Last Updated: 10 December 2025.
Table of Contents
1. What does this Privacy Policy tell you?
2. Who are the adidas entities and the Electronic System Operators (ESOs) collecting and managing your Personal Data?
3. Who is the Data Protection Officer for the adidas Data Controllers, and the Data Protection Officer for adidas Indonesia?
4. What Personal Data does adidas collect and use (Categories of Personal Data)?
5. What does adidas do with your Personal Data and why (Purpose, Processing, Legal Basis)?
a. SITE (ADIDAS DOMAIN) OPERATION AND APP OPERATION
b. DOMAIN AND NETWORK SECURITY AND USER AUTHENTICATION
c. GLOBAL CREDENTIAL TO ALL ADIDAS PLATFORMS – USER EXPERIENCE
d. SALES OF ADIDAS PRODUCTS – ONLINE AND OFF-LINE ORDER
e. PAYMENT FRAUD DETECTION
f. PRODUCT DELIVERY
g. ELECTRONIC DELIVERY TRACKING
h. BUSINESS OPERATIONAL ANALYTICS
i. CUSTOMER SERVICE
j. PERSONALISED MARKETING MESSAGES VIA EMAIL (Newsletter Sign-Up)
k. PERSONALISED MARKETING MESSAGES VIA EMAIL (via existing contract)
l. TARGETED MESSAGES ON 3RD-PARTY ADVERTISING PLATFORMS
m. ADICLUB MEMBERSHIP ADMINISTRATION – WHERE APPLICABLE
n. PRIVATE EVENT REGISTRATION
o. OPEN EVENT REGISTRATION
p. PRODUCT RESEARCH AND DEVELOPMENT
q. LEGAL OBLIGATION – COOPERATION WITH LAW ENFORCEMENT AND REGULATORY AUTHORITIES (INCLUDING COURTS
r. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES (“COOKIES NOTICE”)
s. USER-GENERATED CONTENT (UGC) ACQUISITION FROM SOCIAL MEDIA
t. PUSH NOTIFICATIONS (IN-APP COMMUNICATION)
u. OPERATION OF ADIDAS RUNNING FEATURES
6. What does adidas do when we transfer your Personal Data outside of Indonesia?
7. How do we secure your Personal Data?
8. What are your rights and how can you exercise them?
9. Questions, Complaints, and Support – who and how you can get in touch with them?
10. Updates and Notification of Updates
11. adidas Data Recipients
1. What does this Privacy Policy tell you?
This Privacy Policy tells you how PT adidas Indonesia (adidas Indonesia) collects and processes the data which identifies you or could be used to identify you either on its own or in combination with other information, whether directly or indirectly through an electronic or non-electronic system (Personal Data), while you browse https://www.adidas.co.id as well as when you interact with our different platforms, portals and applications using your Personal Data, including the adidas mobile application (adidas app) and the adidas Running mobile application (Running app).
This Privacy Policy provides information on:
a. adidas Data Controllers and Electronic System Operators who collect and manage your Personal Data;
b. the Data Protection Officer;
c. the different types of Personal Data we use (Categories of Personal Data)
d. why and how we use your Personal Data (Purpose; Processing; Lawful basis);
e. how long your Personal Data is kept (Retention period);
f. other recipients of your Personal Data (Recipients);
g. transferring your Personal Data out of Indonesia (International Data Transfer);
h. your rights under the applicable Indonesian Personal Data Protection Regulations prevailing from time to time; and
i. any automated decision-making technologies used by us and how it works (where necessary).
2. Who are the adidas entities and the Electronic System Operators (ESOs) collecting and managing your Personal Data?
adidas Indonesia collects your Personal Data when you interact with adidas in Indonesia and is the Electronic System Operator (ESO) responsible for protecting your Personal Data which you provide to it during such interaction.
When you interact with adidas through www.adidas.co.id or our different platforms, portals and applications, including the adidas app and the Running App, your Personal Data may be collected and processed on behalf of adidas Indonesia by adidas AG.
These are the adidas Data Controllers jointly responsible with adidas Indonesia for protecting your Personal Data and complying with the Law No. 27 of 2022 concerning Personal Data Protection and other applicable Indonesian Personal Data Protection Regulations governing the use of your Personal Data (Personal Data Protection Regulations). They are jointly responsible for determining why (Purpose), how (Processing), and if (Lawful Basis) your Personal Data is used:
a. adidas AG - Adi-Dassler Str. 1, 91074 Herzogenaurach, Germany (adidas AG)
b. PT adidas Indonesia - Gedung Menara Astra, Lantai 16, Unit #16 (A – F), Jalan Jend. Sudirman Kav. 5-6, Kelurahan Karet Tengsin, Kecamatan Tanah Abang, Kota Administrasi Jakarta Pusat 10220
(collectively, the adidas Data Controllers).
adidas Indonesia and/or any third party service provider that it appoints to carry out the Personal Data Processing (including managing the relevant adidas platforms, websites, portals and/or apps) will be deemed as ESOs for the purpose of and under the Personal Data Protection Regulations. The third party service provider may carry out Personal Data Processing for and/or on behalf of adidas Indonesia.
3. Who is the Data Protection Officer for adidas Indonesia?
The Data Protection Officer for adidas Indonesia can be contacted at: DPO_ID@adidas.com
4. What Personal Data does adidas collect and use (Categories of Personal Data)?
These are the categories of Personal Data we collect directly or indirectly from you:
|
Identity information – includes: name [first, last, initials], Date of Birth, e-mail address, unique consumer identifier number (including your adiClub membership number), nickname, password, social media identifiers and information passed along to us via your Facebook or adidas Running account, your device fingerprint, and gift card codes that are assigned to you. We use it to verify your identity.
Contact information - includes: your phone number, shipping and billing address, e-mail address, Messenger ID, social media handle, any other communication channel you have used to contact us for more information. We use it to contact you for different reasons depending on the purposes stated below. Location information - includes: your residential location, current log-in location [IP address], GPS location (if you wish to share us, for example through your mobile device settings), or the specific adidas site you have visited that might give us clues about where you are. We use it to help you find what you are looking for at your current location
Size information - includes: shoe size, clothes size, height, weight, chest, waist, hip, inseam, body shape, heel-toe measurement. We use it to make sure your gear fits.
Purchase information - includes: your payment information (credit card number), payment risk profile (provided to us by our payment risk solution), shopping cart (your ordered items), delivery details, shipping and billing address, customer order number, purchase history with adidas, transaction ID, and any other information related to your purchase. We use it to complete your order on adidas sites and apps, in adidas stores, or other selling platforms.
Behavioural and Profile information- includes: your shopping history, Wishlist items, your browsing behaviour, your browsing preferences, your shopping preferences, in-store interactions, your workout history, product reviews, social media interactions with us, and any other intelligence we have about you to help us learn you as a consumer better, including “Community information”. We use it to know you better as a consumer, so we can send you marketing messages containing only products and services that we think you might be interested in.
Community information – includes: information provided by you when you participate various adidas events and communities either as a trainer, team member, a participant or as a promotor of our events, including for example: pictures, videos, your nickname, your team, your interests and preferences, your feedback, leader boards, event participation, joined groups, and registration details. We use this information to organise the events and communities, and to know more about you as a consumer. Social Media information – includes: information obtained through your interaction with us on various social media channels such as Facebook, Instagram, Google, etc., including: any social media information that is publicly available such as your social media handles, social media interactions and public postings, your “Likes” and other reactions, your social media connections, your photos that are public, or those you send to us by mentioning us or following our social media posts by using “handles” or “hashtags”. We obtain this information from the social media network (e.g. Facebook, Snapchat, Instagram, etc.) directly or indirectly through third-party agencies we have agreements with.
Device information – includes: Information about your device or browser that give us an idea about your browsing behaviour or device usage. Your device information is collected by our app, and your browser information is collected by our cookies, tags, and pixels. This is often required for network security purposes. This includes, but not limited to: IP address, date and time of the visit, how long you remained on our website, the referral URL (if you came to our site via a different site or an advertisement), the pages visited on our site, your browser type, device type, versions, operating system.
Activity information - includes: fitness data (for example workout start and end times, activity type, sports category), sensor data (for example step goal, duration, pace, distance, calories, heartbeat, RunScore and speed), and other data related to your adidas Running app. We use it to help you improve your performance goals and improve your user experiences and identify what products might be best for you based on your exercise patterns.
Correspondence – includes: conversation we have when you contact customer service, the emails you write us about our products or services, the complaints you address to us via post, e-mail, fax, or call, notes we prepared on your feedback, call back from our Customer Service to you, voice recordings made by Customer Service when you consent to your calls with our Customer Service agents being recorded, and any other communication or correspondence between you and adidas Customer Service teams and/or personnel/service providers, and any other communication between you and adidas personnel. We ask you for your consent before recording Customer Service calls for quality assurance purposes. Preference information - includes: preferred language, log-in location, Wishlist items, preferred shipping address, browsing preferences, our correspondence with you, your adidas product reviews. We use it to give you convenience when you visit and/or shop on our sites and apps.
adiClub information – includes: Unique Member Identifier (member ID), date you became a member, store ID (if you signed up in a retail store), source ID, country and brand of your original membership, membership points, engagement history, rewards history, membership vouchers associated to members. All the information the listed here will be kept for as long as you are an adiClub member.
|
5. What does adidas do with your Personal Data and why (Purpose, Processing, Legal Basis)?
adidas collects and uses your Personal Data for various purposes:
|
Purpose |
Legal Basis |
|
I. Site (adidas Domain) Operation And App Operation |
Legitimate Interest & Consent |
|
II. Domain And Network Security And User Authentication |
Legitimate Interest & Consent |
|
III. Global Credential To All adidas Platforms – User Experience |
Legitimate Interest & Consent |
|
IV. Sales Of adidas Products - Online And Off-Line Order |
Performance of Contract & Consent |
|
V. Payment Fraud Detection |
Performance of Contract & Consent |
|
VI. Product Delivery |
Performance of Contract & Consent |
|
VII. Electronic Delivery Tracking |
Consent |
|
VIII. Business Operational Analytics |
Legitimate Interest & Consent |
|
IX. Customer Service |
Legitimate Interest & Consent |
|
X. Personalised Marketing Messages Via Email (Newsletter Sign-Up) |
Consent & Consent |
|
XI. Personalised Marketing Messages Via Email (Via Existing Contract) |
Legitimate interest & Consent |
|
XII. Targeted Messages On 3rd-Party Advertising Platforms |
Consent |
|
XIII. adiClub Membership Administration – Where Applicable |
Performance of Contract & Consent |
|
XIV. Private Event Registration |
Performance of Contract & Consent |
|
XV. Open Event Registration |
Legitimate Interest & Consent |
|
XVI. Product Research And Development |
Legitimate interest & Consent |
|
XVII. Legal Obligation - Cooperation With Law Enforcement And Regulatory Authorities (Including Courts) |
Legal Obligation |
|
Collecting Your Device Information On Our Website Using Cookies, Pixels, Tags, And Similar Technologies (Cookies Notice) |
Legitimate Interest | Consent |
|
XIX. User-Generated Content (UGC) Acquisition From Social Media |
Performance of Contract & Consent |
|
XX. Push Notifications (In-App Communication) |
Legitimate Interest & Consent |
|
XXI. Operation of adidas Running Features |
Performance of Contract & Consent |
In this section, we explain:
a. When and Why do we need your Personal Data (Purpose)?
b. What allows us to use your Personal Data for each Purpose (Legal basis)?
c. What do we do to your Personal Data for each Purpose (Processing)?
d. Which of your Personal Data do we need for each Purpose (Categories of Personal Data)?
e. How long do we keep your Personal Data for each Purpose (Retention period)?
f. With whom (types of service providers) do we share your Personal Data to achieve the purpose (Categories of recipients)?
In general, we retain personal information for as long as necessary to carry out the purposes for which we originally collected it and for other purposes described in this Policy. Unless otherwise stated under the Retention Period section under each Purpose listed below, we:
(i) retain personal information associated with your adiClub account for up to four (4) years from your last interaction with us, unless a longer or shorter retention period is required by law, is necessary in the course of legal proceedings or is otherwise needed for a particular purpose under applicable law; and
(ii) if you don't have an adiClub account, but have purchased adidas Products online as a guest, we retain information related to your purchase for the same period of time as described for adiClub account holders above.
Examples of ways you may "interact" with us and extend this timeline include the following: making an online purchase, opening or interacting with a marketing email from us, logging into your adiClub account and writing a product review. You, or your adiClub account, may be deemed inactive if you have not interacted with us for four (4) years since your last interaction with us, and your personal information (including your adiClub account, if any) will be permanently deleted from our system. We may inform you of any such upcoming deletion of your personal information via e-mail, if you have provided us with your e-mail address before.
|
I. SITE (ADIDAS DOMAIN) OPERATION AND APP OPERATION |
|
|
PROCESSING |
To run the sites that are connected to the adidas domain and the adidas app, fix bugs to make sure you always see the site the way we intended, and monitor compliance with our Terms and Conditions, we screen all traffic to our site and analyse data that is received by our servers.
|
|
LEGAL BASIS |
Legitimate Interest & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Device information
Behavioural and Profile information Preference information |
|
RETENTION PERIOD |
Browsing Session
|
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs
|
|
II. DOMAIN AND NETWORK SECURITY AND USER AUTHENTICATION |
|
|
PROCESSING |
To protect our domains, detect unusual activities, and prevent security threats and protect our site-visitors from unauthorised accesses (such as hackers), we screen all traffic to our sites, and authenticate user log-in information using tokens to verify the details you provide to us and compare it with other available information, such us the credentials you have provided directly to adidas or other platforms (such as adidas Running or Facebook) or information that is available in the public domain to ensure only “authorised” users have access to our sites. |
|
LEGAL BASIS |
Legitimate Interest & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Device information
Behavioural and Profile information Preference information |
|
RETENTION PERIOD |
Browsing Session
|
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs
|
|
III. GLOBAL CREDENTIAL TO ALL ADIDAS PLATFORMS – USER EXPERIENCE |
|
|
PROCESSING |
We know you don’t like to remember usernames and passwords, or having to register multiple times. |
|
LEGAL BASIS |
Legitimate Interest & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information (username, password, email) adiClub information (for adiClub members only) Preference information |
|
RETENTION PERIOD |
Your account duration or Inactivity + four (4) years |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs
|
|
IV. SALES OF ADIDAS PRODUCTS - ONLINE AND OFF-LINE ORDER |
|
|
PROCESSING |
To process your online and/or in-app orders, make sure your payment is received, comply with the requirements under our Terms and Conditions (3. Purchase Terms) (for selling you the products) including invoice processing, delivery, personalisation services, exchanges and refunds, click and collect. Your order cannot be completed if our payment fraud detection solutions flag your transaction as suspicious and potentially fraudulent. |
|
LEGAL BASIS |
Performance of Contract & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information |
|
RETENTION PERIOD |
Duration of contract and statutory limitation period of 5 (five) years from the date of collection. We need to keep the information in case of any legal disputes concerning the contract. |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
V. PAYMENT FRAUD DETECTION |
|
|
PROCESSING |
We combine the purchase information you provide to us with other information we obtain through our third-party payment risk and fraud prevention service providers to ensure any purchases are legitimate, or you do not purchase our products in violation with our terms and conditions. This means depending on the outcome of the analysis of your information, we may reject your order, and decline your payment. This is an automated decision-making process that is required to conclude our sales contract with you. |
|
LEGAL BASIS |
Performance of Contract & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information |
|
RETENTION PERIOD |
Duration of contract and statutory limitation period of 5 (five) years from the date of collection. We need to keep the information in case of any legal disputes concerning the contract. |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
VI. PRODUCT DELIVERY |
|
|
PROCESSING |
Once you have successfully placed an order, we use your contact details (home and/or shipping address) and other purchase information to deliver the products you purchased to you. |
|
LEGAL BASIS |
Performance of Contract & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information: Name |
|
RETENTION PERIOD |
Duration of contract and statutory limitation period of 5 (five) years from the date of collection. We need to keep the information in case of any legal disputes concerning the contract. |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
VII. ELECTRONIC DELIVERY TRACKING |
|
|
PROCESSING |
This is a service provided on request of the consumer by our Delivery Partners. |
|
LEGAL BASIS |
Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information |
|
RETENTION PERIOD |
As determined by our Delivery Partner but, in any case, we will keep this data for a period of 5 (five) years from the date of collection. |
|
CATEGORIES OF RECIPIENTS |
Delivery Service Providers |
|
VIII. BUSINESS OPERATIONAL ANALYTICS |
|
|
PROCESSING |
We need to know how we do as a business. This is in the interest of our shareholders, our board members, our employees, and our partners. For this purpose, we need to analyse different categories of information to understand how our products are selling in different markets, what are the popular features of our products, what worked and what didn’t in terms of our marketing and advertising campaigns, our product designs and distribution strategy, our website design and overall user experience, so we can establish, implement, and evaluate our business strategy. |
|
LEGAL BASIS |
Legitimate Interest & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information: Unique Consumer Identifier (only) |
|
RETENTION PERIOD |
When using analytics services provided by the vendors identified above, we are required to retain data for the period specified by these vendors. You can find the retention period indicated by the vendors here: |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
IX. CUSTOMER SERVICE |
|
|
PROCESSING |
We collect your Personal Data to tell you when the product you like is available upon your request and respond to your questions and concerns through various communications channels we make available to you. |
|
LEGAL BASIS |
Legitimate Interest & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information |
|
RETENTION PERIOD |
Statutory limitation period of 5 (five) years from the date of collection. We need to keep the information in case of any legal disputes. |
|
CATEGORIES OF RECIPIENTS |
Customer Service Provider |
|
X. PERSONALISED MARKETING MESSAGES VIA EMAIL (Newsletter Sign-Up) |
|
|
PROCESSING |
We send you marketing messages that we think you would be interested (“personalised”) to the email address you provide to us because you signed up to our email newsletters. To send you “personalised” messages, observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behaviour using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various categories of Personal Data from you. We use different analytics tools to understand what your behaviour means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you. |
|
LEGAL BASIS |
Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information |
|
RETENTION PERIOD |
We retain it for a period of four (4) years from the date of collection as long as you do not withdraw your consent for us to send you emails or object to us processing your Personal Data for marketing purposes by unsubscribing from our adidas newsletter. |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
XI. PERSONALISED MARKETING MESSAGES VIA EMAIL (via existing contract) |
|
|
PROCESSING |
We send you marketing messages that we think you would be interested in (“personalised”) to the email address you provide to us during a purchasing contract. To send you “personalised” messages, observe your online (and sometimes, where applicable, offline) behaviour, and analyse your behaviour using analytics to best estimate what product lines you might be interested in, and you can benefit from. This requires us to collect various categories of Personal Data from you. We use different analytics tools to understand what your behaviour means in terms of your like and dislike of our various product lines, and to understand the impact (success rates) of the messages delivered to you. |
|
LEGAL BASIS |
Legitimate interest & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information |
|
RETENTION PERIOD |
We retain it for a period of four (4) years from the date of collection as long as you do not object to us processing your Personal Data for marketing purposes, including sending of marketing messages, by unsubscribing from our adidas newsletter. |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
XII. TARGETED MESSAGES ON 3RD-PARTY ADVERTISING PLATFORMS |
|
|
PROCESSING |
We use third-party advertising platforms, such as Facebook, Google, YouTube, Instagram, etc. to send you messages that are targeted at you, based on your behaviour and browsing pattern, at specific times and locations of these platforms to increase the efficiency of our advertising campaigns. We use third-party solutions such as Google Audience and Facebook Custom Audience to help us do a better job at targeting our campaigns and messages for our consumers. Your Personal Data is shared with the third-party advertising platforms, and they will attempt to match your profile in their database to determine the optimal time and place (the page you are browsing) to show you an advertisement from adidas. We also need to analyse necessary information to understand the impact of our campaigns. If you don’t accept that we track you for this purpose, you will still see adidas advertisements on other platforms at random. |
|
LEGAL BASIS |
Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information |
|
RETENTION PERIOD |
We retain it for a period of 5 (five) years from the date of collection as long as you do not withdraw your consent. |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
XIII. ADICLUB MEMBERSHIP ADMINISTRATION – WHERE APPLICABLE |
|
|
|
This section applies when you create and register a membership account and become an adiClub member. |
|
1. Compliance with Membership Terms and Conditions |
|
|
PROCESSING |
When you apply and create a membership account, we collect and use your Personal Data to administer your account and comply with the adiClub Terms and Conditions. |
|
LEGAL BASIS |
Performance of Contract & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Membership Administration Information |
|
RETENTION PERIOD |
Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract. |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
2. Profiling for Personalised Content, Experience, and Business and Marketing Analytics |
|
|
PROCESSING |
We use your Personal Data to create personalised content for you and make sure we interact with you in a manner that you are more likely to keep and maintain your membership, respond to our messages, and to continue purchase adidas products and use adidas platforms. |
|
LEGAL BASIS |
Legitimate Interest |
|
CATEGORIES OF PERSONAL DATA |
Membership Administration Information |
|
RETENTION PERIOD |
Duration of membership and for as long as you do not object to our legitimate interest by deleting your Personal Data |
|
CATEGORIES OF RECIPIENTS |
adidas AG Subsidiaries and Affiliates |
|
XIV. PRIVATE EVENT REGISTRATION |
|
|
PROCESSING |
When you sign up for an event we organise that have limited spots, we use the Personal Data you provide to reserve a spot for you. Your Personal Data will be used according to the Terms and Conditions associated with the event. |
|
LEGAL BASIS |
Performance of Contract & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information |
|
RETENTION PERIOD |
Duration of the event and statutory limitation period of 5 (five) years from the date of collection in case of any disputes. |
|
RECIPIENTS |
adidas Controller organizing the event. |
|
XV. OPEN EVENT REGISTRATION |
|
|
PROCESSING |
We often also organize events that are open to everyone. We use the Personal Data you provide to keep you inform of the events you are interested in. |
|
LEGAL BASIS |
Legitimate Interest & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information |
|
RETENTION PERIOD |
Duration of the event and statutory limitation period of 5 (five) years from the date of collection in case of any disputes. |
|
RECIPIENTS |
adidas Controller organizing the event. |
|
XVI. PRODUCT RESEARCH AND DEVELOPMENT |
|
|
PROCESSING |
We conduct analysis to research improve our products and services. This includes asking you questions in surveys, asking you for feedback, asking you to test our products and provide us with a review, asking other service providers to conduct market and product research for us, try new technologies in our product that might collect Personal Data to stay ahead of the competition. We retain this information based on our “legitimate interest”, so by participating in any product review or survey, you agree that this is our legitimate interest. Where you wish to object to this legitimate interest, we will anonymise your information, so it is no longer Personal Data. |
|
LEGAL BASIS |
Legitimate Interest & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information (only if required by the project) |
|
RETENTION PERIOD |
The duration of the project and statutory retention period of 5 (five) years from the date of collection stated to protect our IP rights. |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
XVII. LEGAL OBLIGATION - COOPERATION WITH LAW ENFORCEMENT AND REGULATORY AUTHORITIES (INCLUDING COURTS) |
|
|
PROCESSING |
We are legally required to provide the relevant Personal Data for reasons including national and public security, crime prevention, investigation and prosecution, anti-money laundering, judicial proceedings, protection of other individuals’ rights and freedoms, and enforcement of civil claims, as and when requested, by way of valid requests, by the relevant law enforcement authorities. We may not be able to notify you if it is against the law to do so. |
|
LEGAL BASIS |
Legal Obligation |
|
CATEGORIES OF PERSONAL DETAILS |
All Categories of Personal Data as validly requested by the relevant law enforcement authorities and which directly relate to the relevant enforcement proceedings. |
|
RETENTION PERIOD |
For as long as required by the applicable laws relating to the specific law enforcement proceedings but, in any case, shall be for a period of 5 (five) years from the date of collection. |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
XVIII. COLLECTING YOUR DEVICE INFORMATION ON OUR WEBSITE USING COOKIES, PIXELS, TAGS, AND SIMILAR TECHNOLOGIES (COOKIES NOTICE) |
|
|
|
|
|
PROCESSING |
“REQUIRED” – site functionality and business operation. |
|
LEGAL BASIS |
Legitimate Interest & Consent |
|
PROCESSING |
“FUNCTIONAL” – website improvement and performance |
|
LEGAL BASIS |
Legitimate Interest & Consent |
|
PROCESSING |
“MARKETING” |
|
LEGAL BASIS |
Consent & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Device information |
|
RETENTION PERIOD |
The cookies, pixels, tags, and other similar technologies used to collect your device information and browsing behaviour information are stored in your browser for the session or for as long as you do not clear your browser cookie setting. |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
|
You can change your browser settings to delete or prevent certain cookies from being stored on your computer or mobile device without your explicit consent. The ‘help’ section in your browser should provide information on how to manage your cookie settings. |
|
XIX. USER-GENERATED CONTENT (UGC) ACQUISITION FROM SOCIAL MEDIA |
|
|
PROCESSING |
We invite you to provide your images to us via social media platforms by following specific instructions such as “#yesadidas”. We will be using the images you provide for our campaign communications. We will obtain rights to your image through a licence agreement in the form of our terms and conditions. By submitting your images via social media platforms to us, you will agree for us to use your images as described in the licence agreement. |
|
LEGAL BASIS |
Performance of Contract & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Identity information: your social media handler |
|
RETENTION PERIOD |
Duration of licence agreement and statutory limitation period of 5 (five) years from the date of collection in case of any disputes. |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
XX. PUSH NOTIFICATIONS (IN-APP COMMUNICATION) |
|
|
PROCESSING |
When you use the adidas app, we use push notifications in this app to communicate with you concerning the purposes stated in this Privacy Policy. This includes information that relates to purposes based on the Performance of Contract (such as your purchase). You can switch off push notifications at any time using “Settings” in your mobile devices. However, if you switch off push notifications, we may need to contact you via emails for important messages relating to your purchase. |
|
LEGAL BASIS |
Legitimate Interest & Consent |
|
CATEGORIES OF PERSONAL DETAILS |
Device information |
|
RETENTION PERIOD |
For as long as you use the app and do not switch off Push Notifications. We will, however, retain or store the relevant data in this case for a period of 5 (five) years from the date of collection. |
|
CATEGORIES OF RECIPIENTS |
adidas Data Controllers and/or ESOs |
|
XXI. OPERATION OF ADIDAS RUNNING FEATURES |
|
|
PROCESSING |
We process your personal data to be able to provide you with a seamless user experience when using adidas Running. This includes any data processing that is necessary for the use of the specific features you want to use, e.g. the comparison of activity data with those of other users, if you participate in a leaderboard ranking or a challenge. |
|
LEGAL BASIS |
Performance of Contract |
|
CATEGORIES OF PERSONAL DETAILS |
Membership Administration Information |
|
RETENTION PERIOD |
Duration of contract and statutory limitation period. We need to keep the information in case of any legal disputes concerning the contract. |
|
CATEGORIES OF RECIPIENTS |
adidas AG Subsidiaries and Affiliates |
6.What does adidas do when we transfer your Personal Data outside of Indonesia?
When we transmit your Personal Data outside of Indonesia, we will ensure that such transmissions are carried out:
(i) in coordination with the Ministry of Communications and Informatics (MoCI) and/or the relevant government authorities; and
(ii) in compliance with all reporting requirements to MoCI, including submitting the required reports prior to and after the transmissions are completed,
as required under the Personal Data Protection Regulations. We will, where possible, ensure that the recipient country has a level of personal data protection that is equal or higher than that under the Personal Data Protection Regulations; and where this is not the case, we will ensure that either:
(i) there is adequate and binding personal data protection for your Personal Data; or
(ii) there is express consent from you the individual concerned for the transfer of your Personal Data (typically by way of a checkbox stating the countries that we are transferring it to).
7. How do we secure your Personal Data?
We implement appropriate technical and organisational measures (including storing your personal Data in encrypted forms) in accordance with the prevailing Personal Data Protection Regulations and so as to address the risks corresponding to our use of your Personal Data, including but not limited to any loss, alteration, or unauthorised access to your Personal Data, and empowering you to exercise your rights. We require our service providers to comply with and adhere to the same standards through contractual agreements.
8. What are your rights and how can you exercise them?
Under the Personal Data Protection Regulations, you have the rights listed and explained below. We also provide you instructions on how to exercise each right. We need to confirm your identity before we can handle your requests, so the timeline for our handling of your request only starts when you successfully confirm your identity. This ensures that we respond to requests. When we refuse your request for legal reasons, we will tell you why.
For all enquiries concerning your privacy and personal data, please contact our Data Protection Officer at DPO_ID@adidas.com.
|
YOUR RIGHT |
HOW TO EXERCISE YOUR RIGHT |
|
Access to information about your Personal Data |
Please review the adidas Privacy Policy. |
|
Make sure your Personal Data are correct You have the right to make sure we are using the accurate details about you. |
Log in to your account and make the corrections yourself. |
|
Delete your Personal Data |
If you wish to delete your Personal Data partially: Log in to your account and make the corrections yourself. |
|
Restrict how we use your Personal Data |
Log in to your account and make the corrections yourself, to remove the Personal Data you do not want us to process; or |
|
Withdraw your consent |
Unsubscribe from our Newsletters: |
|
Object when we process your Personal Data based on “Legitimate Interest” |
If you are objecting to email marketing: |
|
Challenge the decision generated by our automated decision-making process |
Contact Customer Service for support. |
|
To receive notifications on any data protection failures or data breaches which affect our Personal Data processing electronic system |
|
9. Questions, Complaints, and Support – who and how you can get in touch with them?
|
adidas Customer Service |
|
ASK CUSTOMER SERVICE: https://www.adidas.co.id/en/contact-us |
|
adidas Privacy Team (for all users) |
|
Data Protection Officer |
10. Updates and Notification of Updates
We review and update the Privacy Policy periodically to reflect any changes resulting from our day-to-day business operations. You can always check the date of the Privacy Policy to find out when we last made any changes. We will notify you when we make significant changes that you must be aware of.
11. adidas Data Recipients
You can find a list of adidas Data Recipients who process your personal data under adidas Data Controllers’ instructions below. The list is subject to change as necessary.
|
COMPANY / COUNTRY(IES) OF DATA PROCESSING: |
SERVICE : |
|
adidas Singapore | Singapore |
Mobile Apps for adidas App and CONFIRMED |
|
Salesforce | USA, France and Singapore |
Checkout, Customer Relationship Management, Newsletter Subscription, Customer Service |
|
Amazon Web Services | USA, Ireland |
Account Management |
|
IBM | Netherlands, Germany |
Order Management |
|
adidas | Ireland |
Data Privacy Platform |
|
BazaarVoice | USA |
Product Review Analytics |
|
Adobe Analytics | UK |
Data Analytics |
|
Google Analytics | USA |
Data Analytics |
|
Amplitude | Germany |
Data Analytics |
|
Appsflyer | Ireland, Belgium |
Data Analytics |
|
PT Satria Antaran Prima Tbk | Indonesia |
Delivery |
|
PT Andiarta Muzizat | Indonesia |
Delivery |
|
PT Nusa Satu Inti Artha |
Payment Processing |
|
Rapyd | Iceland and Singapore |
Payment Processing |
|
PT Sinar Digital Terdepan |
Payment Processing. |
Where your personal data may be used by non-adidas entities via adidas platforms, applications or elsewhere for their own purposes, please consult the privacy notice of the relevant entities for more information about how they handle your personal data. In any case, however, you should still consult your rights under this Privacy Policy.