PRIVACY POLICY – TRACK&FIELD
Publication date July 3, 2025
TRACK&FIELD CO. S.A. (“Track&Field”), a Brazilian limited company, with CNPJ/ME nº 59.418.806/0001-47, with registered office at Rua Cipriano Barata, 456, 3rd floor, Ipiranga, CEP. 04201-000, São Paulo/SP, a company that operates in the retail trade of sportswear and wellness products, and in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) and the Brazilian General Data Protection Law (Federal Law nº 13,709/2018), Track&Field, as Controller, will be responsible for the processing of your Personal Data, or any of the Track&Field group companies listed below.
a) TRACK&FIELD CO S.A., registered with CNPJ/ME under nº 59.418.806/0001-47, with headquarters at Rua Cipriano Barata 456, 3rd floor, Ipiranga, CEP. 04201-000, São Paulo/SP.
b) TRACK & FIELD FRANCHISING LTDA., a legal entity governed by private law, registered with the CNPJ/ME under nº 13.772.537/0001-11, with headquarters at Rua Dr. Eduardo de Souza Aranha, 387, Conjuntos 81, 82, 91 and 92, CEP: 04543-121, City and State of São Paulo.
c) FRATEX LICENCIAMENTO DE MARCAS LTDA., a legal entity governed by private law, registered with the CNPJ/ME under number 31.190.867/0001-80, with headquarters at Rua Dr. Eduardo de Souza Aranha, 387, set 91, CEP: 04543-121, City and State of São Paulo.
d) TFSPORTS EVENTOS ESPORTIVOS LTDA, legal entity governed by private law, registered with CNPJ ME under nº 21.448.508/0001-27, with registered office at Rua João Ferreira Camargo, nº 106, Tamboré, CEP. 06460-060, city of Barueri, State of São Paulo.
e) RETAIL SOLUTIONS ASSESSORIA E CONSULTORIA DE MERCHANDISING LTDA., a legal entity governed by private law, registered with the CNPJ/ME under nº 17.093.892/0001-15, with registered office at Rua João Ferreira Camargo, nº 106, Tamboré, CEP. 06460-060, city of Barueri, State of São Paulo.
f) TFC FOOD & MARKET LTDA, a legal entity governed by private law, registered with the CNPJ/ME under number 42.318.728/0001-06, with headquarters at Avenida Brigadeiro Faria Lima, 2232, store 256/24 Setor Café, CEP: 01489-900, City and State of São Paulo.
As Operator of your Personal Data, T.FIELD, LDA., with registered office at Largo Geraldes Castelo Lopes, Number 12, 4ºA, Bloco B. Lisboa, 1750-204, in Lisbon, registered at the Commercial Registry Office of Lisbon under the unique registration and legal person number 517.852.853.
Definitions:
- We will use “Track&Field”, “we” or “our” to refer to Track&Field;
- We will use “you”, “your”, “user” or “customer” to refer to the customer, user or anyone using this Site or application TFSports, or make purchases in your physical store;
- We will use “Site” or “Platform” to refer to the website https://eu.tfstore.com/;
- We will use “App TFSports” to refer to the application of TFSports;
- We will use “GDPR” to refer to the General Data Protection Regulation (Regulation (EU) 2016/679);
The Policy is divided as follows to facilitate its understanding:
- Who does this Policy apply to?
- What is Personal Data?
- What Personal Data does Track&Field collect and for what purposes?
- With whom can Track&Field share your Personal Data?
- Can I cancel marketing actions?
- Does Track&Field transfer Personal Data internationally?
- What are your rights as a holder of Personal Data?
- How long is your Personal Data stored?
- How does Track&Field protect your Personal Data?
- How to contact Track&Field about your Personal Data?
- Effectiveness and updates to the Privacy Policy
This document should be read in conjunction with our Cookies Policy and ours Terms of Use , which provide an overview of our Site.
ACCEPTANCE OF THIS POLICY WILL OCCUR WHEN THE CUSTOMER ACCESSES, USES, REGISTERS ON THE WEBSITE, ON THE TESPORTS APP, OR AT ANY TRACK&FIELD PHYSICAL STORE. YOUR ACCESS, USE OR REGISTRATION ON THE SITE OR THE TESPORTS APP WILL INDICATE THAT YOU AFFIRMATIVELY AGREE TO THE USE OF YOUR PERSONAL DATA FOR EACH OF THE PURPOSES DESCRIBED BY US HERE.
Track&Field takes the protection of its customers' Personal Data very seriously. For this reason, there will be no collection, storage or any form of processing of customers' Personal Data in any other way or for purposes other than those explained later in this Policy, unless there is any legal obligation to be fulfilled by Track&Field. Through this Policy, Track&Field will disclose the technical and organizational measures employed to ensure the protection of its customers' Personal Data.
1. WHO DOES THIS POLICY APPLY TO?
This Privacy Policy applies to end-user customers of Track&Field products, whether they are users of the Site, users of the App TFSPorts or physical store customers.
2. WHAT ARE PERSONAL DATA?
Personal Data is considered to be all information that can identify or make identifiable a person (“Personal Data”), such as, for example, your name, IP address and address.
Sensitive Personal Data. Track&Field does not collect or process Sensitive Personal Data that may lead to discrimination against its holder, such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, union membership, processing of genetic data, biometric data, data relating to a person's health or sexual life. THAT IS, TRACK&FIELD'S ACTIVITIES SET FORTH IN THIS POLICY DO NOT INCLUDE THE COLLECTION AND PROCESSING OF SENSITIVE PERSONAL DATA.
3. WHAT PERSONAL DATA DOES TRACK&FIELD COLLECT AND FOR WHAT PURPOSES?
When using our Site or App TFSports, or during any of your experiences in our physical store, Track&Field may collect Personal Data in three ways: information provided by you, information automatically collected when you enter our Site or information from reliable sources.
Valuing transparency and customer privacy, below are the purposes for which Track&Field processes Personal Data, as well as the respective legal bases that legitimize their use:
Information provided by you
| Purpose | Personal Data | Legal Basis |
|---|---|---|
| Provision of Services by the Site |
Email, name, NIF, telephone, address, credit card details
|
Execution of the contract or pre-contractual procedures |
|
Invoice issuance in the physical store
|
Name, NIF and address | Compliance with legal obligation |
|
Registration in the physical store for the purpose of sending communication
|
Name, email, NIF, address, telephone and birthday | Legitimate Interest |
|
Marketing-related actions and communications
|
Name, address and email | Legitimate Interest |
| Newsletter |
Name and email
|
Consent |
| Help Center |
Name, email, NIF, telephone, date of purchase, invoice number and last 4 digits of the card
|
Legitimate Interest |
| Fraud and credit risk prevention |
Name, email, NIF, address, telephone, purchase date, order value and order items.
|
Legitimate Interest |
Information that is automatically collected when you enter the Site
| Purpose | Personal Data | Legal Basis |
|---|---|---|
| Improve our products |
IP, date and time of access, geolocation and browser type
|
Legitimate Interest |
| Ad recommendations and personalizations |
IP, Information about clicks, pages accessed, duration of visit on pages accessed, purchase history, terms and products searched and typed on the Site, abandoned shopping carts
|
Consent |
Information collected when accessing the App
| Purpose | Personal Data | Legal Basis |
|---|---|---|
| Registration and login |
Name, nickname, email, mobile phone, NIF, Passport Number, modalities and/or events you are interested in, address, nationality, geolocation, token to access the application.
|
Execution of the contract or pre-contractual procedures |
| Payment |
Name, NIF, Passport Number, nationality, date of birth, gender, address, credit card details (credit card number, name of holder, last 4 digits of the card, brand, expiration date, CVV), sport, size of the athlete's shirt.
|
Execution of the contract or pre-contractual procedures |
| Actions and communications related to Track&Field group marketing |
Email, name, modalities and/or events you are interested in, cell phone, nationality, geolocation and t-shirt size of the Athlete, gender.
|
Consent |
|
Actions and communications related to marketing and offering products and services, from sponsors of events hosted on the App and companies from the sponsors' economic group
|
Email, name, NIF, date of birth, sports and/or events you are interested in, cell phone, nationality, geolocation and t-shirt size of the Athlete, gender. | Consent |
| Sending essential or requested communications | Name, email, last 4 digits of the card, token for sending push notifications. |
Execution of the contract or pre-contractual procedures
|
| Support |
Email and other information that the user sends during the service, e.g. name, telephone number, NIF and credit card details (last 4 digits of the card, brand, expiration date).
|
Execution of the contract or pre-contractual procedures |
Information from trusted sources
| Personal Data | Purpose | Legal Basis |
|---|---|---|
|
Information about you that we obtain from public bodies and credit agencies
|
Fraud and credit risk prevention | Legitimate Interest |
4. WITH WHOM CAN TRACK&FIELD SHARE YOUR PERSONAL DATA?
Track&Field may operate together with other companies in various activities, including hosting Personal Data and managing Track&Field's internal systems. Whenever possible, we will use mechanisms to anonymize this Personal Data, aiming to preserve your privacy as much as possible. Therefore, we reserve the right to share Personal Data only with the companies listed below:
Suppliers: We hire other companies to assist us in Track&Field activities. Therefore, we need to share your Personal Data with these companies. For example: transport companies, payment operators, media agencies, registration authenticators, hosting service companies, among others. Our suppliers are authorized to use Personal Data only for the specific purposes for which they were contracted and, therefore, they will not use your Personal Data for purposes other than the provision of contractually agreed services.
Payment Methods: Track&Field uses companies that help with payment for events and, therefore, may share users' Personal Data with these companies. These companies are authorized to use Personal Data only for the specific purposes for which they were contracted and, therefore, they will not use your Personal Data for purposes other than the provision of contractually agreed services.
Sponsors of Events Organized on the App TFSports: Track&Field hosts it on the App TFSports events organized by the company TFSPORTS EVENTOS ESPORTIVOS LTDA (“TF Sports”), part of the Track&Field group of companies, supported by sponsors to provide their services. Therefore, we may share users' Personal Data with sponsors who support and endorse the services provided by TFSports, and they may share Personal Data with companies within their economic groups to offer products or services.
Credit Protection: Track&Field works with partners who help check electronic fraud, create a score and perform statistical analyzes on our platforms. Therefore, your Personal Data will be shared with them and stored in their databases. We emphasize that our partners may only process your Personal Data for the specific purposes for which they were contracted and will not use your Personal Data for purposes other than the provision of contractually agreed services.
Track&Field makes every effort and acts in good faith to protect and guarantee the privacy of your Personal Data. When we share your Personal Data with any of the companies mentioned above, we limit the sharing to only the Personal Data necessary to perform their functions and we contractually guarantee that such Personal Data is used only to the extent necessary to provide services on our behalf, and for Track&Field group activities or to comply with legal requirements. Likewise, we require everyone to commit to the same level of protection for their Personal Data that Track&Field would have if it were processing them directly; This includes the obligation not to use your Personal Data for any purpose other than the contracted one, in addition to confidentiality obligations and information security standards, among others. Track&Field always makes commercially reasonable efforts to ensure that our third-party service providers keep your Personal Data safe and secure.
TO GUARD AND PROTECT YOUR RIGHTS, TRACK&FIELD HAS THE RIGHT TO ACCESS, READ, PRESERVE AND DISCLOSE ANY PERSONAL DATA THAT IT BELIEVES IS NECESSARY TO COMPLY WITH A LEGAL OBLIGATION OR COURT ORDER; TO ENFORCE THIS POLICY, WEBSITE TERMS OF USE , COOKIE POLICY AND OTHER AGREEMENTS AS WELL AS TO PROTECT THE RIGHTS, PROPERTY OR SAFETY, WHETHER OF THE COMPANY, ITS EMPLOYEES, CUSTOMERS OR OTHERS.
5. CAN I CANCEL MARKETING ACTIONS?
Track&Field can send emails, SMS or WhatsApp about products and campaigns. If the customer prefers, they can request to cancel marketing actions at any time, simply clicking on the link to unsubscribe in the footer of all emails, canceling their subscription to receive new SMS or contacting the email indicated in item 10.
6. DOES TRACK&FIELD TRANSFER PERSONAL DATA INTERNATIONALLY?
Yes. Your personal data may be transferred to, and stored in, countries outside the European Union, including Brazil, where Track&Field has its headquarters. The transfer of personal data outside the European Union may occur for the purposes of processing by our headquarters or service providers acting on our behalf. It is important to know that we store your Personal Data in the cloud, with servers currently located in other countries, such as Brazil, the United States of America and the United Kingdom, but which can be moved at any time.
When transferring personal data outside the European Union, we will take appropriate measures to ensure that your personal data continues to be protected in accordance with the standards required by the GDPR. These measures include, among others, the implementation of standard contractual clauses approved by the European Commission or other recognized transfer mechanisms that provide an adequate level of protection.
7. WHAT ARE YOUR RIGHTS AS A HOLDER OF PERSONAL DATA?
Track&Field is concerned about the security of its Personal Data and wants customers to be aware of all their rights regarding the processing of their Personal Data. In this sense, below is a brief explanation and examples of some of these rights:
(i) Request for access to Personal Data: This right allows the customer to request and receive a copy of the Personal Data processed by Track&Field. To help protect your privacy and security, we will take reasonable steps to verify your identity.
(ii) Request for correction of incomplete, inaccurate or outdated data: This right allows customers to request the correction and/or rectification of their Personal Data at any time, if they identify that any of them is incorrect. However, to carry out this correction, Track&Field will need to verify the validity of the Personal Data provided.
(iii) Request for anonymization, blocking or deletion of unnecessary, excessive or unlawfully processed Personal Data: This right allows you to request the anonymization, blocking or deletion of Personal Data from the Track&Field database. All Personal Data collected will be anonymized, blocked or deleted from servers when requested or when it is no longer necessary or relevant for the provision of services, unless there is another reason for its retention, such as the need to maintain Personal Data to comply with a legal obligation or protect Track&Field's rights.
(iv) Right not to provide or withdraw consent at any time: the customer has the right not to provide or to withdraw consent; however, this will not affect the legality of any previously carried out processing.
(v) Right to object to certain processing of Personal Data: the customer also has the right to object to certain processing purposes. In some cases, Track&Field may demonstrate that it has legitimate reasons to process the Data, which override the customer's rights, if, for example, it is strictly essential for the functionality of the services and activities.
(vi) Right to data portability: the customer may request the transfer of their Personal Data to another entity when the processing is based on their consent or the execution of a contract and is carried out by automated means.
Track&Field will endeavor to respond to all requests within 15 (fifteen) days from the date of receipt. Occasionally, it may take longer than fifteen (15) days if the order is particularly complex or if the customer has submitted multiple orders, or if the order was placed through a channel other than the one indicated below. In such cases, we will notify and keep you updated on the progress of the order.
If there are any questions about these issues and how the customer can exercise these rights, Track&Field is committed to resolving them through the following contact channel: privacidade@tf.com.br.
8. HOW LONG IS YOUR PERSONAL DATA STORED?
The storage period for Personal Data is 5 (five) years, which may vary depending on the type and purpose of processing or upon request from the holder. However, in the latter case, Track&Field, through the privacy area, will analyze whether or not such Personal Data can be deleted in accordance with current law.
To determine the appropriate retention period for Personal Data, Track&Field considers the amount, nature and sensitivity of the Personal Data, the potential risk of harm resulting from unauthorized use or disclosure of your Personal Data, the purposes of the processing, whether those purposes can be achieved by other means and the applicable legal requirements. In any case, if you have registered in a Track&Field physical store or on the Site, your Personal Data will be kept as long as you keep your account active or for the time necessary to comply with any applicable legal obligations, as provided for by relevant legislation, such as consumer law and tax regulations.
9. HOW DOES TRACK&FIELD PROTECT YOUR PERSONAL DATA?
Track&Field adopts technical, administrative and organizational measures to protect customers' Personal Data against loss, unauthorized use or other abuse. Personal Data is stored in a secure operating environment that is not accessible to the public.
Track&Field strives to protect the privacy of the customer's account and the Personal Data it maintains in its records. We maintain procedural, technical and physical safeguards that help us prevent the loss, misuse or unauthorized access, disclosure, alteration or destruction of Personal Data provided by customers. To make your purchase secure, the Site transmits all data using SSL (Secure Socket Layer) certification, a standard method used on the internet to protect communications between internet users and websites, providing a secure purchase. However, a transmission of Personal Data over the Internet is not guaranteed to be completely secure. It is possible for third parties outside of our control to intercede or gain unauthorized access to transmissions or to unlawfully access transmissions or Personal Data.
Therefore, as it is not possible to guarantee the complete security of Personal Data transmitted to our Site, we ask for your cooperation to help us maintain a safe environment for everyone. If you identify or become aware of something that compromises the security of your information, you must contact Track&Field through the following contact channel: privacidade@tf.com.br.
10. HOW TO CONTACT TRACK&FIELD ABOUT YOUR PERSONAL DATA?
If the customer believes that their Personal Data has been used in a manner inconsistent with this Policy or with their choices as a data subject, or if they have other questions, comments or suggestions related to this Policy, the customer may contact Track&Field's DPO (Data Protection Officer), Mr. Rafael Arruda Nunes Junior, through the following means: privacidade@tf.com.br.
11. EFFECTIVENESS AND UPDATES TO THE PRIVACY POLICY
Track&Field is always looking to improve its activities and, therefore, this Policy may be updated. Therefore, we recommend that the customer periodically visit and read this document to stay informed of any changes.
This Privacy Policy comes into force from the date of its publication, with the most recent and published version of this document always applicable. The Privacy Policy may be changed periodically, and any relevant changes will be communicated.
SITE COOKIE POLICY
By registering or browsing the Site, visitors and Users accept this Cookies Policy and Privacy Policy.
The Cookies Policy and the Privacy Policy are an integral part of the Website Terms of Use.
Track&Field aims, through this Cookies Policy, to inform visitors and Users about the use of cookie technology for the purposes of monitoring and improving its Site.
Cookies are small fragments of information that are installed on your computer or other device with internet access, with a limited duration, and that help to store and, sometimes, track information about the use of the Site.
The Site uses cookies mainly to:
(i) Monitor the interests, behavior and demographics of visitors and Users of the Site;
(ii) Analyze the pages visited and searches carried out by visitors and Users, in order to improve the Website's commercial and promotional initiatives;
(iii) Measure the effectiveness of promotions; and
(iv) Collect information about the number of visitors and Users who accessed the Site.
Cookies or other similar systems installed by third parties may be found on the Site's pages. This policy only refers to the use of cookies by Track&Field or by third parties that provide services on its behalf. Cookies and other technologies used by advertisers and third-party partners are their sole and exclusive responsibility.
Most browsers automatically accept cookies, but visitors and Users can configure their browser to block or remove cookies. However, blocking or removing cookies used on the Site may prevent visitors and Users from fully enjoying its features.
To block or remove cookies, follow the procedures indicated by the manufacturers of each browser:
Google Chrome: https://support.google.com/chrome/answer/95647?hl=pt-PT
Internet Explorer: http://windows.microsoft.com/pt-pt/internet-explorer/delete-manage-cookies#ie=ie-11
Firefox: https://support.mozilla.org/pt-PT/kb/limpar-cookies-e-dados-de-site-no-firefox
Safari: https://support.apple.com/pt-PT/105082
The procedures indicated above are provided by the official websites of the respective manufacturers, and Track&Field has no responsibility for losses or damages suffered by visitors and Users as a result of their use.