Personal data policy

Valid from 10/08/2026

INTERSPORT SERVICES offers you a ski and bicycle equipment reservation service via the online site accessible on the Internet at the address https://www.intersport-rent.fr (hereinafter the "Site").

INTERSPORT SERVICES is required to collect and process some of your Personal Data in the context of your use of the Site as a Client, User or Visitor. With a focus on respect for your privacy, INTERSPORT SERVICES has implemented the necessary measures to protect and minimise the Personal Data it collects and processes concerning you.

The purpose of this Policy (hereinafter the "Personal Data Policy") is to inform you about:

• the methods of collection and processing of your Personal Data by INTERSPORT SERVICES;
• the commitments made by INTERSPORT SERVICES to ensure the security of your Personal Data;
• the rights you have over the Personal Data processed through the Site;

1. DEFINITIONS

For the proper understanding of this document, the terms defined below beginning with capital letters and used in the singular as well as in the plural shall have the following meaning: 

“Customer” : means a legal entity or natural person, holder of an Account, registered in France and/or abroad, who uses the Site. 

“Cookie” : means a tracker identified by a name that may be transmitted to your browser by a website to which you connect. It is placed on your Terminal (computer, smartphone, tablet, mobile phone, etc.) while you browse. It makes it possible to obtain information relating to your browsing on our Sites, such as, for example, remembering your customer identifier with an online retailer, the current contents of your shopping basket, or an identifier enabling your browsing to be tracked for statistical or advertising purposes, etc. Your browser will keep it for a certain period and will send it back to the web server each time you reconnect to it; 

“French Data Protection Authority” (hereinafter “CNIL”) : means the independent administrative authority created in 1978. It is the regulator for personal data. It assists professionals with compliance and helps individuals control their Personal Data and exercise their rights; 

“Customer Account” : means the space made available to a Customer on the Sites following registration under the conditions provided for in the General Rental Terms and Conditions (hereinafter the “GRTC”). This Account is strictly personal, individual, non-assignable and non-transferable to a third party. The Account is accessible via the Customer’s personal login details and password and contains all of the Customer’s Personal Data; 

“Personal Data” or “Data of a Personal Nature” or “Data” : means any information relating to an identified or identifiable natural person (hereinafter the “Data Subject”); an “identifiable natural person” is deemed to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to that person’s physical, physiological, genetic, mental, economic, cultural or social identity, within the meaning of Article 4 of the European Regulation on the protection of Data of a Personal Nature; 

For example, data enabling your identification, such as title, surname, first name and email address, are Personal Data. 

“Right of access” : means the right that allows you to know whether your Personal Data are being processed, to obtain communication of them in an understandable format, to check the accuracy of the Data and, where necessary, to have them rectified or erased; 

“Right to erasure” : means the right that allows you to request the deletion of your Personal Data; 

“Right to restriction” : means the right that allows you to request the temporary freezing of the use of some of your Data in specific situations; 

“Right to object” : means the right that allows you to object to your Data being used by an organisation for a specific purpose; 

“Right to portability” : means the right that allows you to retrieve part of your Data in a machine-readable format; 

“Applicable Regulations” : means all existing or future regulations and standards applicable to Users and to the Sites, and in particular the laws and regulations applicable to Internet platforms such as the Sites and concerning the protection of Data of a Personal Nature, including the French Data Protection Act and the European Regulation on the protection of Data of a Personal Nature (hereinafter the “GDPR”); 

“Basket Reminder” : means the personalised sending of an email in order to enable You not to lose the products you have placed in your basket. The Basket Reminder email includes your surname, first name, email address and the products in your basket. 

“Controller” : means the natural or legal person, public authority, service or other body which, alone or jointly with others, determines the purposes and means of the processing; where the purposes and means of such processing are determined by Union law or by the law of a Member State, the Controller may be designated, or the specific criteria for its designation may be provided for, by Union law or by the law of a Member State; 

“Service” : means the services offered to Customers by INTERSPORT SERVICES via the Sites and defined in the GRTC; 

“Terminal” : means the various technical means enabling Users to access the Sites. Terminals may include, in particular, Smartphones, Apple or Android tablets, microcomputers via the internet and any connected/connectable object to another object and to the Internet, without this list being exhaustive; 

“Third Party” : means a natural or legal person, public authority, service or body other than the data subject, the Controller, the processor and persons who, under the direct authority of the Controller or the processor, are authorised to process Data of a Personal Nature; 

“User” : means any natural person of legal age accessing the Sites, on their own behalf and having, in this respect, the capacity and/or authority to enter into contracts through the Sites, whether a simple Visitor or Customer; 

“Visitor” : means any internet user, natural person, carrying out a simple consultation of the Sites by means of a Terminal, without being a Customer. 

2. IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER

This Personal Data Policy binds INTERSPORT SERVICES, a single-member simplified joint-stock company with share capital of EUR 15,244.90, registered office in LONGJUMEAU (91160) – 6 Rue de l’Industrie, R.C.S. EVRY B 322 193 335, and its parent company INTERSPORT FRANCE, a public limited cooperative company of retail traders with variable capital, registered with the EVRY Trade and Companies Register under numbers 964 201 123, whose registered office is located at 2 rue Victor Hugo, 91164 Longjumeau (hereinafter “INTERSPORT SERVICES”). 

You may address any question, request for information or complaint to INTERSPORT SERVICES by referring to Article 11 of this Personal Data Policy. 

3. WHAT PERSONAL DATA IS COLLECTED, AND HOW?

3.1 Data that INTERSPORT SERVICES collects directly from you

INTERSPORT SERVICES mainly collects identification data (last name, first name, email address), which allows it to know who you are in order to better manage the commercial relationship it has with you, or more simply to be able to ensure the management of its website and Client Accounts.

• for the creation of the Client Account, INTERSPORT SERVICES collects the following information: title, last name, first name, email address, password, date of birth, landline and mobile phone number, postal address and nearest store chosen by you;
• for the creation of a loyalty card, INTERSPORT SERVICES assigns you a loyalty card number which is personal to you and collects the same information as for Client Account creation, as well as the data collected subsequently through the use of the card;
• when you give a review on the Site, INTERSPORT SERVICES collects your email address and your level of satisfaction;
• when you look to contact INTERSPORT SERVICES via the "Contacts" form, INTERSPORT SERVICES collects your first name, last name and email address;
• when you contact INTERSPORT SERVICES by telephone, INTERSPORT SERVICES collects identification data (depending on the subject of your call);
• when you reserve an item in store for free, INTERSPORT SERVICES collects your title, first name, last name, email address and telephone number;
• when you decide to contact client service via the tools made available by INTERSPORT SERVICES on the Site, such as the contact form, INTERSPORT SERVICES uses the information you have already provided on the Site, in particular information related to the creation of a Client Account, in order to provide you with personalised service. If you do not wish this, you can click on "log out" before using these tools;
• when placing orders, INTERSPORT SERVICES collects the billing postal address (and delivery address if they are different), your telephone number and information relating to your bank card;
• when subscribing to the Newsletter, INTERSPORT SERVICES collects your email address.

In general, the failure to complete the fields identified by an asterisk (*) prevents you from benefitting from all or part of the Services and functionalities of the Site and your requests may not be taken into account.

The other fields are optional and are intended to improve the quality of the Services offered to you by the Site.

When a form (review, contacts) offers a free field, it is advisable not to enter any personal information and to limit yourself to the information strictly necessary for the processing of your request. Any superfluous information may be deleted by INTERSPORT SERVICES.

3.2 The data that INTERSPORT SERVICES collects automatically through the use of the Services

INTERSPORT SERVICES collects the following information during use of the Services:

• technical data: IP address, internet connection, type of browser, information concerning the Device used;
• data collected using cookies: for more information, see the Cookie Policy.

3.3 The data that INTERSPORT SERVICES collects indirectly

INTERSPORT SERVICES collects the following data from third parties, such as its partners, for commercial prospecting purposes:

• your email address and telephone number;
• your first and last names and addresses.

4. WHY DOES INTERSPORT SERVICES COLLECT AND USE YOUR PERSONAL DATA?

INTERSPORT SERVICES may need to process your Personal Data for various reasons and on several grounds:

5. ACCURACY OF DATA

You declare that you, as a User of the Site or a Client of INTERSPORT SERVICES, are informed of the importance of the accuracy of the Personal Data concerning you that you provide through the Site or as part of your communications with INTERSPORT SERVICES.

Also, you undertake to provide only precise Personal Data to INTERSPORT SERVICES during your communications, when contracting, for requests of the Service and during all usage periods of the Site and to update this Personal Data immediately if one or more details change during the period of use of the Site or of the Contract binding you with INTERSPORT SERVICES.

As such, you can make a request for access and rectification, as well as opposition as provided (among others) in article 10 "YOUR RIGHTS" of this Personal Data Policy.

6. DURATION OF THE CONVERSATION

The Personal Data collected is kept for the time necessary to achieve the purposes described in article 4. of this Personal Data Policy, plus the duration of the legal limitations.

• for connections is kept for the maximum legal period of one (1) year from the date of the connection concerned, including the Shopping Cart Reminder;
• relating to Customers are kept for the duration of the contractual relationship, plus two (2) years for marketing and sales purposes;
• relating to prospects are kept for a period of two (2) years from the last incoming contact with INTERSPORT SERVICES;
• relating to the collection of an opinion are kept for twenty-four (24) months from the collection of the Data;
• relating to accounting documents and vouchers is kept for 10 years, as accounting evidence;
• relating to transactions carried out and means of payment used is kept for a period of one (1) year from the date of issue of the invoice or payment, provided that you have indicated that you want INTERSPORT SERVICES to remember you.

Opinions posted on the Website are kept for a period of five (5) years from the date of publication.

The Personal Data collected is deleted following the occurrence of one of the following events (and subject to compliance with the applicable legal requirements):

• the end of the conservation period;
• exercise of the right of erasure in accordance with the French Data Protection Act and the terms specified in paragraph 10 of this Personal Data Policy;
• INTERSPORT SERVICES stops providing the Site for any reason. Unless there is a specific directive sent by you (provided that this particular directive is reasonable and achievable by INTERSPORT SERVICES), in the event of your death INTERSPORT SERVICES will delete all your Personal Data at the request of an eligible person and on proof of their status as eligible person and of your death, at the end of the applicable retention period and the applicable prescriptions.

These requests may be sent to the contacts indicated in Articles 10 and 11. 

7. RECIPIENT

7.1 The Personal Data collected by INTERSPORT SERVICES may be transmitted:

• to INTERSPORT Group companies, including subsidiaries of INTERSPORT FRANCE or any company that is part of the INTERSPORT FRANCE network or provides a service on behalf of INTERSPORT FRANCE;
• to Third parties in order to ensure the functioning of the Site and the achievement of the purposes as described in article 4 of this Personal Data Policy;
• to technical service providers supplying services that play a role in the achievement of these purposes as described in article 4 of this Personal Data Policy, and in particular the service providers responsible for:
• executing the Services, reservations and orders, and their management and processing;
• payment processing and security measures concerning the transmission of payment Data;
• sending prospecting emails, invitation to register and any other informational email to your destination;
• to INTERSPORT SERVICES subsidiaries or any company forming part of the INTERSPORT SERVICES network or offering a service on behalf of INTERSPORT SERVICES;
• collecting your reviews;

7.2 Our Third-Party partners

If you accept cookies for “Marketing” purposes, third-party social media platforms will have access to your personal data. 

The categories of data transmitted to each social network vary according to the platform and are detailed in our cookie management policy, accessible at the following address: Cookie Use Policy. 

Intersport Services is bound by the practices or privacy policy of these third parties. We therefore encourage you to read the applicable privacy notices, terms of use and related information concerning the use of your personal data in these social media environments. 

Meta - Facebook Ads 

In connection with the use of Meta Business tools, Meta Platforms Ireland Limited and INTERSPORT Services act as joint controllers. 

The essence of the joint controllership agreement is available in the Meta Business Tools Terms (https://www.facebook.com/legal/terms/businesstools) and the Controller Addendum incorporated therein (https://www.facebook.com/legal/controller_addendum). 

All information on how Meta Platforms Ireland Limited processes your personal data, as well as the means made available to you to exercise your rights, is available in the META IRELAND Privacy Policy: https://www.facebook.com/about/privacy. 

Google Ads 

In connection with the use of Google Ads, Google Ireland Limited and INTERSPORT SERVICES act as independent controllers for the personal data they process for their own purposes. 

The processing operations are governed by Google’s Data Protection Terms, available at: https://business.safety.google/controllerterms/. 

All information on how Google processes personal data, as well as the means made available to data subjects to exercise their rights with Google, is available in Google’s Privacy Policy: https://business.safety.google/privacy/ 

Snapchat Ads 

In connection with the use of Snapchat advertising tools, Snap B.V. and INTERSPORT France act as independent controllers for the personal data they process for their own purposes. 

The processing operations are governed by Snap B.V.’s Business Services Terms (https://www.snap.com/terms/business-services) and by Snap B.V.’s Personal Data Processing Agreement (https://snap.com/fr-FR/terms/data-processing-agreement). 

All information on how Snap B.V. processes personal data, as well as the means made available to data subjects to exercise their rights, is available at the following address: https://values.snap.com/privacy/privacy-policy/eea-uk-privacy-notice 

TikTok Ads 

In connection with the use of TikTok advertising tools, Tiktok Technology Limited processes your personal data. Depending on the processing operations implemented, INTERSPORT France and TikTok may act as joint controllers, separate controllers or, where applicable, TikTok may act as processor for INTERSPORT France. 

Information on your processed data may be consulted in the TikTok Privacy Policy available at https://www.tiktok.com/legal/page/eea/privacy-policy/fr 

All information on how Tiktok Technology Limited processes personal data, as well as the means made available to data subjects to exercise their rights, is available in the TikTok Privacy Policy: https://www.tiktok.com/legal/page/eea/privacy-policy/

8. SECURITY OF PERSONAL DATA

INTERSPORT SERVICES implements the appropriate technical and organisational measures to protect your Personal Data against accidental or unlawful destruction, accidental loss, alteration, distribution or unauthorised access of this data.

As such, INTERSPORT SERVICES protects Data by encrypting or encoding it before any transfer, which is itself reinforced by secure data flows.

However, INTERSPORT SERVICES cannot control all the risks associated with the use of the Internet and draws your attention to the existence of possible risks inherent in its use.

INTERSPORT SERVICES also controls the way in which its service providers process your Personal Data, who must present sufficient guarantees with respect to the implementation of appropriate data security measures.

In the event that you identify a security breach affecting the Site, you undertake to communicate the relevant information on this breach to INTERSPORT SERVICES, in a confidential manner.

For management of orders, INTERSPORT SERVICES uses a PCI-DSS certified payment service provider. This standard is an international security standard whose objectives are to ensure the confidentiality and integrity of cardholder data, and thus to secure the protection of card and transaction data.

9. CROSS-BORDER FLOWS OF PERSONAL DATA

As part of the use of the Site, INTERSPORT SERVICES is required to transfer your Personal Data to partners located outside the European Economic Area.

Any transfer of Personal Data outside the European Economic Area complies with the requirements of the applicable Regulations. The categories of processing concerned, the recipient countries and the safeguards implemented are set out in the table below.

10. YOUR RIGHTS

If You do not wish your Personal Data to be transmitted, You may exercise your Rights of access, objection, rectification, restriction and deletion referred to in Article 10.1 of this Personal Data Policy. 

You accept that INTERSPORT FRANCE may also be required to disclose any information concerning you in order to comply with the Applicable Regulations, or to respond to any judicial or administrative request. 

10.1 Right of access, rectification, erasure, limitation, opposition and portability

In accordance with the provisions of Articles 15 to 21 of the European Regulation on the protection of personal data and Articles 38 to 40 of the French Data Protection Act, as a person concerned by the processing of Personal Data, you have a right of access, rectification, erasure and restriction over your Personal Data processed by INTERSPORT SERVICES. 

In addition, for processing based on the legitimate interest of INTERSPORT SERVICES, you have, on grounds relating to your particular situation, the right to object to your Personal Data continuing to be processed. It is understood that you may object at any time and free of charge to the processing of Personal Data where they are processed for prospecting purposes. 

Where the processing of Personal Data carried out by INTERSPORT SERVICES is based on your consent, you may withdraw this consent at any time by sending an email to the following address: Contact | INTERSPORT.

Finally, you have a right to portability over the Personal Data provided by you and processed by INTERSPORT SERVICES. 

These rights are free of charge (except in the case of a manifestly unfounded or excessive request) and may be exercised as follows: 

• by sending an email explaining the subject of your request to the following address: by submitting a request via our GDPR rights request form 

• by sending a letter explaining the subject of your request to the following address: Intersport Services - Legal Department – 2 rue Victor Hugo - BP 500 - 91164 LONGJUMEAU Cedex. 

Any request must be signed and accompanied by a photocopy of an identity document and specify the address to which the reply is expected. A reply will then be sent within one (1) month following receipt of the request, which may be extended by two (2) months taking into account the complexity or number of requests. 

Any request must be signed and accompanied by a photocopy of an identity document and specify the address to which the reply is expected. A reply will then be sent within one (1) month following receipt of the request, which may be extended by two (2) months taking into account the complexity or number of requests.

10.2 Fate of Data in the event of death

In accordance with the provisions of article 40-1 of the Data Protection Act, INTERSPORT SERVICES informs you that, as a natural person:

• You have the right to define guidelines with INTERSPORT SERVICES relating to the storage, erasure and communication of your Personal Data after your death;
• You can modify or revoke said directives with INTERSPORT SERVICES at any time;
• You can designate a person to be in charge of the execution of these directives, who will have power after your death to take note of these directives and to request their implementation by INTERSPORT SERVICES.

You are also informed that in the absence of specific directives transmitted to INTERSPORT SERVICES regarding the fate of your Personal Data, after your death your heirs may exercise the rights relating to the storage, erasure and communication of your Personal Data to the extent necessary for the organisation and settlement of your estate and for INTERSPORT SERVICES to take your death into account.

ARTICLE 11. REQUEST FOR INFORMATION – CONTACT PERSON FOR PERSONAL DATA PROTECTION – COMPLAINTS

11.1. Request for information

As previously stated in Article 10.1, for any request regarding access to, modification, objection, rectification, portability or erasure of your Personal Data, you may use Contact | INTERSPORT.

11.2. Contacting the Data Protection Officer

You can contact our Data Protection Officer (hereinafter the 'DPO') directly as follows:

• by email: DPO Form
• by post:

Intersport Services
Legal Department - For the attention of the DPO
2 rue Victor Hugo
BP 500
91164 LONGJUMEAU Cedex

11.3. Complaints

Furthermore, in accordance with the GDPR, you have the right to lodge a complaint with the CNIL.

For any information relating to personal data protection, you can also consult the CNIL website.

12. MODIFICATIONS

This Personal Data Policy may be subject to updates by INTERSPORT SERVICES which will be posted online. The previous Personal Data Policy will then be replaced as of right by the new version which will be made immediately enforceable on you. Use of the Site is subject to the Personal Data Policy in effect at the time of use.

In order to stay informed of these possible modifications and updates, it is recommended that you regularly consult the Personal Data Policy. Information on updates may be provided by INTERSPORT SERVICES, without this being an obligation, by posting a message on the Site.

13. RESPONSIBILITY

You agree to read the General Terms and Conditions of the Site (hereinafter the "GTC") and other contractual documents agreed with INTERSPORT SERVICES in the context of the use of the Site and the Services, which together with this Personal Data Policy form the contractual basis enforceable on you.

You agree to strictly adhere to the terms of this Personal Data Policy and the Site's GTC when using the Site.

INTERSPORT SERVICES cannot be held responsible in the event of: (i) the use of your data, in particular identification data by a third party, whether through negligence or your fault; (ii) the Personal Data not being correct or not updated by you; (iii) non-compliance with your obligations with regard to the Applicable Regulations, this Personal Data Policy or the GTC and/or other contractual documents which are applicable to you.

Any pecuniary sanction which could be pronounced against INTERSPORT SERVICES will be at your expense, in particular for any decision emanating from a French court, administrative or judicial, or pronounced by an independent administrative authority such as the National Commission nationale de l'informatique et des libertés (CNIL), following a breach on your part of your obligations under this Personal Data Policy.

14. GENERAL

In the event that one of the clauses of this Personal Data Policy is deemed void, in particular due to a change in legislation, Applicable Regulations or by a court decision, this can in no way affect the validity and compliance with the other clauses of the Personal Data Policy.

This Personal Data Policy and the documents to which it refers are governed by French law.