Privacy Policy
S4U SRL
Last updated: 07/02/2025
S4U SRL collects and processes personal data as part of its business activities. The processing of such data is governed by data protection regulations, particularly the General Data Protection Regulation (GDPR).
We are committed to protecting your privacy and ensuring the confidentiality of your personal information.
Through this policy, we inform you — as a client, prospect acting as an individual, representative or employee of a client, supplier or prospect, website user (www.sport2u.be, the "site"), or anyone concerned by our publications (hereinafter referred to as "Users" or "you") — about how we use your personal data and your rights regarding its use.
This policy complements the information you receive when interacting with S4U and informs you of your rights concerning data use.
S4U SRL reserves the right to update this privacy policy at any time. We encourage you to consult this page regularly to stay informed about how we protect the personal data we collect.
1. Who processes your personal data?
S4U SRL is the legal entity responsible for processing your data (hereinafter referred to as “we”).
S4U SRL is a Belgian company headquartered at 12, Route de Ramillies, 5310 Eghezée, Belgium, and registered under company number 0506 824 604.
2. What data do we process and for what purposes?
We collect personal information from Users in various ways, such as when Users visit our site, register, create a client account, place an order, complete a form, or communicate with us.
2.1. Contract and client database management
Purpose and legal basis: We use your data to manage our client database and contracts, including negotiation, execution, support, and after-sales service. This processing is necessary for contract performance or pre-contractual steps (GDPR Art. 6(1)(b)). For data about individuals other than the contracting party (e.g., representatives), we rely on legitimate interest (GDPR Art. 6(1)(f)).
Data categories:
-
Identification data (name, client number...)
-
Job function or company mandate
-
Contact data (email, postal address, phone numbers, preferred language...)
-
Financial identifiers (bank account number, banking institution...)
-
Professional identifiers (VAT/company number)
-
Purchase and service data
-
Contract execution data
-
Delivery data (addresses, proof of delivery...)
-
Billing and payment data (dates, currencies, billing entity...)
Retention: Data is retained for the duration of the business relationship plus 10 years. If no contract is concluded, data is retained up to 12 months post-negotiation.
Sources: Data is generally provided by clients or generated during the contract. We may supplement it via public sources (e.g., BCE).
Third-party sharing: Relevant contract data may be shared with third parties (e.g., suppliers, installers, carriers) or banking institutions.
2.2. Webshop purchase management
Purpose and legal basis: To manage online orders and secure client accounts. This is necessary for contract execution or pre-contractual steps (GDPR Art. 6(1)(b)).
Data categories: Same categories as in section 2.1, with the addition of:
-
Authentication data (login credentials, connection logs...)
Retention: Data is retained for the contract duration plus 10 years. Inactive accounts may be deleted after 18 months.
Third-party sharing: Same as above. Payment data is transmitted only to your selected payment provider and is not stored by us.
2.3. Contact requests
Purpose and legal basis: We process your inquiries based on legitimate interest to respond (GDPR Art. 6(1)(f)). If related to contract conclusion, see 2.1.
Data categories:
-
Identification data
-
Status (individual/professional)
-
Company details (name, VAT number...)
-
Contact data
-
Subject of the inquiry
Retention: Data is retained during negotiation or response processing, and no more than 12 months if no contract is concluded.
2.4. Marketing and business development
Client acquisition: We collect contact data for prospecting based on legitimate interest (GDPR Art. 6(1)(f)).
Data categories:
-
Identification data
-
Company function
-
Sector of activity
Sources: Public sources or direct contact (e.g., business card, trade fairs).
Retention: No longer than 12 months if no contract is concluded.
Commercial communication: We send marketing communications to existing clients based on legitimate interest (GDPR Art. 6(1)(f)). You may opt out at any time. For newsletter subscribers (non-clients), we rely on consent (GDPR Art. 6(1)(a)).
Data categories: Same as above, plus purchase history.
Retention: For clients, during the commercial relationship plus 3 years.
Analytics and statistics: We analyze aggregated client and contract data based on legitimate interest to understand our market (GDPR Art. 6(1)(f)). No individual profiling.
Data categories: All relevant and available data for analysis.
Website and social media content: We may post images or videos from events/projects using one of the following legal bases: consent (GDPR Art. 6(1)(a)) or legitimate interest (GDPR Art. 6(1)(f)). You may request removal at any time.
Data categories: Images and metadata.
2.5. Contest management
Purpose and legal basis: To manage contests and prize distribution, based on contract necessity (GDPR Art. 6(1)(b)).
Data categories:
-
Identification data
-
Contact data
-
Contest participation and results
Retention: Up to 12 months after contest closure.
2.6. Fiscal and accounting compliance
Purpose and legal basis: To fulfill legal accounting and tax obligations (GDPR Art. 6(1)(c)).
Data categories: Same as in sections 2.1 and 2.2.
Third-party sharing: Data may be shared with tax authorities and external accountants.
2.7. Rights management, complaints, legal matters
Purpose and legal basis: To manage complaints, litigation, or legal obligations, based on legitimate interest or legal requirement (GDPR Art. 6(1)(f) or (c)).
Data categories: Any relevant data, including third-party sources (e.g., attorneys).
Retention: As required by law or for legal defense.
Third-party sharing: Data may be shared with legal professionals or courts as needed.
3. How are your data stored?
We use secure EU-based IT services for administrative management. Our website and webshop are hosted by WIX.com Ltd, based in Israel (adequate protection recognized by the EU Commission). Transfers within Wix’s network are covered by intra-company agreements and standard contractual clauses.
Social media platforms may transfer data to the U.S. based on their respective safeguards:
4. Your rights
You have the following rights, subject to GDPR conditions:
-
The right to be informed
-
The right of access (obtain a copy)
-
The right to rectification or erasure
-
The right to object (e.g., to direct marketing)
-
The right to restrict processing
-
The right to data portability
-
The right to withdraw consent at any time
You can contact us at hello@sport2u.be to exercise these rights. Proof of identity may be required.
You can also contact the Belgian Data Protection Authority (www.autoriteprotectiondonnees.be) for more information or to file a complaint.