9. GDPR Contact
Keroman Business Park, 6 rue du sous-marin Vénus, 56100 Lorient — To the attention of the legal department
By Mail
For any questions relating to the protection of personal data:
When you browse the site, cookies may be placed on your device. These files ensure the proper functioning of the site, measure audience and improve the user experience, subject to your consent where required.
The detailed list of cookies may vary depending on the services activated on the site.
Type of cookies
Legal basis & purpose
Duration
Essentiels
Legitimate interest - Technical operation of the website (strictly necessary cookies)
Session
Analytiques
Consent - Audience measurement and statistics
13 months
marketing
Consent - Personalization and prospecting
13 months
Cookie management
On your first visit to the site, a consent banner allows you to accept or refuse all or some non-essential cookies.
You can change your cookie preferences at any time via the cookie manager, which is always accessible from the website.
Refusing non-essential cookies does not affect access to the main features of the site.
8. Cookie Policy
Security measures implemented
We are implementing appropriate technical and organizational measures
Chiffrement des échanges (HTTPS/TLS)
Accès limité aux personnes habilitées
Mesures de sécurité et surveillance (selon prestataires)
Protection and restoration procedures (depending on service providers)
7. Sécurité des données
6. Your user rights
Vous pouvez demander l’accès aux données personnelles que nous détenons à votre sujet, en obtenir une copie, et demander la correction d’informations inexactes ou incomplètes.
6.1. Droit d'accès et de rectification
Vous pouvez demander la suppression de vos données personnelles, sauf lorsque leur conservation est requise pour respecter une obligation légale.
6.2. Droit à l'effacement
Vous pouvez vous opposer à tout moment au traitement de vos données personnelles à des fins de prospection ou pour des motifs liés à votre situation particulière.
6.3. Droit d'opposition
Vous pouvez demander la limitation du traitement de vos données personnelles dans les cas prévus par la réglementation, notamment lorsque vous contestez l’exactitude ou la licéité du traitement.
6.4. Droit à la limitation du traitement
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another data controller where technically feasible.
6.5. Droit à la portabilité des données
If you believe that your rights are not being respected, you have the right to lodge a complaint with the competent supervisory authority, in particular the National Commission for Information Technology and Freedoms (CNIL).
6.6. Droit de réclamation
When the processing of your personal data is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of the processing carried out before that withdrawal.
Withdrawal of consent may relate in particular to marketing communications or the use of non-essential cookies.
6.7. Withdrawal of consent
In accordance with applicable regulations, you have the option to define guidelines regarding the retention, deletion and communication of your personal data after your death.
These guidelines may be general or specific and may be changed or revoked at any time.
6.8. Post-mortem directives
Conformément au Règlement Général sur la Protection des Données (RGPD), vous disposez des droits suivants :
Exercising your rights
These rights can be exercised by email at rgpd@ocsport.com , or by mail to: Zac de Keroman, 6 rue du sous-marin Vénus, 56100 Lorient, France, addressed to the Legal Department. If, after contacting us, you believe your rights have not been respected, you can file a complaint with the supervisory authority.
5. Data sharing
We never sell your personal data. We may share or process it in the following cases:
Prestataires / Destinataires
Your personal data is used only by identified and authorized individuals for the purposes described in this policy. Depending on the purpose, the data may be processed by: OC Sport Pen Duick staff, the audience measurement provider, the email service provider, our commercial and advertising partners (if you have consented), and social networks (Facebook, Instagram, LinkedIn, X, YouTube).
Legal obligations
If required by law or upon formal request from a judicial or administrative authority.
Transfers outside the European Union
Certains prestataires techniques ou services tiers utilisés pour l’hébergement, la gestion des paiements, l’envoi d’emails ou la mesure d’audience peuvent être situés en dehors de l’Union Européenne.
Dans ce cas, les transferts de données sont encadrés par des garanties appropriées conformément au RGPD, notamment par l’utilisation de clauses contractuelles types approuvées par la Commission européenne ou de mécanismes équivalents assurant un niveau de protection adéquat.
Authorized persons
Les données personnelles collectées sont accessibles uniquement aux personnes dûment habilitées au sein de l’organisation, dans la limite de leurs fonctions et exclusivement pour les finalités décrites dans la présente politique de confidentialité.
Ces personnes sont soumises à une obligation de confidentialité et n’accèdent aux données que lorsque cela est nécessaire à l’exécution de leurs missions.
PARTNERS AND THIRD-PARTY PLATFORMS
L'utilisation des boutons des réseaux sociaux de type « Se connecter via… » ou « Partager… » entraîne une collecte de données personnelles par les réseaux sociaux concernés. OC Sport Pen Duick ne peut être tenue responsable du traitement de vos données effectué par ces réseaux sociaux tiers.
Business operations
En cas de fusion, acquisition ou cession d'actifs, vos données pourraient être transférées.
Archiving and deletion
At the end of the defined retention periods, personal data is either deleted, anonymized, or archived in accordance with applicable legal obligations.
4. Data retention period
Personal data is kept only for as long as necessary to fulfill the purposes for which it was collected, in accordance with the requirements of the General Data Protection Regulation (GDPR) and applicable legal obligations.
Data type
Shelf life
Données liées au compte client et à la relation contractuelle
During the term of the contractual relationship, and then archived in accordance with legal obligations.
Données prospects (formulaires de contact, demandes d’information)
3 years from the date of the last contact from the prospect
Billing and accounting data
Current legal duration (generally 10 years)
Customer support data
Time required to process the request, then archived for a limited period
Technical data and security logs
Limited duration, strictly necessary for security and abuse prevention purposes
Data used for marketing purposes
Jusqu’au retrait du consentement par l’utilisateur
Legal basis for processing
The processing of personal data is carried out on one of the following legal bases, in accordance with Article 6 of the GDPR:
Contract performance: when processing is necessary for the provision of the services requested or for customer relationship management.
Legal obligation: when the processing is required by law, particularly in accounting or tax matters.
Legitimate interest: when processing is necessary for the proper functioning of the site, for security or for the improvement of services, in compliance with the rights and freedoms of users.
Consent: when the user has given their explicit agreement, in particular for sending marketing communications or using non-essential cookies.
3. Use of data
The personal data we collect is processed in accordance with the legal bases provided for by the GDPR. We primarily use it to:
Purpose of the processing
Legal basis
Managing your customer account, processing your orders and accessing our services.
Exécution du contrat
Handling support requests, customer support, and complaints
Exécution du contrat / Intérêt légitime
Improving services, analyzing usage and optimizing the user experience while respecting users' rights and freedoms.
Intérêt légitime
Site security, fraud and abuse prevention
Intérêt légitime / Obligation légale
Gestion des obligations comptables et fiscales
Obligation légale
Envoi de communications commerciales et marketing
Consentement
Mise à disposition d'un serveur photo et vidéo
Contract execution
Email campaign
Consentement
Production de données à des fins de mesures d'audience, de compréhension du comportement de l'internaute, d'optimisation de l'ergonomie du site internet, optimisation parcours visiteurs
Consentement
2. Data Collection
Identification and contact data (email address, etc.);
Online identification data (username, password);
The data collected during the use of our website (type of terminal, type and version of the browser you use, pages viewed, areas of interest, frequency and intensity of use of our services, connections, etc.).
Data provided directly
IP address and connection data
Browser type and operating system
Pages visited and browsing time
Language preferences
Personal data may be shared with our business partners or other companies within the Télégramme Group if you have given them your consent. Depending on your consent, this data will be used for marketing or targeted advertising purposes.
Données collectées automatiquement
We collect different types of data to provide you with our services and improve your user experience:
Address
Zac de Keroman, 6 rue du sous-marin Vénus, 56100 Lorient
Email de contact RGPD
This email is dedicated to requests relating to the protection of personal data.
Nom de l’entreprise
OC Sport Pen Duick
Legal representative
Mr. Hervé Favre, President
1. Data Controller
Privacy Policy
We place great importance on protecting your privacy. This document details our practices regarding the collection, use, and security of your personal data.
Last updated: March 2025