What we do with your data, said plainly and in full. One principle guides all of it: we collect only what is needed to deliver your order and to comply with the law, and nothing beyond that.
This English text is a translation provided for convenience. The French version of this page is the one that applies, and where the two differ the French text prevails.
01 Who is responsible
The data controller is SARL DESTOCKSPORTS, reachable at [email protected] for any question about personal data.
02 What we collect, and what we do not
When you place an order, we collect only this: surname, first name, delivery address, email address, telephone number (optional, for the delivery) and the order history.
What we do not collect:
- no bank card data passes through our servers, as payment is handled by our payment provider;
- no advertising trackers, no sale of data, no profiling. The only measurement we carry out is where your visit came from, which is optional and requires your agreement.
Orders are placed as a guest, without an account. You can create one if you want to, from the My account page: it adds a username, an encrypted password, your saved addresses and your order history. It is never compulsory, and you can ask for it to be deleted at any time.
We ask for the minimum needed to deliver to you. No compulsory account, no card number held by us, no advertising that follows you around.
03 Why, and on what legal basis
| Purpose | Legal basis | Data concerned |
|---|---|---|
| Processing and delivering your order | Performance of the contract | Identity, address, email, telephone |
| Invoicing and accounting obligations | Legal obligation | Identity, address, order details |
| Answering your requests (after-sales, guarantees, withdrawal) | Performance of the contract | Email, order history |
| Preventing payment fraud | Legitimate interest | Order data (through the payment provider) |
| Newsletter, if you sign up for it | Consent (double opt-in), withdrawable at any time |
04 Who has access to your data
Your data is accessible only to the people and providers strictly required:
- Automattic Inc. (WooPayments) and Stripe: payment processing. Card data never passes through our servers.
- netcup GmbH (Karlsruhe, Germany): hosting of the site and of the order database, within the European Union.
- Cloudflare, Inc.: delivery and protection of the site; processes visitors’ IP addresses in order to filter attacks.
- Defiant, Inc. (Wordfence): site security; logs IP addresses where an intrusion is attempted.
- DHL: the carrier handling delivery; receives the name and the delivery address.
No data is sold or rented to third parties.
05 How long we keep it
| Data | Retention | Why |
|---|---|---|
| Order data and customer relationship data | 3 years after the last order | Customer follow-up, legal guarantees |
| Customer account, if you create one | For as long as the account exists, until you ask for its deletion | Finding your orders and your addresses again |
| Invoices and accounting records | 10 years | Legal accounting obligation |
| Newsletter email address | Until consent is withdrawn, and at most 3 years after the last contact | Marketing rules |
06 Your rights
Under the GDPR and the French Data Protection Act, you have the right of access, rectification, erasure, objection, portability and restriction of the processing of your data, as well as the right to set instructions on what becomes of it after your death.
To exercise those rights, write to [email protected]. We answer within one month at the latest. If you consider that your rights are not being respected, you can refer the matter to the CNIL, the French data protection authority (cnil.fr).
Your data stays yours. One email is enough to see it, correct it or have it deleted, and the CNIL is there if we do not do our job.
07 Security
The site is served over HTTPS. Access to data is restricted and protected, hosting is located within the European Union, and payment is entrusted to a PCI DSS certified provider with strong authentication (SCA). In the event of a data breach likely to create a risk to your rights, we will notify the CNIL and the people concerned as the law requires.
08 Cookies
The site uses cookies that are strictly necessary to run it (basket, order session, securing payment) and a single optional tracker, which requires your agreement: the measurement of where your visit came from. Nothing optional is stored before you have answered the banner, and you can change your answer at any time. The detail, cookie by cookie, is on the Cookies page.
A question about your data, a request for access or for deletion: this is where it happens. Write to [email protected] and a person will answer you within 24 working hours.