PERSONAL DATA PROTECTION CHARTER

The Personal data protection charter is intended to inform customers and users about how the personal data they provide via the website https://boutique.om.fr/en (the « Website ») is collected, used, and shared.

1. WHAT IS THE IDENTITY OF THE DATA PROCESSING MANAGER?

The processing manager are Olympique de Marseille SASP, Société Anonyme Sportive Professionnelle, au capital de 80.312.362,45 Euros, immatriculée au Registre du Commerce et des Sociétés de Marseille sous le numéro 401 887 401, dont le siège social est situé au Centre d’entraînement Robert Louis-Dreyfus, 33 traverse de la Martine, 13012 Marseille ; (« the Club »)

2. THE NATURE OF THE PERSONAL DATA COLLECTED

As part of the use of the Website, its customers and users will be asked to provide certain Personal Data necessary to provide the products and services requested, in particular during purchases made on the Website, when creating a customer account, when registering for communications or when contacting our customer service.
The Personal Data collected, the legal basis of the processing and their duration are detailed in the table below.
The Club only collects Personal Data that is relevant and necessary for the purposes for which it is processed.
The Club commits itself not to divert these data from the purpose for which they were initially collected.

3. PURPOSES OF PROCESSING

The Personal Data collected on the customer and the user of the Website are the subject of computer processing enabling the Club to :
• Guarantee the proper execution of the sales contract concluded during purchases made on the Website, ensure the proper management of our commercial relationship and the proper processing of purchases and orders as well as after-sales service ;
If this Personal Data is not transmitted, the order cannot be processed.
• Receive marketing communications and information about the Website, its products and its offers (newsletters), with the consent or users of the Website ;
• Conduct analytics and statistics to adapt business and marketing activities for the legitimate interest of the Club ;
• Guarantee a good browsing and shopping for users of the Website, in the legitimate interest of the Club ;
• Meet legal and regulatory obligations, including tax, accounting and guarantee obligations.

4. THE RECIPIENTS OF THE DATA

The Data communicated by the customer or by the user of the Website are collected by the Club and its subsidiaries, in compliance with the legislation applicable to this practice.
These Data may be communicated to :
- ORECA and the subsidiaries of ORECA ;
- Third-party compagnies, service providers involved in the provision of services at the request of the Club in order to ensure the proper fulfilment of obligations arising from contracts concluded with its customers (payment, logistical services) ;
- Administration and public bodies where there is a legal or regulatory requirement.
Any communication of these Data to a third-party is governed by the conclusion of a contract guaranteeing the protection of the Data communicated and the respect of the rights enjoyed by the users of the Website.

5. TRANSFER OF PERSONAL DATA

The Club keeps Personal Data collected on servers located in the European Economic Area (EEA).
In the event that some of this Data should be communicated outside the European Economic Area, the Club will ensure that these transfers are carried out in strict compliance with General Data Protection Regulation no. 2016/679.

6. WHAT ARE YOUR RIGHTS ON YOUR PERSONNAL DATA ?

The customer and user of the Website have, subject to the limits provided for by the regulations in force, the following rights with respect to the processing of your Personal Data :

• Right of access

The right of access allows to obtain from the Club the nature of the processing of the Personal Data of the customer or the user of the Website (type of Data, origin of collection, etc.). It also makes possible to request a copy of all this information.

• Right of rectification

The right of rectification allows to obtain from the Club, as soon as possible, the correction of the Personal Data of the customer or the user of the Website.

• Right of cancellation (or right to be forgotten)

This right allows the customer or the user of the Website to obtain the early deletion of the Personal Data processed by the Club. This right may be exercised subject to the compelling nature of the treatment in question.
In all circumstances, the data of the users are automatically deleted at the end of the retention period stipulated by this Data protection policy.

• Right to oppose the processing of Personal Data

This right makes it possible to refuse Data processing or no longer appear in it. This right may be exercised subject to the compelling nature of the treatment in question.

• Right to withdrawal of consent

This right allows the customer or the user of the Website to withdraw his content at any time, for the purposes for which the Club has requested his consent authorizing the collection of his Personal Data.

• Right to portability of Personal Data

This right allows the customer or the user of the Website to have his Personal Data handed over in a format that can be technically exploited by him or any person of his choice.

For any question relating to this Charter and/or to exercise your rights as described above, you may contact the Club:

• by email : [email protected]
• by mail : SASP OLYMPIQUE DE MARSEILLE - Service Juridique - 33 Traverse de la Martine 13012 Marseille, France

Each request must be submitted in writing and must be signed and accompanied by a photocopy of an identity document.
The Club undertake to reply within a maximum of 1 (one) month of receipt of your application. If necessary, this period may be extended by 2 (two) months given the complexity and/or the number of requests addressed to the Club. In this case, the customer will be informed of this extension and the reasons for the postponement.
In the event that a customer or a user of the Website considers that his rights have not been respected, hem ay request the intervention of the CNIL : https://www.cnil.fr/fr/agir

7. MODIFICATION OF THE PERSONAL DATE PROTECTION CHARTER

The Club may occasionally modify the Charter of personal data protection, in order to comply with regulatory, jurisprudential, editorial or technical developments.
If applicable, the "last update" date will be changed to indicate the date the changes were made.
When necessary, customers and users will be informed and/or asked for their consent.
The Club advises to regularly consult this page in order to be aware of any changes or updates to the Privacy Policy.