Privacy Policy and Cookies Policy

This document clarifies the manner of collection, storage, use, and sharing of personal data during the use of SportAZ websites and services. The text is based on legal requirements in Kosovo and international references such as GDPR.

Introduction and Contacts

This privacy policy for SportAZ sh.p.k. ("SportAZ", "we", "us", "our") describes the reasons and methods of data processing when you use our services, products, and websites.

  • Visit our website at www.decathlonkosovo.com
  • Communicate with us through various sales, marketing, and event channels

Reading this policy helps you understand your rights and choices. If you do not agree with it, please do not use our services.

For questions, contact us at: contact@decathlonkosovo.com

Recitals

SportAZ processes personal data only to the extent necessary for the functioning of websites, content, and services. Processing is generally based on user consent, except where law permits otherwise.

By using the services and visiting the website, you accept the terms of this policy and authorize data processing in accordance with applicable law.

This policy complies with Law No. 06/L-082 on Personal Data Protection in Kosovo and GDPR standards.

Summary of Key Points

  • What information we process: Personal data based on interactions with our services
  • Sensitive information: Only processed with consent when necessary
  • Third-party data: May be received from public databases and partners
  • Purposes: Service delivery, improvement, security, and compliance
  • Data sharing: Only with authorized third parties
  • Security: Firewalls, encryption, and access controls
  • Your rights: Access, correction, deletion, restriction, portability, objection

1. What Information We Collect

Personal Information Provided by You

We collect data voluntarily provided during registration, purchases, or communication.

  • Name, phone number, email, address, billing details, date of birth, password
  • Verification and identification information
  • Preferences, age, gender, education, professional experience

Sensitive Information

We do not process sensitive data without explicit consent.

Payment Data

SportAZ does not store bank card data. Payments are processed by licensed third parties.

Social Media Logins

You may register using platforms like Facebook or Google. We receive limited profile data.

Automatically Collected Information

  • IP address, browser type, operating system
  • Device data and usage logs
  • Location data (based on device settings)

Google API

Data obtained via Google APIs complies with Google API Services User Data Policy.

Other Sources

We may receive data from public databases, partners, and analytics tools like Google Analytics and Hotjar.

2. How We Process Information

We process data for account management, service delivery, customer support, communication, marketing (with consent), security, analytics, and personalization.

We do not perform automated decision-making with legal effects unless explicitly stated.

3. Legal Bases

  • Consent (withdrawable anytime)
  • Contract performance
  • Legal obligations
  • Legitimate interests
  • Vital interests
  • Public interest

4. Sharing with Third Parties

Data may be shared with service providers, partners, and authorities when necessary. All third parties must comply with applicable laws.

For international transfers, we apply safeguards such as EU Standard Contractual Clauses.

5. Third-Party Websites

We are not responsible for third-party websites linked from our platform. Please review their policies.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to improve functionality, security, and user experience.

Cookies

  • Necessary cookies: Essential functionality
  • Performance cookies: Analytics and improvements
  • Marketing cookies: Personalized ads

You can manage or withdraw cookie consent through your browser settings.

Google Analytics

You can opt out of tracking. Please review Google’s privacy policy for more details.

7. Social Media Logins

Data received from social networks is limited and governed by their policies.

8. Retention Periods

  • Billing data: 7 years
  • Marketing data: until consent withdrawal or max 2 years
  • Account data: during active use and up to 1 year after closure

9. Security Measures

We implement encryption, firewalls, and access controls. However, no system is completely secure.

10. Minors

Personal data of children under 16 is processed only with parental consent.

11. Privacy Rights

You have rights including access, correction, deletion, restriction, portability, and objection.

Withdrawal of Consent

You may withdraw consent at any time.

Marketing Communications

You can unsubscribe at any time via email links or by contacting us.

Account Information

  • Update your account via login
  • Contact us to close your account

Requests are processed within 1 month (extendable in complex cases).

12. Do Not Track

Currently, there is no universal DNT standard, so we do not respond to such signals.

13. Updates

This policy may be updated periodically. Changes take effect upon publication.

14. Contact Information

SportAZ has appointed a Data Protection Officer (DPO).

Email: contact@decathlonkosovo.com
Address: Decathlon Kosovo, Prishtina Mall, M2, 10000 Prishtina, Kosovo
Phone: +383 (0) 46 77 66 67

15. Managing Your Data

You may request access, updates, deletion, or export of your data by contacting us at contact@decathlonkosovo.com.