Privacy Notice
valid as of 2 October 2019
- What does this Privacy Notice tell you?
- Who are the adidas Data Controllers?
- Who is the Data Protection Officer for the adidas Data Controllers?
- What Personal Data does adidas collect and use (Categories of Personal Data)?
- What does adidas do with your Personal Data and why (Purpose, Processing, Legal Basis)?
- What does adidas do when we transfer your Personal Data outside of the EU/EEA?
- How do we secure your Personal Data?
- What are your rights and how can you exercise them?
- Questions, Complaints, and Support – who and how you can get in touch with them?
- Updates and Notification of Updates
- adidas Data Recipients
- Reebok
1. What does this Privacy Notice tell you?
This Privacy Notice tells you how we collect and process the information from which you can be identified directly or indirectly (“Personal Data”) while you browse this website as well as when you interact with our different platforms, portals and applications using your Personal Data, including the adidas app.
This Privacy Notice provides information on:
- adidas Data Controllers;
- Data Protection Officer;
- the different types of Personal Data we use (“Categories of Personal Data”)
- why and how we use your Personal Data (“Purpose”; “Processing”; “Lawful basis”);
- how long your Personal Data is kept (“Retention period”);
- other recipients of your Personal Data (“Recipients”);
- transferring your Personal Data out of the country (“International Data Transfer”);
- your rights under applicable local law (including the EU General Data Protection Regulation (“GDPR”) where applicable); and
- any automated decision-making technologies used by us and how it works (where necessary).
2. Who are the adidas Data Controllers?
These are the adidas Data Controllers responsible for protecting your Personal Data and complying with GDPR and national legislation governing the use of your Personal Data. They jointly determine how your Personal Data is used by adidas for the purposes identified in the adidas Privacy Notice (“Joint Controllers”).
- adidas AG - Adi-Dassler Str. 1, 91074 Herzogenaurach, Germany (”adidas AG”)
- adidas Business Services GmbH - Adi-Dassler Str. 1, 91074 Herzogenaurach, Germany
- Local Selling Entity
For the purposes of
- Sales of adidas products – online and off-line order
- Product research and development
the legal entities identified below form Joint Controllers:
- adidas AG
- adidas International Trading AG - Platz 1b, 6039 Root D4, Switzerland
- Local Selling Entity
3. Who is the Data Protection Officer for the adidas Data Controllers?
Global Privacy | Data Protection Officer
adidas AG
Adi-Dassler-Straße 1
91074 Herzogenaurach
Germany
4. What Personal Data does adidas collect and use (Categories of Personal Data)?
These are the categories of Personal Data we collect directly or indirectly from you:
|
§ Identity information – includes: name [first, last, initials], Date of Birth, e-mail address, unique consumer identifier number (including your Creators Club membership number), nickname, password, social media identifiers and information passed along to us via your Facebook or Runtastic account, your device fingerprint, and gift card codes that are assigned to you. We use it to verify your identity.
|
|
§ Contact information - includes: your phone number, shipping and billing address, e-mail address, Messenger ID, social media handle, any other communication channel you have used to contact us for more information. We use it to contact you for different reasons depending on the purposes stated below.
|
|
§ Location information - includes: your residential location, current log-in location [IP address], GPS location (if you wish to share us, for example through your mobile device settings), or the specific adidas site you have visited that might give us clues about where you are. We use it to help you find what you are looking for at your current location.
|
|
§ Size information - includes: shoe size, clothes size, height, weight, chest, waist, hip, inseam, body shape, heel-toe measurement. We use it to make sure your gear fits.
|
|
§ Purchase information - includes: your payment information (credit card number), payment risk profile (provided to us by our payment risk solution), shopping cart (your ordered items), delivery details, shipping and billing address, customer order number, purchase history with adidas, transaction ID, and any other information related to your purchase. We use it to complete your order on adidas sites and apps, in adidas stores, or other selling platforms.
|
|
§ Behavioural and Profile information- includes: your shopping history, Wishlist items, your browsing behaviour, your browsing preferences, your shopping preferences, in-store interactions, your workout history, product reviews, social media interactions with us, and any other intelligence we have about you to help us learn you as a consumer better, including “Community information”. We use it to know you better as a consumer, so we can send you marketing messages containing only products and services that we think you might be interested in.
|
|
§ Community information – includes: information provided by you when you participate various adidas events and communities either as a trainer, team member, a participant or as a promotor of our events, including for example: pictures, videos, your nickname, your team, your interests and preferences, your feedback, leader boards, event participation, joined groups, and registration details. We use this information to organise the events and communities, and to know more about you as a consumer.
|
|
§ Social Media information – includes: information obtained through your interaction with us on various social media channels such as Facebook, Instagram, Google, etc., including: any social media information that is publicly available such as your social media handles, social media interactions and public postings, your “Likes” and other reactions, your social media connections, your photos that are public, or those you send to us by mentioning us or following our social media posts by using “handles” or “hashtags”. We obtain this information from the social media network (e.g. Facebook, Snapchat, Instagram, etc.) directly or indirectly through third-party agencies we have agreements with.
|
|
§ Device information – includes: Information about your device or browser that give us an idea about your browsing behaviour or device usage. Your device information is collected by our app, and your browser information is collected by our cookies, tags, and pixels. This is often required for network security purposes. This includes, but not limited to: IP address, date and time of the visit, how long you remained on our website, the referral URL (if you came to our site via a different site or an advertisement), the pages visited on our site, your browser type, device type, versions, operating system.
|
|
§ Activity information - includes: fitness data (for example workout start and end times, activity type, sports category), sensor data (for example step goal, duration, pace, distance, calories, heartbeat, RunScore and speed), and other data related to your fitness app. We use it to help you improve your performance goals and improve your user experiences and identify what products might be best for you based on your exercise patterns. |
|
|
|
§ Correspondence – includes: conversation we have when you contact customer service, the emails you write us about our products or services, the complaints you address to us via post, e-mail, fax, or call, notes we prepared on your feedback, call back from our Customer Service to you, and any other communication between you and adidas personnel. We record all Customer Service calls for quality assurance purposes.
|
|
§ Preference information - includes: preferred language, log-in location, Wishlist items, preferred shipping address, browsing preferences, our correspondence with you, your adidas product reviews. We use it to give you convenience when you visit and/or shop on our sites and apps.
§ Creators Club information – includes: Unique Member Identifier (member ID), date you became a member, store ID (if you signed up in a retail store), source ID, country and brand of your original membership, membership points, engagement history, rewards history, membership vouchers associated to members. All the information the listed here will be kept for as long as you are a Creators Club member. |
5. What does adidas do with your Personal Data and why (Purpose, Processing, Legal Basis)?
adidas collects and uses your Personal Data for various purposes.
|
Purpose |
Legal Basis |
I. Site (Adidas Domain) Operation And App Operation |
Legitimate Interest |
II. Domain And Network Security And User Authentication |
Legitimate Interest |
III. Global Credential To All Adidas Platforms – User Experience |
Legitimate Interest |
IV. Sales Of Adidas Products - Online And Off-Line Order |
Performance of Contract |
V. Payment Fraud Detection |
Performance of Contract |
VI. Product Delivery |
Performance of Contract |
VII. Electronic Delivery Tracking |
Consent |
VIII. Business Operational Analytics |
Legitimate Interest |
IX. Customer Service |
Legitimate Interest |
X. Personalised Marketing Messages Via Email (Newsletter Sign-Up) |
Consent |
XI. Personalised Marketing Messages Via Email (Via Existing Contract) |
Legitimate interest |
XII. Targeted Messages On 3rd-Party Advertising Platforms |
Consent |
XIII. Creators Club Membership Administration – Where Applicable |
Performance of Contract |
XIV. Private Event Registration |
Performance of Contract |
XV. Open Event Registration |
Legitimate Interest |
XVI. Product Research And Development |
Legitimate interest |
XVII. Legal Obligation - Cooperation With Law Enforcement And Regulatory Authorities (Including Courts) |
Legal Obligation |
XVIII. Collecting Your Device Information On Our Website Using Cookies, Pixels, Tags, And Similar Technologies (“Cookies Notice”) |
Legitimate Interest | Consent |
XIX. User-Generated Content (UGC) Acquisition From Social Media |
Performance of Contract |
XX. Push Notifications (In-App Communication) |
Legitimate Interest |
In this section, we explain:
- When and Why do we need your Personal Data (“Purpose”)?
- What allows us to use your Personal Data for each Purpose (“Legal basis”)?
- What do we do to your Personal Data for each Purpose (“Processing”)?
- Which of your Personal Data do we need for each Purpose (“Categories of Personal Data”)?
- How long do we keep your Personal Data for each Purpose (“Retention period”)?
- With whom (types of service providers) do we share your Personal Data to achieve the purpose (“Categories of recipients”)?
I. SITE (ADIDAS DOMAIN) OPERATION AND APP OPERATION |
|
|
PROCESSING
|
To run the sites that are connected to the adidas domain and the adidas app, fix bugs to make sure you always see the site the way we intended, and monitor compliance with our Terms and Conditions, we screen all traffic to our site and analyse data that is received by our servers.
Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”. |
|
LEGAL BASIS |
Legitimate Interest |
|
CATEGORIES OF PERSONAL DETAILS |
Device information Identity information Behavioural and Profile information Preference information
|
|
RETENTION PERIOD |
Browsing Session We need your data for as long as you are on the site. We keep it for the duration of your browsing session. |
|
CATEGORIES OF RECIPIENTS |
· adidas Data Controllers · adidas AG Subsidiaries and Affiliates · Site Administration Support Providers
|
II. DOMAIN AND NETWORK SECURITY AND USER AUTHENTICATION |
|
|
PROCESSING
|
To protect our domains, detect unusual activities, and prevent security threats and protect our site-visitors from unauthorised accesses (such as hackers), we screen all traffic to our sites, and authenticate user log-in information using tokens to verify the details you provide to us and compare it with other available information, such us the credentials you have provided directly to adidas or other platforms (such as Runtastic or Facebook) or information that is available in the public domain to ensure only “authorised” users have access to our sites. Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”. |
|
LEGAL BASIS |
Legitimate Interest |
|
CATEGORIES OF PERSONAL DETAILS |
Device information Identity information Behavioural and Profile information Preference information
|
|
RETENTION PERIOD |
Browsing Session We need your data for as long as you are on the site. We keep it for the duration of your browsing session. |
|
CATEGORIES OF RECIPIENTS |
· adidas Data Controllers · adidas AG Subsidiaries and Affiliates · Site Administration Support Providers
|
III. GLOBAL CREDENTIAL TO ALL ADIDAS PLATFORMS – USER EXPERIENCE |
|
|
PROCESSING
|
We know you don’t like to remember usernames and passwords, or having to register multiple times.
To enable our users to log on to all platforms, portals, services, communities and apps operated by or on behalf of adidas Data Controllers (which includes the Runtastic app and services) (“adidas Platforms”) with one set of log-in credentials (“adidas Log-In”), we store your adidas Log-In in our global authentication platform. When you use your adidas Log-In to enter any adidas Platform, we will use a token to verify your identity from our global authentication platform. This also further ensures our network and domain security.
Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”. |
|
LEGAL BASIS |
Legitimate Interest |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information (username, password, email) Creators Club information (for Creators Club members only) Preference information
|
|
RETENTION PERIOD |
Your account duration or Inactivity+25 months To allow you to sign in with your adidas Log-In on adidas Platforms, we need to maintain your data for as long as you have an account with us, or if you stop using our services without requesting to delete your data, we will keep it for 25 months after your last log in. |
|
CATEGORIES OF RECIPIENTS |
· adidas Data Controllers · adidas AG Subsidiaries and Affiliates · Site Administration Support Providers
|
IV. SALES OF ADIDAS PRODUCTS - ONLINE AND OFF-LINE ORDER |
|
|
PROCESSING
|
To process your online and/or in-app orders, make sure your payment is received, comply with the requirements under our Terms and Conditions (3. Purchase Terms) (for selling you the products) including invoice processing, delivery, personalisation services, exchanges and refunds, click and collect. Your order cannot be completed if our payment fraud detection solutions flag your transaction as suspicious and potentially fraudulent. Please note the payment fraud detection system is an automated decision-making process. It is required to allow us to conclude the contract with you. You have the right to request a human review of this decision, and challenge the decision. |
|
LEGAL BASIS |
Performance of Contract |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information Contact information Location information Size information Purchase information Correspondence Device information Creators Club information (for Creators Club members only)
|
|
RETENTION PERIOD |
Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract. |
|
CATEGORIES OF RECIPIENTS |
· adidas Data Controllers · adidas AG Subsidiaries and Affiliates · Selling Partners (where applicable) · Manufacturing Providers · Delivery Service Providers · Payment Risk Solution Providers · Payment Processing Providers · IT Cloud Solution Providers
|
V. PAYMENT FRAUD DETECTION |
|
|
PROCESSING
|
We combine the purchase information you provide to us with other information we obtain through our third-party payment risk and fraud prevention service providers to ensure any purchases are legitimate, or you do not purchase our products in violation with our terms and conditions. This means depending on the outcome of the analysis of your information, we may reject your order, and decline your payment. This is an automated decision-making process that is required to conclude our sales contract with you. |
|
LEGAL BASIS |
Performance of Contract |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information Contact information Behavioural and Profile information Purchase information Device information
|
|
RETENTION PERIOD |
Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract. |
|
CATEGORIES OF RECIPIENTS |
· adidas Data Controllers · adidas AG Subsidiaries and Affiliates · Payment Risk Solution Providers · Payment Processing Providers · IT Cloud Solution Providers
|
VI. PRODUCT DELIVERY |
|
|
PROCESSING
|
Once you have successfully placed an order, we use your contact details (home and/or shipping address) and other purchase information to deliver the products you purchased to you. |
|
LEGAL BASIS |
Performance of Contract |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information: Name Contact information: Shipping Address
|
|
RETENTION PERIOD |
Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract. |
|
CATEGORIES OF RECIPIENTS |
· adidas Data Controllers · adidas AG Subsidiaries and Affiliates · Delivery Service Providers · IT Cloud Solution Providers
|
VII. ELECTRONIC DELIVERY TRACKING |
|
|
PROCESSING
|
This is a service provided on request of the consumer by our Delivery Partners. You have the option to track your delivery using services provided directly by our delivery partners; however, we will only be able to share your information with our delivery partners for this purpose with your consent. The service is hosted on the Delivery Partner’s platform. You should read their Privacy Notice for the processing of your Personal Data for this purpose. |
|
LEGAL BASIS |
Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information Contact information Any other information you may directly and voluntarily provide to the Delivery Partner
|
|
RETENTION PERIOD |
As determined by our Delivery Partner. |
|
CATEGORIES OF RECIPIENTS |
· Delivery Service Providers |
VIII. BUSINESS OPERATIONAL ANALYTICS |
|
|
PROCESSING
|
We need to know how we do as a business. This is in the interest of our shareholders, our board members, our employees, and our partners. For this purpose, we need to analyse different categories of information to understand how our products are selling in different markets, what are the popular features of our products, what worked and what didn’t in terms of our marketing and advertising campaigns, our product designs and distribution strategy, our website design and overall user experience, so we can establish, implement, and evaluate our business strategy.
This includes analysing data to understand how users browse our site and use the app to improve our user experience design to make sure you will continue to purchase our products and interact with us on our sites and applications.
To minimise the risk to you as an individual, we will only use either the unique consumer identifier or the IP address for this purpose.
You can learn more about how our Data Analytics Solution Providers provide analytics services by using your data here:
Adobe Analytics Data Collection: https://marketing.adobe.com/resources/help/en_US/reference/c_Privacy_Overview.html
Google Analytics Data Collection: https://support.google.com/analytics/answer/6318039?hl=en
|
|
LEGAL BASIS |
Legitimate Interest |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information: Unique Consumer Identifier (only) Size information Purchase information Behavioural and Profile information Community information Activity information Device information Correspondence Creators Club information (for Creators Club members only)
|
|
RETENTION PERIOD |
When using analytics services provided by the vendors identified above, we are required to retain data for the period specified by these vendors. You can find the retention period indicated by the vendors here:
Adobe Analytics: 36 months (https://marketing.adobe.com/resources/help/en_US/reference/data-retention.html )
Google Analytics: 38 months (https://support.google.com/analytics/answer/7667196?hl=en)
We need the information for this duration to produce accurate analysis of our business operations. |
|
CATEGORIES OF RECIPIENTS |
· adidas Data Controllers · adidas AG Subsidiaries and Affiliates · Prospective Buyers and Investors · Business Consulting Service Providers · Data Analytics Solution Providers · IT Cloud Solution Providers
|
IX. CUSTOMER SERVICE |
|
|
PROCESSING
|
We collect your Personal Data to tell you when the product you like is available upon your request and respond to your questions and concerns through various communications channels we make available to you. |
|
LEGAL BASIS |
Legitimate Interest |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information Contact information Location information Size information Purchase information Correspondence Creators Club information (for Creators Club members only)
|
|
RETENTION PERIOD |
Statutory limitation period. We need to keep the information in case of any legal disputes. |
|
CATEGORIES OF RECIPIENTS |
· Customer Service Provider · adidas Data Controllers · adidas AG Subsidiaries and Affiliates · Selling Partners (where applicable) · Delivery Service Providers · Payment Risk Solution Providers · Payment Processing Providers · IT Cloud Solution Providers
|
X. PERSONALISED MARKETING MESSAGES VIA EMAIL (Newsletter Sign-Up) |
|
|
PROCESSING
|
We send you marketing messages that we think you would be interested (“personalised”) to the email address you provide to us because you signed up to our email newsletters. To send you “personalised” messages, observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behaviour using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various categories of Personal Data from you. We use different analytics tools to understand what your behaviour means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you. Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”. |
|
LEGAL BASIS |
Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information Contact information (if available to adidas) Location information Size information (if available to adidas) Purchase information (if available to adidas) Behavioural and Profile information (if available to adidas) Community information (if available to adidas) Social Media information (if available to adidas) Activity information (if available to adidas) Device information Preference information (if available to adidas)
|
|
RETENTION PERIOD |
We retain it for as long as you do not withdraw your consent sending you emails or object to us processing your Personal Data for marketing purposes. |
|
CATEGORIES OF RECIPIENTS |
· adidas Data Controllers · adidas AG Subsidiaries and Affiliates · Email Marketing Support Providers · IT Cloud Solution Providers
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES (“COOKIES NOTICE”) |
|
|
When you visit the adidas site, we store data collectors such as cookies, tags, pixels, tag containers, beacons, among others, in your browser to obtain certain information about your current browsing session. These technologies are often referred to as “Cookies” collectively by other websites. Cookies also enable our website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another. We use Cookies for different purposes, which also mean they have different legal bases. Please review the information below to understand how we use different types of Cookies to fulfil different purposes. |
|
|
PROCESSING
|
“REQUIRED” – site functionality and business operation. We use “Required Cookies” to operate our site. This includes storing a unique identifier to manage and identify you as a unique visitor to our site, to provide a consistent and accurate service to you. This includes making sure that we remember the products you have placed in your cart, or your language preferences. These Cookies are stored for the duration of your browsing session. Without these Cookies, you will not be able to view our site properly. |
|
LEGAL BASIS |
Legitimate Interest |
|
PROCESSING
|
“FUNCTIONAL” – website improvement and performance
We use “Functional Cookies” to continuously improve our website performance. This includes using the data we collected from you to do the following: · Web analytics —Based on your browsing behaviour, we will analyse the data to improve the functionality and design of our site. · Ad response rates— Based on how you come to our site, we will measure our ad response rates by analysing our ad click-through rates to improve the effectiveness of advertising purchased on a site external to ours. · Affiliate tracking— We need to let our affiliate marketing partners, or service providers have certain information if you came to our site, and purchased products, through a visit to theirs. This is required as we may need to provide them a fee for such services. For this purpose, we will share information about your visit, including the products you have purchased. · Error management— We measure errors presented on a website, to make sure we fix bugs or any issues promptly. · Testing designs— We need to use A/B testing or multivariate testing, to ensure a consistent look and feel is maintained for the user of the site in the current and subsequent sessions. |
|
LEGAL BASIS |
Legitimate Interest |
|
PROCESSING
|
“MARKETING”
We use “Marketing Cookies” provided by our advertising partners to make sure our advertising messages are shown to you at the right time and the right place. These Cookies are persistent but time-limited cookies. These Cookies contain a unique key to distinguish individual users’ browsing habits. We also use these Cookies to limit the number of times a user sees a particular ad on a website and to measure the effectiveness of a particular campaign. The identifier stored by these Cookies are provided by our partners. We cannot use the same identifier in our own systems. We also use these cookies to serve ads that are relevant to your immediate geo-location, for example to provide you with the nearest store where the product you are browsing may be available.
|
|
LEGAL BASIS |
Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Device information Location information Behavioural and Profile information: this is collected through observing your browsing behaviour Preference information (if available to adidas)
|
|
RETENTION PERIOD |
The cookies, pixels, tags, and other similar technologies used to collect your device information and browsing behaviour information are stored in your browser for the session or for as long as you do not clear your browser cookie setting.
The data we obtained through the cookies related to other purposes will be stored for the duration of that purpose. |
|
CATEGORIES OF RECIPIENTS |
· adidas Data Controllers · adidas AG Subsidiaries and Affiliates · Site Administration Support Providers · Business Consulting Service Providers · Data Analytics Solution Providers · Advertising Agency Partners · Social Media Platforms · Targeted Marketing Service Providers
|
|
|
You can change your browser settings to delete or prevent certain cookies from being stored on your computer or mobile device without your explicit consent. The ‘help’ section in your browser should provide information on how to manage your cookie settings. Find out how this works for your browser here: Internet Explorer: https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies Mozilla Firefox: http://support.mozilla.com/en-US/kb/Cookies Google Chrome: http://www.google.com/support/chrome/bin/answer.py?hl=en&answer=95647 Safari: http://support.apple.com/kb/PH5042 Opera: http://www.opera.com/browser/tutorials/security/privacy/ Adobe (flash cookies): http://www.adobe.com/privacy/policies/flash-player.html Google Chrome App: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DAndroid&hl=en
These websites will also help you understand more about how Cookie-based advertising works and how you can manage your Cookie Settings: http://www.aboutads.info/choices http://www.youronlinechoices.eu/ Network Advertising Initiative opt-out page: http://optout.networkadvertising.org/?c=1
You can learn more about the laws governing the use of “Cookies” here: http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm |
XIX. USER-GENERATED CONTENT (UGC) ACQUISITION FROM SOCIAL MEDIA |
|
|
PROCESSING
|
We invite you to provide your images to us via social media platforms by following specific instructions such as “#yesadidas”. We will be using the images you provide for our campaign communications. We will obtain rights to your image through a licence agreement in the form of our terms and conditions. By submitting your images via social media platforms to us, you will agree for us to use your images as described in the licence agreement. |
|
LEGAL BASIS |
Performance of Contract |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information: your social media handler Community information: images, videos, comments, sound recordings and other files provided through the social media platform promoting adidas Social Media information
|
|
RETENTION PERIOD |
Duration of licence agreement and statutory limitation period in case of any disputes. |
|
RECIPIENTS |
· adidas Data Controllers · adidas AG Subsidiaries and Affiliates · Event Partners (where applicable) · UGC Support Partners · Advertising Agency Partners · Social Media Platforms · IT Cloud Solution Providers (where applicable)
|
XX. PUSH NOTIFICATIONS (IN-APP COMMUNICATION) |
|
|
PROCESSING
|
When you use the adidas app, we use push notifications in this app to communicate with you concerning the purposes stated in this Notice. This includes information that relates to purposes based on the Performance of Contract (such as your purchase). You can switch off push notifications at any time using “Settings” in your mobile devices. However, if you switch off push notifications, we may need to contact you via emails for important messages relating to your purchase. |
|
LEGAL BASIS |
Legitimate Interest |
|
CATEGORIES OF PERSONAL DETAILS |
Device information
|
|
RETENTION PERIOD |
For as long as you use the app and not switched Push Notification off. |
|
CATEGORIES OF RECIPIENTS |
· adidas Data Controllers · adidas AG Subsidiaries and Affiliates
|
6. What does adidas do when we transfer your Personal Data outside of the EU/EEA?
Depending on the Personal Data processing activity, your Personal Data is shared with different “Categories of Recipients”. Where the recipient is located outside the EU/EEA, we have implemented necessary measures such as singing the EU Standard Contractual Clauses approved by the EU Commission or selecting vendors that certify and comply with the EU-US and Swiss-US Privacy Shield Framework.
7. How do we secure your Personal Data?
We implement appropriate technical and organisational measures to address the risks corresponding to our use of your Personal Data, including loss, alteration, or unauthorised access to your Personal Data, and empowering you to exercise your rights. We require our service providers to do the same through contractual agreements. However, you should be aware that any transmission of your Personal Data through the internet is at your own risk. We can only protect your Personal Data when we have it.
8. What are your rights and how can you exercise them?
Where applicable, under the GDPR and applicable data protection laws in the EU/EEA countries, you have the rights listed and explained below. We also provide you instructions on how to exercise each right. We need to confirm your identity before we can handle your requests. When we refuse your request for legal reasons, we will tell you why.
For all enquiries concerning your privacy and personal data, please write to us using the Contact Us form.
Please consult your local supervisory authority about your rights under the GDPR and to understand what these rights mean.
|
YOUR RIGHT |
|
|
I. Get a copy of your Personal Data You have the right to obtain a copy of your Personal Data, if it does not have negative effect on other people. |
|
|
II. Access to information about your Personal Data You have the right to know whether or not we use your Personal Data, as well as the following information: a) why we have your Personal Data; b) what categories of data we have; c) what we do with your Personal Data; d) who has access to your Personal Data (and where they are); e) where your Personal Data might be transferred to; f) how long we are keeping your Personal Data; g) if you didn’t provide your Personal Data directly to us, how did we get them; h) your rights under applicable laws and the possibility to restrict processing; and i) if we use your Personal Data for any automated decision-making; and j) in some cases, you have the right to know how our automated decision-making works, if the decision significantly affects you. |
|
|
III. Make sure your Personal Data are correct You have the right to make sure we are using the accurate details about you. |
|
|
IV. Delete your Personal Data You have the right to ask us to delete your Personal Data if: a) we no longer need it for a specific purpose, for example, a contract or a legal requirement; or b) you withdraw the consent you provided if we asked for your consent when we collected your Personal Data; or c) if you object to our use of your Personal Data based on legitimate interests we have identified, including direct marketing activities, unless we can demonstrate the compelling need of the legitimate interests. |
|
|
V. Restrict how we use your Personal Data You have the right to stop us from doing certain things to your Personal Data when: a) you don’t think we are using the right Personal Data; b) you don't want us to delete your Personal Data, but you also don't think we are complying with the law; c) you want to make a legal complaint against us, but we want to delete the data; or d) you challenge our explanation of our use based on a "legitimate interest". When you successfully restrict how we use your Personal Data, we will only use your Personal Data with your consent, or unless it is required by law. |
|
|
VI. Obtain a portable file so you can share it with another company You have the right to obtain a portable file that contains the Personal Data you provided to us where the legal basis is either consent or the performance of contract. The file will provide you with the Personal Data you actively and knowingly provided to us, including data passively obtained by us when you use our service or products. |
|
|
VII. Withdraw your consent When we use your Personal Data based on your consent, you have the right to change your mind and withdraw your consent at any time. |
|
|
VIII. Object when we process your Personal Data based on “Legitimate Interest” When we process your Personal Data based on “Legitimate Interest” as specified in this Privacy Notice, you may have the right to disagree and stop us from processing your Personal Data for this purpose. We may have compelling reasons, though, to continue processing your Personal Data even in the light of your objection. In such cases we will provide you with our rationale. We will respect and implement your objection in any case where it is related to direct marketing purposes. |
|
|
IX. Challenge the decision generated by our automated decision-making process When we use automated decision-making tools or processes that lead to an outcome which produces a legal effect (such as Payment Fraud Detection), you have the right to understand the logic involved, the significance and possible consequences of this process. You also have the right to request human intervention, especially when this is used to conclude a contract with us. You can challenge our decision by expressing your opinion. |
|
|
X. File a complaint with your local data protection supervisory authority If you are not happy with how we have handled your Personal Data, or how we have responded to your rights provided here, you have the right to make a complaint against us with your local data protection supervisory authority. |
|
9. Questions, Complaints, and Support – who and how you can get in touch with them?
|
Contact Us |
|
|
Contact Us: For support in English, please click HERE. |
|
|
adidas Privacy Team and the Data Protection Officer |
|
|
Global Privacy | Data Protection Officer adidas AG Adi-Dassler-Strasse 1 91074 Herzogenaurach Germany |
|
|
Data Protection Supervisory Authorities |
|
|
adidas Lead Supervisory Authority Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) +49 (0) 981 53 1300 Promenade 27 91522 Ansbach Germany |
Your Local EU/EEA Supervisory Authority
Please find the details to your local Data Protection Supervisory Authority here: |
10. Updates and Notification of Updates
We review and update the Privacy Notice periodically to reflect any changes resulting from our day-to-day business operations. You can always check the date of the Privacy Notice to find out when we last made any changes. We will notify you when we make significant changes that you must be aware of.
11. adidas Data Recipients
You can find a list of adidas Data Recipients who processes your personal data under adidas Data Controllers’ instructions below. The list is subject to change as necessary.
|
COMPANY |
SERVICE |
|
adidas International Marketing B.V. |
Webshop operations & Marketing Services |
|
Demandware Inc.| USA |
Website Hosting |
|
Adyen | Netherlands |
Payment Processes |
|
InfoSys Technologies Ltd. | India, EPAM | Belarus |
Website Development |
|
Adobe Analytics | Ireland, Google Analytics | USA |
Web Analytics |
|
Sprinklr | USA, Olapic Inc. | USA |
Social Media Analytics |
|
Flurry | USA, Apps Flyer | Israel |
Mobile App Analytics |
|
Medallia Inc. | USA, Qualtrics LLC | USA |
Net Promoter Score |
|
act.3 | Germany, cip Trademarketing GmbH | Germany |
Event Management |
|
Neolane Ltd. | France |
Marketing |
|
Batterii LLC | USA |
Consumer Insights |
|
TBWA Worldwide Inc. | USA, Media Monk Netherlands, IRIS | Australia |
CRM Agencies |
|
Olapic, Inc. | USA |
Influencer Marketing |
|
adidas affiliates | globally |
Consumer Relationship Management |
|
Teleperformance | Germany |
Customer Service |
|
DHL | Germany |
Product Delivery |
|
Feedzai | Germany |
Fraud Prevention |
|
PayPal | USA |
Payment Service |
|
Apple Pay, Google Pay | USA |
Mobile Payment |
|
Facebook (WhatsApp, Instagram) | USA |
Social Media Interaction |
|
Twitter | USA |
Social Media Interaction |
|
Google | USA |
Social Media Interaction |
|
Runtastic | Austria |
Health and Fitness Community |
|
Google Analytics | USA |
Analytics |
|
Adobe Analytics | USA |
Analytics |
|
Anatwine Limited | UK |
Consumer Experience |
|
MediaCom | UK |
Advertising Partner |
|
Salesforce |
CRM Software | Data Analytics |
|
Wunderman |
Email Marketing Services |
Where your personal data may be used by non-adidas Data Controllers via adidas platforms, applications or elsewhere for their own purposes, please consult the privacy notice of the non-adidas Data Controller for more information about how they handle your personal data.
12. Reebok
Reebok is a brand of adidas AG (Adi-Dassler Strasse 1, 91074 Herzogenaurach, Germany).
Your personal information will be used by the adidas Data Controllers identified in this Privacy Notice.