ADIDAS RUNNING APP PRIVACY POLICY
1. What does this Privacy Policy tell you?
This adidas Runing App Privacy Policy (Privacy Policy) tells you how we collect and process the information from which you can be identified directly or indirectly (Personal Data) while you use, browse or interact with the Vietnam version of our adidas Running App (adidas Running App).
This Privacy Policy provides information on:
1. who is responsible for your Personal Data;
2. Data Protection Officer;
3. the different types of Personal Data we use (Categories of Personal Data)
4. why and how we use your Personal Data (Purpose; Processing; Lawful basis);
5. how long your Personal Data is kept (Retention period);
6. other recipients of your Personal Data (Recipients);
7. transferring your Personal Data out of Vietnam (International Data Transfer);
8. your rights under applicable laws of Vietnam; and
9. any automated decision-making technologies used by us and how it works (where necessary).
Additionally, you should also read any privacy policies or notices displayed when you provide personal data to us as they provide details of the specific scenario which may not be covered by this Policy.
If you access any of our adidas Running app by using a Virtual Private Network (also known as “VPN”) to interact with us – including making purchases - in a country that is not your current or residential country where Vietnamese law is the governing privacy law, please read the privacy policy or notice displayed at that specific platform or portal to understand how the responsible entities, our affiliated brands and adidas subsidiaries in that country use and protect your Personal Data as local national requirements may be different from Vietnamese laws.
We will routinely review the content of this Privacy Policy and make minor adjustments and corrections as necessary. When we make any significant changes to this Privacy Policy we will announce these changes in advance, which may include sending you an email announcement.
2. Who is responsible for your Personal Data?
adidas Singapore Pte. Ltd. of 128 Beach Road, #19-01 Guoco Midtown, Singapore (adidas) is responsible for protecting your Personal Data and complying with national legislation governing the use of your Personal Data.
When you use adidas Running app or participate in adidas Running membership, your Personal Data may be collected and managed on behalf of adidas by other adidas companies, including but not limited to, adidas AG, adidas International Trading AG, and adidas International Marketing B.V. (adidas Data Controllers).
3. Who is the Data Protection Officer?
You may contact the Data Protection Officer at:
adidas Singapore Pte. Ltd.
128 Beach Road, #19-01 Guoco Midtown, Singapore
4. What Personal Data does adidas collect and use (Categories of Personal Data)?
These are the categories of Personal Data we collect directly or indirectly from you:
Identity information – Any information that identifies you as an individual living person, including but not limited to: name (first name, last name, initials), date of birth, e-mail address, gender, profile picture, unique customer identifier number, nickname, password and gift card codes that are assigned to you. |
Contact information - Any information that can be used to contact you, including but not limited to: phone number, shipping and billing address, e-mail address, Messenger ID, social media handle or any other communication channel you have used to contact us. |
Location information - Any information we can use to know or guess where you are, real time or otherwise, including but not limited to: chosen residential location, current log-in location (IP address), real-time device location information via device sensors and signals, GPS location (if you wish to it share with us, for example through your mobile device settings) or information that helps us guess where you may be such as the specific adidas website you have visited that might give us clues about where you are or when you “check-in” to an event or website on a social media page indicating location, if it is shared with us. |
Size information - Any information related to your body measurements, including but not limited to: shoe size, clothes size, height, weight. |
Payment, purchase and transaction information - Any information we use to complete or in relation to your purchase record and invoice, including but not limited to: payment provider, duration of adidas Running App subscription, price, currency and VAT (based on country info). Although we do not store or otherwise process any credit card or bank details ourselves, we process a payment ID number given by the respective Payment Service Provider and can be allocated to you. |
Behavioural and Profile and Community information- Any information you provide to us in your social profile and/or when interacting with our communities and other users, including but not limited to: follower information in the adidas Running membership community, information provided when you participating in adidas Running membership events/challenges and groups/communities either as a trainer, team member, a participant or as a promoter, pictures and videos you share, information you provide in your profile biography, team memberships and roles there, interests, feedback, likes and comments, leaderboard rankings, event participation, joined groups including roles as well as challenge participations and success. If you explicitly allow us to access your phone book, we will compare the email addresses of your contacts with email addresses from registered users within the adidas Running membership community and show you a list of people you might want to follow. Anyhow, we do not store this information. |
Social Media Interaction and Activity information – Any information about you we obtain through your interaction with us on social media channels, including but not limited to: any social media information that is publicly available such as your social media handles, social media interactions and public postings, “Likes” and other reactions, social media connections, photos that are public, or those send to us by mentioning us or following our social media posts by using “handles” or “hashtags” and comments or messages you shared with us publicly or privately on social media platforms. |
Mobile Device information – Any information on your browsing behavior, including but not limited to: browser name, IP address, clickstream data, date and time of the visit, time remained on Website, pages visited, links clicked in our marketing messages or Website, transmitted data volume, the referral URL (if you came to our website via a different site or an advertisement), browser language and version and add-ons. |
Fitness Activity information - Any information connected to your fitness activity which you track using our Products or import, including but not limited to: activity type, distance, exercise duration, exercise routine (start and finish time), fitness score, pace, space utilization data, speed, calories burned, heart rate, RunScore, nutrition information, GPS maps and photos. |
Health Information – Any information that relates to your health or vitals such as your body mass index (BMI), heartbeat per minute, or information of any disability. This is used only when you have allowed us to use it – with your consent - for specific reasons and purposes. |
Correspondence – Any information you share through correspondence you have with our Customer Happiness Agents, and/or other employees and personnel including any opinion you share with us that indicate your point of view and comments. This may include when you provide us feedback and review rating our service or products, or if you participate in any product research and development surveys. |
Preference information - Any information which indicates your preference whether explicitly, if provided by you, or inferred, including but not limited to: activity preference (sports), site/brand preference, preferred language, product and product attributes preferences, units (distance, weight, temperature), personal goals and motivation (e.g. yearly running goal, weight goal), training plan information, custom workouts, equipment information (brand, model, size, color, picture) and product reviews. |
These are the categories of Personal Data we receive from the following third parties:
Registration via Facebook or Google - If you register an adidas Running App account via social login, we will receive the following information from the respective provider: Facebook Inc. (1601 South California Avenue, Palo Alto, CA 94304, USA, “Facebook”): First and last name, email address, gender, birthdate and profile picture. Google Inc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA, “Google”): First and last name, email address, gender, birthdate and profile picture. |
Facebook Friend List - We will receive information about your friends on Facebook from Facebook if you explicitly allow us to access it. We will use this information to make suggestions on people you might want to follow in the Products, but do not store it. |
Partner Platforms - We offer an automatic import of your activity information from other platforms we have a partnership with (“Partner Platforms”). However, we only import personal data from Partner Platforms if you have given us and the partner the order to connect your adidas Running App account with the respective Partner Platform. |
Apple HealthKit - We provide the opportunity to sync our Products with Apple’s (Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA; “Apple”) HealthKit framework, which provides a central repository for health and fitness data on iPhone and Apple Watch. Within the Health Kit settings, you can decide if you want to allow our Products to read the personal data listed there and import it to the Products, to write personal data collected in our Products (please see Sharing of personal data with other services in this regard) in the Health Kit or both. |
Google Fit - We provide the opportunity to sync our Products with Google’s Fit SDK which is an open platform that lets users control their fitness data. Within Google Fits settings you can decide if you want to allow the Products to read personal data listed in Google Fit and import it to the Products, to write personal data collected in our Products in Google Fit (please see Sharing of personal data with other services in this regard) or both. |
5. What does adidas do with your Personal Data and why (Purpose, Processing) and when is your Personal Data deleted (Retention Period, Deletion)?
Purpose
Your Personal Data is used for the following purposes:
a) "COOKIES" NOTICE: Installing Cookies, Pixels, Tags, and other Technologies on Your Browser to Collect Your Device Information and Track Your Activities on Ours and Other Platforms;
b) Operate adidas Running App;
c) Display Targeted Advertisements and Send Individualised Marketing Messages;
d) Administer adidas Running membership Programmes and Organise Events and Activities;
e) Improve and Develop adidas Brand Products and Services; and
f) Comply with Legal Obligations.
In order to carry out these purposes, we will be sharing your data with the other adidas Data Users.
Retention Period
In order to enable you to use our websites and apps, we retain Personal Data for as long as you have an account with us. Anyhow, if certain Personal Data is no longer required for the purposes listed below, e.g. because certain functions of our products are no longer operated or offered, we will delete or anonymize this data within a reasonable time after the complete fade out of the function.
If our user agreement with you is terminated and you don't request us to immediately delete your personal data, we will delete it 25 months after termination.
Deletion of Personal Data
If you request deletion of your account or if we delete it after the above-mentioned period, your personal data processed by adidas will be deleted, with the following exceptions:
Personal Data made public by you in our websites and apps (e.g. comments on other registered users’ activities) will be anonymized, i.e. it will be indicated that such details were provided by a deleted user.
Personal Data required for our performance of statutory obligations will not be deleted but reduced to the minimum necessary.
Personal Data that we need to defend against claims, that we need to enforce our claims or that we need to document our compliance with legal requirements will not be deleted but reduced to the minimum necessary.
Personal Data we have collected for analytical purposes or research will not be deleted but anonymized.
In this section, we explain:
1. When and Why do we need your Personal Data (Purpose)?
2. What do we do to your Personal Data for each Purpose (Processing)?
3. How long do we keep your Personal Data for each Purpose (Retention period)?
4. With whom (types of service providers) do we share your Personal Data to achieve the purpose (Categories of recipients)?
I. COMMUNICATION | |
PROCESSING | We process personal data in order to communicate with you regarding the user agreement you have with us. This includes for example sending you information on changes to our Terms and Conditions or Privacy Policy, sending you invoices for paid subscriptions or information on new features of our Products of the potential fade out of certain features. The legal basis for these processing activities is the performance of your contract with us. |
LEGAL BASIS | Performance of Contract (Terms and Conditions or Privacy Policy) |
CATEGORIES OF PERSONAL DATA | Identity information Contact information Location information Purchase information Correspondence and Preference information |
RETENTION PERIOD | We need your data for as long as you remain registered and maintain your adidas Running Membership. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Running App Administration |
II. DOMAIN AND NETWORK SECURITY AND USER AUTHENTICATION | |
PROCESSING | To protect our domains, detect unusual activities, and prevent security threats and protect our site-visitors from unauthorised accesses (such as hackers), we screen all traffic to our sites, and authenticate user log-in information using tokens to verify the details you provide to us and compare it with other available information, such us the credentials you have provided directly to adidas or other platforms (such as Facebook) or information that is available in the public domain to ensure only “authorised” users have access to our sites. Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”. |
LEGAL BASIS | Performance of Contract (Website Terms and Conditions) |
CATEGORIES OF PERSONAL DATA | Mobile Device information Identity information Behavioural and Profile information Browsing information Preference information |
RETENTION PERIOD | Browsing Session We need your data for as long as you are on the site. We keep it for the duration of your browsing session. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Site Administration Support Providers |
IIIII. GLOBAL CREDENTIAL TO ALL ADIDAS PLATFORMS – USER EXPERIENCE | |
PROCESSING | We know you don’t like to remember usernames and passwords, or having to register multiple times. To enable our users to log on to all platforms, portals, services, communities and apps operated by or on behalf of adidas (adidas Platforms) with one set of log-in credentials (adidas Log-In), we store your adidas Log-In in our global authentication platform. When you use your adidas Log-In to enter any adidas Platform, we will use a token to verify your identity from our global authentication platform. This also further ensures our network and domain security. Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”. |
LEGAL BASIS | Performance of Contract (adiClub Terms and Conditions – Clause 8) |
CATEGORIES OF PERSONAL DATA | Identity information (username, password, email) Browsing information adiClub information (for adiClub members only) Membership Administration information Preference information |
RETENTION PERIOD | Your account duration or Inactivity+four (4) years To allow you to sign in with your adidas Log-In on adidas Platforms, we need to maintain your data for as long as you have an account with us, or if you stop using our services without requesting to delete your data, we will keep it for four (4) years after your last interaction with us as described above. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Site Administration Support Providers |
IV. PRIZE DELIVERY | |
PROCESSING | Once you won a prize in a sweepstakes we hosted, potentially together with a partner, we will use your contact details (home and/or shipping address) and other information necessary to inform you and to deliver the products you have won. |
LEGAL BASIS | Performance of Contract |
CATEGORIES OF PERSONAL DATA | Identity information: Name Contact information: Shipping Address Other information necessary to deliver your prize (e.g. Size Information where applicable) |
RETENTION PERIOD | Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Delivery Service Providers CRM Solution Providers and Messaging Service Providers |
V. OPERATING THE PRODUCTS | |
PROCESSING | We screen all traffic to our websites and apps and analyze data that is received by our servers to: a) run the apps and websites that are connected to our domain and app, b) fix bugs to make sure the layout and design are displayed properly, and c) fix bugs to make sure the websites and the app function properly, and d) to monitor compliance with our Terms and Conditions. We may collect your Personal Data for this purpose by using technologies such as cookies, pixels and tags to collect your device information. |
LEGAL BASIS | Legitimate interest |
CATEGORIES OF PERSONAL DATA | Identity Information Browsing Information Device Information |
RETENTION PERIOD | Browsing Session We need your data for as long as you are remain the website or app. We keep it for the duration of your browsing session. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Business Consulting Service Providers Data Analytics Solution Providers |
VI. BUSINESS OPERATIONAL ANALYTICS | |
PROCESSING | We need to know how we do as a business. This is in the interest of our shareholders, our board members, our employees, and our partners. For this purpose, we need to analyse different categories of information to understand how our products are selling in different markets, what are the popular features of our products, what worked and what didn’t in terms of our marketing and advertising campaigns, our product designs and distribution strategy, our website design and overall user experience, so we can establish, implement, and evaluate our business strategy. This includes analysing data to understand how users browse our site and use the app to improve our user experience design to make sure you will continue to purchase our products and interact with us on our sites and applications. To minimise the risk to you as an individual, we will only use either the unique consumer identifier or the IP address for this purpose. You can learn more about how some of our Data Analytics Solution Providers provide analytics services by using your data here: Adobe Analytics Data Collection: https://marketing.adobe.com/resources/ help/en_US/reference/ c_Privacy_Overview.html Google Analytics Data Collection: |
CATEGORIES OF PERSONAL DATA | Identity information: Unique Consumer Identifier (only) Measurements Behavioural and Preference Information Location Information Payment, Purchase and Transaction Information Fitness Activity Information Browsing Information Mobile Device Information Correspondence Social Media Interaction and Activity Personal Opinion Membership Administration Information (where adidas brand membership applies / if available to adidas) |
RETENTION PERIOD | When using analytics services provided by the vendors identified above, we are required to retain data for the period specified by these vendors. You can find the retention period indicated by the vendors here: Adobe Analytics: 36 months ( https://marketing.adobe.com/resources /help/en_US/reference /data-retention.html ) Google Analytics: 38 months ( https://support.google.com /analytics/answer /7667196?hl=en) We need the information for this duration to produce accurate analysis of our business operations. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Prospective Buyers and Investors Business Consulting Service Providers Data Analytics Solution Providers IT Cloud Solution Providers |
VII. CUSTOMER SERVICE | |
PROCESSING | We collect your Personal Data to tell you when the product you like is available upon your request and respond to your questions and concerns through various communications channels we make available to you. |
LEGAL BASIS | Legitimate Interest |
CATEGORIES OF PERSONAL DATA | Identity information Contact information Location information Size information Payment, purchase and transaction information Correspondence Image and Recording adiClub information (for adiClub members only) Membership Administration information |
RETENTION PERIOD | 10 years from transaction date |
CATEGORIES OF RECIPIENTS | Customer Service Provider adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Selling Partners (where applicable) Delivery Service Providers Payment Risk Solution Providers Payment Processing Providers IT Cloud Solution Providers |
VIII. PERSONALISED MARKETING MESSAGES VIA EMAIL (Newsletter Sign-Up) | |
PROCESSING | We send you marketing messages that we think you would be interested (personalised) to the email address you provide to us because you signed up to our email newsletters or otherwise consented to receiving marketing messages. To send you “personalised” messages, observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behaviour using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various categories of Personal Data from you. We use different analytics tools to understand what your behaviour means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you. Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”. |
LEGAL BASIS | Consent |
CATEGORIES OF PERSONAL DATA | Identity information Contact information (if available to adidas) Location information Size information (if available to adidas) Payment, purchase and transaction information (if available to adidas) Behavioural and Profile information (if available to adidas) Community information (if available to adidas) Browsing information Social Media Interaction and Activity information (if available to adidas) Fitness Activity information (if available to adidas) (if we collect and process your fitness activity information, we will explicitly ask for your consent) Mobile Device information Preference information (if available to adidas) |
RETENTION PERIOD | We retain it for as long as you do not withdraw your consent sending you emails or object to us processing your Personal Data for marketing purposes. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Email Marketing Support Providers IT Cloud Solution Providers |
IX. PERSONALISED MARKETING MESSAGES VIA EMAIL (via existing contract) | |
PROCESSING | We send you marketing messages that we think you would be interested in (personalised) to the email address you provide to us during a purchasing contract. To send you “personalised” messages, observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behaviour using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various categories of Personal Data from you. We use different analytics tools to understand what your behaviour means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you. Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”. |
LEGAL BASIS | Consent |
CATEGORIES OF PERSONAL DATA | Identity information Contact information (if available to adidas) Location information Size information (if available to adidas) Payment, purchase and transaction information (if available to adidas) Behavioural and Profile information (if available to adidas) Community information (if available to adidas) Browsing information Social Media Interaction and Activity information (if available to adidas) Fitness Activity information information (if available to adidas) (if we collect and process your fitness activity information, we will explicitly ask for your consent) Mobile Device information Preference information (if available to adidas) adiClub information (for adiClub members only) |
RETENTION PERIOD | We retain it for as long as you do not object to us processing your Personal Data for marketing purposes, including sending of marketing messages. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Email Marketing Support Providers IT Cloud Solution Providers |
X. TARGETED MESSAGES ON 3RD-PARTY ADVERTISING PLATFORMS | |
PROCESSING | We use third-party advertising platforms, such as Facebook, Google, YouTube, Instagram, etc. to send you messages that are targeted at you, based on your behaviour and browsing pattern, at specific times and locations of these platforms to increase the efficiency of our advertising campaigns and to send you individualised marketing messages. We use third-party solutions such as Google Audience and Facebook Custom Audience to help us do a better job at targeting our campaigns and messages for our consumers. Your Personal Data is shared with the third-party advertising platforms, and they will attempt to match your profile in their database to determine the optimal time and place (the page you are browsing) to show you an advertisement from adidas. We also need to analyse necessary information to understand the impact of our campaigns. If you don’t accept that we track you for this purpose, you will still see adidas advertisements on other platforms at random. You can learn more about how some of our Advertising Partners help us achieve this purpose by visiting their sites: Google Personalised Advertising: https://support.google.com/ adspolicy/answer/143465?hl=en Google Advertising Policies: https://support.google.com /adspolicy/answer/6020956 Facebook Lookalike Audiences: https://www.facebook.com /business/help/164749007013531 Facebook Custom Audience Terms: https://www.facebook.com/legal /terms/customaudience Use of Cookies/Tags/Pixels: We may collect your personal details for this purpose by using technologies such as cookies, pixels and tags to collect your device information. More information is available in “XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES”. |
LEGAL BASIS | Consent |
CATEGORIES OF PERSONAL DATA | Identity information Contact information (if available to adidas) Location information Size information (if available to adidas) Payment, purchase and transaction information (if available to adidas) Behavioural and Profile information (if available to adidas) Community information (if available to adidas) Browsing information Social Media Interaction and Activity information (if available to adidas) Fitness Activity information (if available to adidas) (if we collect and process your fitness activity information, we will explicitly ask for your consent) Mobile Device information Preference information (if available to adidas) adiClub information (for adiClub members only) Membership Administration information |
RETENTION PERIOD | We retain it for as long as you do not withdraw your consent. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Advertising Agency Partners Social Media Platforms Targeted Marketing Service Providers IT Cloud Solution Providers |
XI. PRIVATE EVENT REGISTRATION | |
PROCESSING | When you sign up for an event we organise that has limited spots, we use the Personal Data you provide to reserve a spot for you. Your Personal Data will be used according to the Terms and Conditions associated with the event. |
LEGAL BASIS | Performance of Contract |
CATEGORIES OF PERSONAL DATA | Identity information Contact information Location information Fitness Activity information and Health information: any information we may collect from you on the day of the event (if we collect and process your fitness activity and health information, we will explicitly ask for your consent) adiClub information (for adiClub members only) Membership Administration information Image and Recording |
RETENTION PERIOD | Duration of the event and statutory limitation period in case of any disputes. |
CATEGORIES OF RECIPIENTS | adidas entity organizing the event. adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Event Partners (where applicable) IT Cloud Solution Providers (where applicable) |
XII. OPEN EVENT REGISTRATION | |
PROCESSING | We often also organize events that are open to everyone. We use the Personal Data you provide to keep you inform of the events you are interested in. |
LEGAL BASIS | Consent |
CATEGORIES OF PERSONAL DATA | Identity information Contact information Location information Fitness Activity information and Health information: any information we may collect from you on the day of the event (if we collect and process your fitness activity and health information, we will explicitly ask for your consent) adiClub information (for adiClub members only) Membership Administration information Image and Recording |
RETENTION PERIOD | For the duration of the event + 36 months if the data from a particular event is used for BUSINESS OPERATIONAL ANALYTICS purpose. |
CATEGORIES OF RECIPIENTS | adidas entity organizing the event. adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Event Partners (where applicable) IT Cloud Solution Providers (where applicable) |
XIII. PRODUCT RESEARCH AND DEVELOPMENT | |
PROCESSING | We conduct analysis to research improve our products and services. This includes asking you questions in surveys, asking you for feedback, asking you to test our products and provide us with a review, asking other service providers to conduct market and product research for us, try new technologies in our product that might collect Personal Data to stay ahead of the competition. We retain this information based on our “legitimate interest”, so by participating in any product review or survey, you agree that this is our legitimate interest. Where you wish to object to this legitimate interest, we will anonymise your information, so it is no longer Personal Data. |
LEGAL BASIS | Consent |
CATEGORIES OF PERSONAL DATA | Identity information (only if required by the project) Contact information (only if required by the project) Location information (only if required by the project) Size information Payment, purchase and transaction information (only if required by the project) Behavioural and Profile information (only if required by the project) Community information: this is the response you provided whichever format agreed at the time of the project. Browsing information Social Media Interaction and Activity information (only if required by the project) Fitness Activity information and Health Information (only if required by the project) (if we collect and process your fitness activity and health information, we will explicitly ask for your consent) Mobile Device information (only if required by the project) Correspondence (only if required by the project) Image and Recording Preference information adiClub information (for adiClub members only) Membership Administration Information Health information: if a project requires you to also provide health information, we will explicitly ask for your consent. Personal Opinion and Sensitive Personal Opinion |
RETENTION PERIOD | The duration of the project and statutory retention period stated to protect our IP rights. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Prospective Buyers and Investors Business Consulting Service Providers Data Analytics Solution Providers Manufacturing Providers IT Cloud Solution Providers |
XIV. LEGAL OBLIGATION - COOPERATION WITH LAW ENFORCEMENT AND REGULATORY AUTHORITIES (INCLUDING COURTS) | |
PROCESSING | When we are legally required to provide your Personal Data for national and public security reasons, crime prevention, investigation and prosecution, anti-money laundering, judicial proceedings, protection of other individuals’ rights and freedoms, and enforcement of civil claims, we will provide information as requested by the authorities or parties once we are satisfied that the request is mandated by law. We may not be able to notify you if it is against the law to do so. |
LEGAL BASIS | Legal Obligation |
CATEGORIES OF PERSONAL DATA | All Categories of Personal Information as requested by the enforcement authority. |
RETENTION PERIOD | For as long as required by law. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Local and national government authorities, including tax authorities Local and national law enforcement agencies Local and national judiciary |
XV. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES (COOKIES NOTICE) | |
When you visit the adidas site, we store data collectors such as cookies, tags, pixels, tag containers, beacons, among others, in your browser to obtain certain information about your current browsing session. These technologies are often referred to as “Cookies” collectively by other websites. Cookies also enable our website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another. We install cookies, pixels, tags and other technologies on your browser to collect your device information and track your activities on ours and other platforms and for different purposes. Please review the information below to understand how we use different types of Cookies to fulfil different purposes. | |
PROCESSING | “REQUIRED” – site functionality and business operation. We use “Required Cookies” to operate our site. This includes storing a unique identifier to manage and identify you as a unique visitor to our site, to provide a consistent and accurate service to you. This includes making sure that we remember the products you have placed in your cart, or your language preferences. These Cookies are stored for the duration of your browsing session. Without these Cookies, you will not be able to view our site properly. |
LEGAL BASIS | Performance of Contract |
PROCESSING | “FUNCTIONAL” – website improvement and performance We use “Functional Cookies” to continuously improve our website performance. This includes using the data we collected from you to do the following: Web analytics —Based on your browsing behaviour, we will analyse the data to improve the functionality and design of our site. Ad response rates— Based on how you come to our site, we will measure our ad response rates by analysing our ad click-through rates to improve the effectiveness of advertising purchased on a site external to ours. Affiliate tracking— We need to let our affiliate marketing partners, or service providers have certain information if you came to our site, and purchased products, through a visit to theirs. This is required as we may need to provide them a fee for such services. For this purpose, we will share information about your visit, including the products you have purchased. Error management— We measure errors presented on a website, to make sure we fix bugs or any issues promptly. Testing designs— We need to use A/B testing or multivariate testing, to ensure a consistent look and feel is maintained for the user of the site in the current and subsequent sessions. |
LEGAL BASIS | Consent |
PROCESSING | “MARKETING” We use “Marketing Cookies” provided by our advertising partners to make sure our advertising messages are shown to you at the right time and the right place. These Cookies are persistent but time-limited cookies. These Cookies contain a unique key to distinguish individual users’ browsing habits. We also use these Cookies to limit the number of times a user sees a particular ad on a website and to measure the effectiveness of a particular campaign. The identifier stored by these Cookies are provided by our partners. We cannot use the same identifier in our own systems. We also use these cookies to serve ads that are relevant to your immediate geo-location, for example to provide you with the nearest store where the product you are browsing may be available. |
LEGAL BASIS | Consent |
RETENTION PERIOD | The cookies, pixels, tags, and other similar technologies used to collect your device information and browsing behaviour information are stored in your browser for the session or for as long as you do not clear your browser cookie setting. The data we obtained through the cookies related to other purposes will be stored for the duration of that purpose. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Site Administration Support Providers Business Consulting Service Providers Data Analytics Solution Providers Advertising Agency Partners Social Media Platforms Targeted Marketing Service Providers |
MANAGE YOUR COOKIE SETTINGS | You can change your browser settings to delete or prevent certain cookies from being stored on your computer or mobile device without your explicit consent. The ‘help’ section in your browser should provide information on how to manage your cookie settings. Find out how this works for your browser here: Internet Explorer: https://support.microsoft .com/help/17442 /windows-internet-explorer- delete-manage-cookies Mozilla Firefox: http://support.mozilla.com/ en-US/kb/Cookies Google Chrome: http://www.google.com/support/chrome /bin/answer.py?hl=en& answer=95647 Safari: http://support.apple. com/kb/PH5042 Opera: http://www.opera.com/browser/ tutorials/security/privacy/ Adobe (flash cookies): http://www.adobe.com/privacy/ policies/flash-player.html Google Chrome App: https://support.google. com/accounts/answer/ 61416?co=GENIE.Platform% 3DAndroid&hl=en These websites will also help you understand more about how Cookie-based advertising works and how you can manage your Cookie Settings: http://www.aboutads .info/choices http://www.youron linechoices.eu/ Network Advertising Initiative opt-out page: http://optout.network advertising.org/?c=1 You can learn more about the laws governing the use of “Cookies” here: http://ec.europa.eu/ipg/ basics/legal/cookies /index_en.htm |
XVI. USER-GENERATED CONTENT (UGC) ACQUISITION FROM SOCIAL MEDIA | |
PROCESSING | We invite you to provide your images to us via social media platforms by following specific instructions such as “#yesadidas”. We will be using the images you provide for our campaign communications. We will obtain rights to your image through a licence agreement in the form of our terms and conditions. By submitting your images via social media platforms to us, you will agree for us to use your images as described in the licence agreement. |
LEGAL BASIS | Performance of Contract |
CATEGORIES OF PERSONAL DATA | Identity information: your social media handler Community information: images, videos, comments, sound recordings and other files provided through the social media platform promoting adidas Social Media Interaction and Activity information |
RETENTION PERIOD | Duration of licence agreement and statutory limitation period in case of any disputes. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates Event Partners (where applicable) UGC Support Partners Advertising Agency Partners Social Media Platforms IT Cloud Solution Providers (where applicable) |
XVII. PUSH NOTIFICATIONS (IN-APP COMMUNICATION) | |
PROCESSING | When you use the adidas app, we use push notifications in this app to communicate with you concerning the purposes stated in this Policy. This includes information that relates to purposes based on the Performance of Contract (such as your purchase). You can switch off push notifications at any time using “Settings” in your mobile devices. However, if you switch off push notifications, we may need to contact you via emails for important messages relating to your purchase. |
LEGAL BASIS | Performance of Contract |
CATEGORIES OF PERSONAL DETAILS | Mobile Device information |
RETENTION PERIOD | For as long as you use the app and not switched Push Notification off. |
CATEGORIES OF RECIPIENTS | adidas Data Controllers adidas AG, its Subsidiaries and Affiliates |
XVIII. OPERATION OF ADIDAS RUNNING FEATURES | |
PROCESSING | We process your personal data to be able to provide you with a seamless user experience when using adidas Running. This includes any data processing that is necessary for the use of the specific features you want to use, e.g. the comparison of activity data with those of other users, if you participate in a leaderboard ranking or a challenge. |
LEGAL BASIS | Performance of Contract |
CATEGORIES OF PERSONAL DATA | Membership Administration Information Identity Information Contact Information Browsing Information Mobile Device Information Correspondence Image and Recording (if available to adidas) Personal Opinion (if available to adidas) Measurements (if available to adidas) Payment, Purchase and Transaction Information (if available to adidas) Social Media Interaction and Activity (if available to adidas) Fitness Activity Information (if available to adidas) Behavioural and Preference Information (if available to adidas) |
RETENTION PERIOD | Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract. |
CATEGORIES OF RECIPIENTS | adidas AG Subsidiaries and Affiliates Data Analytics Solution Providers IT Cloud Solution Providers CRM Solution Providers |
Unless specified otherwise, the information requested is necessary to us. If you do not provide us with all the information as requested and/or do not allow us to process the information accordingly, we will not be able to keep your complete record of information, thus affecting our ability to accomplish the above stated purposes.
6. What does adidas do when we transfer your Personal Data outside of Vietnam?
Depending on the Personal Data processing activity, upon receiving your permission, your Personal Data is shared with different “Categories of Recipients”. These Recipients may include other adidas Group entities and third parties that provide services to us, including the Categories of Recipients identified in Section 5 above. The countries to which your Personal Data may be transferred are the European Union including Ireland, Germany, Austria and the Netherlands, Switzerland, the USA, the United Kingdom, Singapore, Thailand and Malaysia. Where the recipient is located outside Vietnam, we have implemented necessary measures such as signing the EU Standard Contractual Clauses approved by the EU Commission or selecting vendors that certify and comply with the EU-US and Swiss-US Privacy Shield Framework. We comply with all local legal requirements to ensure your Personal Data is secured and safe when it is being transferred to a different country (including access).
7. How do we secure your Personal Data?
We implement appropriate technical and organisational measures to address the risks corresponding to our use of your Personal Data, including loss, alteration, or unauthorised access to or unauthorised use of your Personal Data, and empowering you to exercise your rights. We require our service providers to do the same through contractual agreements. However, you should be aware that any transmission of your Personal Data through the internet is at your own risk. We can only protect your Personal Data when we have it.
8. What are your rights and how can you exercise them?
Under the applicable data protection laws in the EU/EEA countries and Vietnamese laws, you have the rights listed and explained in Section 9 below. We also provide you with instructions on how to exercise each right. We need to confirm your identity before we can handle your requests. When we refuse your request for legal reasons, we will tell you why.
9. Questions, Complaints, and Support – who and how you can get in touch with them?
adidas Customer Service |
ASK CUSTOMER SERVICE |
adidas Privacy Team and the Data Protection Officer |
adidas Singapore Pte. Ltd. 128 Beach Road, #19-01 Guoco Midtown, Singapore |
For all enquiries concerning your privacy and personal data, please contact us under the “ASK CUSTOMER SERVICE” section via HELP.
YOUR RIGHT | HOW TO EXERCISE YOUR RIGHT |
Get a copy of your Personal Data You have the right to obtain a copy of your Personal Data, if it does not have negative effect on other people. | Contact Customer Service for support. Reason: Privacy and Data Handling. Subject: A Copy of My Personal Data. |
Access to information about your Personal Data You have the right to know whether or not we use your Personal Data, as well as the following information: a) why we have your Personal Data; b) what categories of data we have; c) what we do with your Personal Data; d) who has access to your Personal Data (and where they are); e) where your Personal Data might be transferred to; f) how long we are keeping your Personal Data; g) if you didn’t provide your Personal Data directly to us, how did we get them; h) your rights under applicable laws and the possibility to restrict processing; and i) if we use your Personal Data for any automated decision-making; and j) in some cases, you have the right to know how our automated decision-making works, if the decision significantly affects you. | Step 1 Log in to Running app.com. Step 2 Click "Home”. Step 3 Click “Account & Data” on the left-hand side of the screen. Step 4 Select one of the following options: 1) “EXPORT DATA”; or 2) “REQUEST DELETION” on the right-hand side of the screen. Step 5 Check your email and follow instructions we provided in the email. Please note that your request will not be processed if you did not verify your email address, and the request will be deleted after 30 days. If you haven’t verified your email yet, you can request a new confirmation link by clicking "Send a new confirmation email" on Running app.com. Step 6 Check your email again within 30 days and click on the link to retrieve your file you requested OR get confirmation for your data deletion. Step 7 Repeat Steps 1- 6 if you wish to execute another request. |
Make sure your Personal Data are correct You have the right to make sure we are using the accurate details about you. | Log in to your account and make the corrections yourself; or Contact Customer Service for support. Reason: Privacy and Data Handling. |
Delete your Personal Data You have the right to ask us to delete your Personal Data if: a) we no longer need it for a specific purpose, for example, a contract or a legal requirement; or b) you withdraw the consent you provided if we asked for your consent when we collected your Personal Data; or c) if you object to our use of your Personal Data based on legitimate interests we have identified, including direct marketing activities, unless we can demonstrate the compelling need of the legitimate interests. | Please see the Steps 1 through 7 under “Access to information about your Personal Data” in the second row of this table. For Step 4, choose “REQUEST DELETION”. |
Restrict us from sharing your Personal Data Your Personal Data is only shared to any third party with your consent. | You have the option to restrict us from sharing your Personal Data to any third party. |
Restrict how we use your Personal Data You have the right to stop us from doing certain things to your Personal Data when: a) you don’t think we are using the right Personal Data; b) you don't want us to delete your Personal Data, but you also don't think we are complying with the law; c) you want to make a legal complaint against us, but we want to delete the data; or d) you challenge our explanation of our use based on a "legitimate interest". When you successfully restrict how we use your Personal Data, we will only use your Personal Data with your consent, or unless it is required by law. | Log in to your account and make the corrections yourself; or Contact Customer Service for support. Reason: Privacy and Data Handling. Subject: Privacy – Restrict Processing |
Obtain a portable file so you can share it with another company You have the right to obtain a portable file that contains the Personal Data you provided to us where the legal basis is either consent or the performance of contract. The file will provide you with the Personal Data you actively and knowingly provided to us, including data passively obtained by us when you use our service or products. | Please log-in to your account, go to “Personal Information” and click on “Your Personal Data”. You will receive an encrypted .json file to the designated email address. |
Withdraw your consent When we use your Personal Data based on your consent, you have the right to change your mind and withdraw your consent at any time. | 1. Log into your adidas Running App account. 2. Click ”Notifications”. 3. Deselect “App News”, “Offers & Discounts, or “General News & Special Offers”. |
Challenge the decision generated by our automated decision-making process When we use automated decision-making tools or processes that lead to an outcome which produces a legal effect (such as Payment Fraud Detection), you have the right to understand the logic involved, the significance and possible consequences of this process. You also have the right to request human intervention, especially when this is used to conclude a contract with us. You can challenge our decision by expressing your opinion. | Contact Customer Service for support. Reason: Privacy and Data Handling. Subject: My Credit Card is declined – automated processing? |
File a complaint with your local data protection supervisory authority If you are not happy with how we have handled your Personal Data, or how we have responded to your rights provided here, you have the right to make a complaint against us with your local data protection supervisory authority. | Contact a data protection supervisory authority |
10. Updates and Notification of Updates
We review and update the Privacy Policy periodically to reflect any changes resulting from our day-to-day business operations. You can always check the date of the Privacy Policy to find out when we last made any changes. We will notify you when we make significant changes that you must be aware of.
11. adidas Data Recipients
11.1. General Information
We may disclose your personal data to the following parties (Data recipients):
if this is necessary, for the purposes listed above,
if you have instructed us to do so (e.g. if you connect your account to a partner platform),
to exercise or protect the rights and interests of adidas, our users and personnel, or
if you have (explicitly) consented beforehand.
We distinguish between the following categories of Data recipients to whom we disclose personal data:
agents, sub-contractors, vendors or third party service providers, such as courier services, telecommunications, technical services, debt recovery, market research and data analytics services;
any other party to whom you authorise us to disclose your personal data to;
our marketing and business partners in connection with marketing promotions, products and services;
our corporate clients;
amongst the adidas corporate group and its related corporations or affiliates;
our professional advisers, such as our lawyers and accountants;
banks, payment processing service providers, financial institutions and their respective service providers;
our successor-in-title, prospective seller or buyer of any part or the whole of our business, in connection with a merger, acquisition or sale of any part or the whole of the adidas business; and
social media sites such as Facebook, Twitter or Google.
11.2. Sharing of personal data with other users
The use of certain features of our Products includes the sharing of personal data with other users. These features would not work without such data sharing, i.e. it is necessary to fulfill our user agreement with you. Using the following features includes sharing of personal data with, i.e. making personal data visible to other users:
Your adidas Running membership profile and Followers - We distinguish between “private profiles” and “public profiles” where all profiles are private by default and only become public on your request. As long as your profile is a “private profile”, other users will see your name, your profile picture, your background image, your biography text, your country of residence and the common followers you have with the user visiting your profile. Moreover, all users will see the number of Followers you have and the amount of people you follow. When your profile is a “private profile”, other users can send you a request to become your Followers. Once you accept this request, all information, which according to your privacy settings, you share with Followers, will become visible for those users, your Followers. Once you make your profile a “public profile”, your profile is fully visible to all other users of our Products by default unless for certain data, like GPS maps for example, you determine otherwise in the privacy settings. This means by making your profile a public profile, all privacy settings are set to “everybody” and all other adidas Running App users can access your AR info, activity records and details, statistics and the connections you have without even following you. In case you don't want to have certain data publicly available, you need to change the corresponding privacy setting accordingly. In any case other users, except blocked users, might follow a public profile without a need to request.
News Feed - Our Products allow viewing and sharing information, including through posts, likes, and comments in the so-called News Feed. Certain actions, such as tracking an activity, starting a training plan or upgrading to Premium Membership, will be automatically posted in the News Feed. By default setting, only you and your Followers will be able to see such information in their News Feed. You can modify the visibility anytime in your privacy settings.
Leaderboard - If you track an activity, you will automatically join a weekly/monthly Leaderboard of accumulated distance, or duration among the people you follow. This means, once you are followed by someone, you will be part of their Leaderboard. You can opt out of this at any time in your privacy settings.
Challenges - We offer participation in competitions with a specific goal in a defined timeframe (“Challenges”). There are different challenges available for registered users to join, potentially with the possibility to win prices. You can compare your ranking/success with all users who are part of the same challenge. First name, last name, profile picture and activity information (e.g. total distance, total duration) are visible to all participating users.
Groups and Communities - Every user can join and create groups and can invite other users to these groups. Users can also be invited to communities. Within a group or community, you can interact with other members and compare your rankings. First name, last name, profile picture and activity information (e.g. total distance, total duration) are visible to all users within a specific group or community you joined. LIVE Tracking - The Products include a "LIVE Tracking" feature, which enables your Followers in our Products to see the activity information, including heart rates, of your current sports activity. LIVE Tracking can either be completely activated or completely deactivated. LIVE Tracking is deactivated by default and can be activated at your own discretion. Once activated, it stays activated for new activities, unless you turn it off again. By activating the feature, you accept the responsibility for such activation at your own risk. If you do not want to give other people access to your current position/localization, LIVE Tracking should not be activated.
Sharing of personal data with other services
We allow you to connect our Products to several Partner Platforms and/or other services and share personal data you have recorded or generated with or in our Products there. Please note that once personal data is transferred to a Partner Platform or other service, the further processing of this data will take place outside our responsibility and according to the partners Privacy Notice. Partner Platforms - If you connect your adidas Running membership profile with your accounts on Partner Platforms and decide to import or share personal data from our products there, this includes the transfer of your data to the platform upon your explicit instruction to do so by connecting your adidas Running App account to your respective Partner Platform account. Social Networks and Messenger Services - If you decide to share finished activities via a social media platform or messenger service you may use on your mobile device, you explicitly instruct us to share the respective data with the messaging service you have chosen.
11.3. Sharing of personal data with our Service Providers (“Processors”)
We share your personal data with Processors that help us to conduct the processing activities necessary for the purposes listed above. Our Processors will have access to your personal data as reasonably necessary to perform their tasks on our behalf and are obligated to protect it and not to disclose or use it for other purposes. We use processors of the following categories: Advertising Solution Providers, Data Analytics Solution Providers, Cloud Solution Providers, CRM Solution Providers, Messaging Service Providers, Payment Service Providers, Authentication Solution Providers and Research/Survey Solution Providers.
11.4. Sharing of personal data with adidas and partners
We share personal data with adidas Data Recipients where this is necessary for the purposes listed above. This is relevant, for example, if we organize challenges or competitions together with adidas, adidas runners or other partners. To be able to, for example, determine the challenge results or to award the winners, certain information might be shared with adidas, adidas Runners or the respective other partner. We will inform you if this is the case and will let you know, which information this concerns in a separate notice for the respective challenge.
11.5. Sharing of personal data with authorities and lawyers and tax advisors
We share personal data with authorities and lawyers and tax advisors where this is necessary for the purposes listed above.
11.6. Data Selling
We do not sell any of your personal data to third parties.
11.7. adidas Data Recipients
You can find a more detailed list of adidas Data Recipients who process your personal data under adidas’ instructions below, however this list is subject to change as necessary.
COMPANY | SERVICE |
adidas International Marketing B.V. | Netherlands | adidas Running App operations & Marketing Services |
adidas AG and adidas affiliates | globally | Consumer Relationship Management |
Concentrix | Malaysia, India | Customer Service |
Facebook (WhatsApp, Instagram) | USA | Social Media Interaction |
Twitter | USA | Social Media Interaction |
Google | USA | Social Media Interaction |
Google Analytics | USA | Analytics |
Adobe Analytics | USA | Analytics |
Anatwine Limited | UK | Consumer Experience |
MediaCom | UK | Advertising Partner |
Wunderman | Email Marketing Services |
Where your personal data may be used by non-adidas entities via adidas platforms, applications or elsewhere for their own purposes, please consult the privacy notice of the said entity for more information about how they handle your personal data.