're interested in is back in stock.	Contact Data	Performance of our contract with you	IT service providers
To provide you with our newsletter.	Contact Data	Based on your consent	IT service providers Marketing agencies

SOCIAL LOGIN

Purpose	Type of Data	Legal Basis	Recipients
To enable you to create a Decathlon account via the "Social Login" function.	Identity Data Contact Data	Consent	Your social network

To use this feature, you must have an account on a social network (Facebook, Apple ID, Google, etc.) and authorize the latter to share your information with Decathlon. By using this feature, you authorize Decathlon to retrieve certain information about you from your social network.
Decathlon will never have access to your discussions, preferences, friend lists, etc. Although Decathlon undertakes not to retrieve any information that it deems unnecessary, we recommend that you configure your social network account to limit the volume of data that can be shared with Decathlon, to what is strictly necessary.

GIFT CARDS

Purpose	Type of Data	Legal Basis	Recipients
To manage your gift card order	Identity Data Contact Data Financial Data Transaction Data	Performance of our contract with you.	IT service providers
To provide you with your gift card	Identity Data Contact Data	Our legitimate interest in fulfilling the gift card delivery	IT service providers

If you provide us with the recipient's personal data (such as their name and/or email address to send a gift card), you confirm that you have the right to do so. We will use this information only to fulfil the gift card delivery and will inform the recipient about how we process their data.

MANAGEMENT OF YOUR DECATHLON ACCOUNT

Purpose	Type of Data	Legal Basis	Recipients
To manage your access, authentication and personalisation of your user account.	Identity Data Contact Data Transaction Data Profile Data	Based on our legitimate interests in carrying out our business and enabling our customers to create and manage personalised user accounts.	Other Decathlon entities and third parties such as IT service providers and other professional service providers. If you choose to connect other apps and services (such as fitness apps) to your account, we may exchange your personal data with these service providers.

Your DECATHLON account has a dashboard enabling you to keep useful and important information together in one place. For instance, your DECATHLON account offers you the possibility of tracking the status of your order, viewing your purchasing history and even finding your receipts! By logging into your account, you can check your security, and manage some of your personal data preferences. For example, you can tell us if you want to receive our communications (sporting advice, special offers, email marketing etc.). By default, you will receive membership communications from us (such as points balance, vouchers expiring, etc) related to your account. You can change this preference via the 'My Communication Choices' section of your user account at any time. And you can delete your Account whenever you wish by accessing "Privacy and Security" and select Delete Account.

MANAGEMENT OF DIRECT MARKETING

Purpose	Type of Data	Legal Basis	Recipients
To manage our direct marketing activities.	Identity Data Contact Data Transaction Data Profile Data Marketing and Communications Data	Based on your consent	Marketing agencies, Advertising Partners, IT service providers and other professional service providers.

We send you messages tailored to you such as advice concerning the sports you take part in, products tailored to your interests, special offers right up your street and events you might be interested in, etc. You can withdraw your consent to receive marketing emails from us whenever you wish by using the 'unsubscribe' link in our marketing emails, contacting us using the contact details set out below or via the 'My Communication Choices' section of your user account.
As part of our management of direct marketing, we may carry out profiling or decision-making, which may be done in a fully automated manner. Such processing will only take place after we have obtained your consent.

SAFETY RECALLS

Purpose	Type of Data	Legal basis	Recipients
To contact you in the event of a safety recall in connection with a product you have purchased from us.	Identity Data Contact Data Transaction Data	Our legitimate interest in protecting our customers. Performance of our contract with you. To comply with our legal obligations.	Other Decathlon entities (DECATHLON SE) Customer Service Providers

At DECATHLON, safety is our number one priority. We develop our products in compliance with the standards and regulations in force. However, we know that zero risk does not exist. In the event of a defect in one of our products, we want to be able to contact you quickly and personally. To do this, we may use your contact details (telephone, email or post). For the purpose of safety recalls, DECATHLON SE, 4 boulevard de Mons in Villeneuve d'Ascq, 59650 France act as an independent controller.

ANALYTICS AND ADVERTISING

Purpose	Type of Data	Legal Basis	Recipients
To assess and improve our website and services, to personalise your user experience and to include ads on other websites and apps (such as social media).	Transaction Data Technical Data Usage Data	Based on your consent to cookies and similar technologies.	Other Decathlon entities and marketing agencies, advertising partners and analytics companies (e.g. Effinity).
Targeted advertising and custom audiences on third party platforms	Identity Data Contact Data Transaction Data Technical Data (hashed prior to transfer)	Based on your consent	Social media and other third party advertising platforms (e.g. Facebook, TikTok). The transmitted data is retained as per each third party platform’s privacy policy.

We use data analytics to improve our website, products and customer relationships based on your consent to our non-essential cookies and other similar tracking technologies. We also process aggregated technical data to understand website traffic patterns. For more information on our use of cookies and other similar technologies please see our Cookie Policy.

As part of our management of advertising, we may carry out profiling or decision-making, which may be done in a fully automated manner. We also use “lookalike” audiences and retargeting tools to show you relevant advertisements on third party platforms (namely META platforms (Facebook and Instagram), Google Services (including Google Search, YouTube and Google Display Network via DV360), TikTok, Snapchat, Broadcast Video on Demand and our digital advertising partners).

A similar (lookalike) audience uses customer data to build a profile of similar users. We use “hashing” (pseudonymisation) of your data. This means we do not send your plain-text email address but only a coded version of it, which these third party platforms match to their own records to see if there is a match. If there is, they will show you relevant sports and offers rather than generic advertising unrelated to your interests.

CONTACTING CUSTOMER SERVICE AND LEGAL CORRESPONDENCE

Purpose	Type of Data	Legal basis	Recipients
To manage and respond to your communications to us.	Identity Data Contact Data Voice recordings and/or call transcriptions Transaction Data Profile Data Special Category Data (if contained in your communication)	Based on our legitimate interest in resolving your queries, fulfilling a contract with you, gauging customer satisfaction and defending or pursuing legal proceedings. When we process special category data we may do so to protect your vital interests or for the establishment, exercise or defence of legal claims.	Other Decathlon entities, our IT service provider and other professional service providers.

Passionate as we are, unexpected situations can occur: an error in your order, a delivery delay, a fault in a product, etc. Our customer service centre is at your disposal to help you at such times and ensure you obtain the satisfaction you are entitled to expect. You can contact us in different ways such as by email, telephone or via our social media pages.

CCTV

Purpose	Type of data	Legal basis	Recipients
To protect our premises, property and goods from crime and damage and to ensure the health and safety of staff and visitors.	Identity Data	Based on our legitimate interest	Technical outsourcers responsible for hosting the data and other outsourcers (e.g. security, insurance, or external legal firms) who may access your data for purposes such as security, legal disputes or claims.
To assist in the detection, prevention, investigation of crime	Identity Data	To comply with our legal obligations (e.g., assisting An Garda Síochána)	Law enforcement bodies who may request access to your data.
To support the investigation of potentially serious disciplinary matters and provide evidence in legal disputes or claims.	Identity Data	Based on our legitimate interests and to comply with legal obligations	Our insurers, legal advisors, technical experts, and if appropriate, law enforcement bodies who may request access to your data.

SPORTING EVENTS ORGANISED BY YOUR STORE

Purpose	Type of data	Legal bases	Recipients
To manage sporting events organised by our store.	Identity Data Contact Data Profile Data	Performance of our contract with you Our legitimate interest in processing participant data	Technical outsourcers responsible for hosting the data
Training and/or promotional purposes.	Identity Data	Based on your consent	Technical outsourcers responsible for hosting the data.

IN-STORE FREE WI-FI

Purpose	Type of Data	Legal basis	Recipients
To provide you with free WIFI access in our stores	Identity Data Contact Data Technical Data Usage Data	Based on your consent	Technical outsourcers responsible for hosting the data and other IT service providers
To ensure information security	Identity Data Contact Data Technical Data Usage Data	Our legitimate interest in safeguarding our networks	Technical outsourcers responsible for hosting the data and other IT service providers
To support regulatory requirements where applicable	Identity Data Contact Data Technical Data Usage Data	To comply with any legal obligation	Public authorities including law enforcement, should they make a request for it.

JOB APPLICATIONS

Purpose	Type of Data	Legal basis	Recipients
To respond to your application and manage our recruitment and selection process	Identity Data Contact Data Recruitment Data	To take steps, at your request, prior to entering into a contract with you Our legitimate interests in assessing the suitability of candidates	IT service providers Other Decathlon entities

In some circumstances, it may be necessary for us to process or transfer your personal data outside the European Economic Area (EEA) for the purposes described in this privacy notice. Rest assured, such transfers are carried out very carefully.

Why do we transfer your data? The transfer of your data outside the European Economic Area (EEA) is chiefly explained by the location of other DECATHLON entities worldwide and of our service providers. To offer you a high-quality service, we outsource certain operations to specialised service providers (e.g. web hosting). Some of these service providers are established outside the EEA.

How are these data transfers governed? We comply with applicable data protection law when transferring your personal data outside of the EEA, such as by ensuring that the country or territory where your personal data will be processed is deemed, by the European Commission, to have an adequate level of protection for personal data. If no such adequacy decision is in place, we have measures in place (standard contractual clauses approved by the European Commission, for example) to ensure that your personal data receives an adequate level of protection.

Our website and mobile app may include links to third-party websites, plug-ins and apps. You should read the privacy notices of those third-party sites to obtain information about how your personal data is processed by them. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third parties and are not responsible for their privacy statements.

Similarly, if you use any third-party websites, apps or services to access our services, your usage is subject to the relevant third-party’s terms and conditions, privacy policy and cookie policy.

We keep your personal data for no longer than is necessary, based on the purposes set out in this notice and for the purposes of complying with any legal or regulatory requirements, or in order for us to establish, exercise or defend our legal rights.

When determining the appropriate period to retain personal data, we consider various factors, including relevant regulatory guidance, specific legal or regulatory obligations and applicable statutory limitation periods.

In general, your data will be deleted 3 years after our last contact with you. CCTV Data is retained for 28 days, unless we need to retain it for a longer period for a specific reason. In some circumstances, we will anonymise your personal data for research and statistical purposes

We implement a range of appropriate technical and organisational measures to ensure the security of personal data and to protect it against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures are designed in accordance with the principles of data protection by design and by default, and are regularly reviewed to ensure they remain effective.

They include access controls, encryption, secure storage systems, staff training, and internal policies that promote data minimisation and accountability. Our approach takes into account the nature, scope, context and purposes of processing, as well as the risks to individuals’ rights and freedoms, and demonstrates our commitment to data protection.

You have a number of rights. Some apply to all data processing concerning you, while others depend on the lawful basis on which the personal data is processed for (contract, legal obligation, consent, legitimate interest, etc.).

• Right of access:You have the right to access your personal data, together with information about our processing of that personal data.
• Right of rectification:You can request to have any incomplete or inaccurate personal data corrected.
• Right to object:You have the right to object to the use of your Personal Data or the way in which it is processed where we have determined it to be necessary for the purposes of our legitimate interests.
• Right to erasure:This is the right to be forgotten, applicable under certain conditions.
• Right to portability:In some circumstances you have the right to have your personal data ported.
• Right of restriction:This right entitles you to request that we suspend processing of your personal data under certain conditions.
• Right to withdraw your consent:If you provided your consent for a specific purpose, you have the right to withdraw your consent at any time.
• Right not to be subject to automated decision making and profiling:This applies where a decision is based solely on automated processing.

You can exercise your rights by contacting us in one of the following ways:
By email: [email protected]
By post: “Decathlon – Personal Data Protection, St. Margaret's Road, Ballymun, Dublin 11, D11 X2NC”.

To ensure your request is processed efficiently, please include:
The type(s) of processing your request pertains to
The right(s) you wish to exercise
A copy of your ID for security purposes

We aim to respond to all legitimate requests within one month. In complex cases, we may take longer to complete your request but we will keep you updated.

Our Contact Information (Data Controller)Decathlon Sports Ireland Limited
St Margaret's Road, Ballymun, Dublin 11, D11 X2NC, Ireland

Our Data Protection Officer:

If you have any questions or concerns regarding this notice or our handling of your personal information, you may contact our Data Protection Officer (DPO) at:

By email: [email protected]
By post: "Decathlon - Data Protection Officer, St. Margaret's Road, Ballymun, Dublin 11, DX11 X2NC"

Our Supervisory Authority

You have the right to lodge a complaint with any Supervisory Authority:

Name:Data Protection Commission
Address:6 Pembroke Row, Dublin 2, D02 X963, Ireland
Online:https://www.dataprotection.ie/en/contact/how-contact-us

This policy is reviewed annually or upon significant changes in legislation, technology, or operational use. Version control and revision history are maintained.

Version	Date	Comments
1.0	April 2022	Initial draft policy
2.0	October 2024	Style updated
3.0	July 2025	Updated DPC postal address
4.0	October 2025	Annual review. Revision of layout for improved transparency. Separation of Cookie Notice into a separate document.
5.0	March 2026	Updated the Analytics and Advertising section.