Skip to main content

privacy policy

Privacy policy


1. A FEW WORDS ABOUT OUR PRIVACY POLICY

Your privacy is very important to us and we believe that you should always keep the control over your personal information. your personal information. This Privacy Policy informs you about how the European Olympic Committees (the “EOC ” or the “Data Controller”) process the personal information related to your use of the services offered on the https://sporteurope.org/ . (“Website”).

We recommend that you read this Privacy Policy in its entirety.

Some of the services offered by the EOC may be subject to specific privacy notices; if so, we will be sure to give you all the relevant information from time to time.

2. WHO WE ARE

The Data Controller is the European Olympic Committees, with registered office in Via della Pallacanestro 19 – 00135 Rome – Italy.

For any request regarding the processing of your personal data, you may contact us, at any time, by sending an e-mail to [email protected] or by sending a communication to the registered office address by regular mail

The Data Controller has appointed a Data Protection Officer, who can be contacted by sending an e-mail to [email protected].

3. WHICH CATEGORIES OF PERSONAL DATA WE PROCESS

The EOC will process, for the purposes and under the conditions set out in paragraph 4 below, the following common personal data:

· Identifying and contact information such as name, surname, age, nationality, e-mail, home address, telephone number;
· Images and videos published within the “Multimedia” websites’ section;
· Details about the web browser used and the IP address and any additional data inherent in browsing;
· Any other additional information you may have provided when contacting us through the Website.
We inform you that personal data of users who are younger than 16 years old will not be processed by the EOC, unless prior written authorization submitted by the parents or legal representatives of the minor.

4. WHAT IS THE PURPOSE OF PROCESSING AND LEGAL BASIS OF PROCESSING

We will process your personal data, both by manual and electronic means, for the purposes and according to the legal bases described below.

Purpose Legal Bases
a) To allow you to use the Website. Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract – Art. 6(1)(b) GDPR.
The provision of personal data is necessary for this purpose. If you fail to provide it, it will not be possible for you to use the Website.
b) To promote the sport, the Olympics’principles and other initiatives of the EOC through the publication of images or videos collected during events organized and promoted by the EOC. The data subject has given consent to the publication of his or her image within the EOC’s Website. – Art. 6(1)(a) GDPR. in the case in which the images depict minors under the age of 16, processing is subject to prior consent collected from the minor’s parents or legal representatives.
In some situations of public interest where consent is not required, the processing may be based on the legitimate interest pursued by the EOC. – Art. 6(1)(a) GDPR.
The provision of personal data is optional for this purpose.
for processing based on your consent you have the right to withdraw your consent at any time.
For processing based on our legitimate interest, you have the right to object at any time.
For any information regarding the exercise of your rights, please refer to the section 8 of this Privacy Policy.
c) To allow you to register and participate to our initiatives and events (such as the Volunteers’ Club). Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract – Art. 6(1)(b) GDPR.
The provision of personal data is necessary for this purpose. If you fail to provide it, it will not be possible for us to pursue your registration and participation.
d) To process and fulfill any requests submitted by you through the contact channels indicated on the Website (such as requests that relate to ticketing). Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract – Art. 6(1)(b) GDPR.
The provision of personal data is necessary for this purpose. If you fail to provide it, it will not be possible for us to undertake your requests.
e) To fulfill legal obligations and comply with requests from competent authorities.Processing is necessary for compliance with a legal obligation to which the controller is subject – Art. 6(1)(b) GDPR.

The provision of personal data is necessary for this purpose.
f) To protect our rights and those of our employees and partners, both in and out of court.The processing may be based on the legitimate interest pursued by the EOC or third parties. – Art. 6(1)(a) GDPR.

The provision of personal data is necessary for this purpose. However, you have the right to object at any time according to the section 8 of this Privacy Policy.
g) To carry out extraordinary transactions concerning the EOC (including mergers,acquisitions, corporate reorganizations, corporate restructuring), to the extent strictly necessary for the pursuit of such purpose and on the basis of the legitimate interest of the EOC following appropriate balancing against the fundamental rights and freedoms of data subjects. the processing may be based on the legitimate interest pursued by the EOC or third parties. – Art. 6(1)(a) GDPR.

The provision of personal data is necessary for this purpose. However, you have the right to object at any time according to the section 8 of this Privacy Policy.


5. FOR HOW LONG WE RETAIN PERSONAL DATA
:

Your personal data will be processed for as long as is strictly necessary to achieve the purposes for which they are collected and will be retained for different periods of time, depending on the purpose pursued. At the end of the stated retention period, your personal data will be deleted or anonymized. In particular, your personal data, processed for the purposes mentioned in Section 4 above, will be retained in accordance with the terms and criteria specified below:

– Purposes (a), (b), (c), (e) and (f): personal data collected for these purposes will be kept as long as strictly necessary for the fulfillment of these purposes, unless it is necessary to keep it longer in order to comply with a legal obligation, an order of an Authority, or to defend one of our rights.
– Purpose (d): personal data collected to fulfill your request will be kept until your request is fulfilled, unless it is necessary to keep it longer in order to fulfill a legal obligation, an order of an Authority, or to defend a right of ours.

More detailed information regarding data retention periods is available upon request by contacting us at the contact information provided in this Privacy Policy.

6. POSSIBLE RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA

To the extent necessary to pursue the purposes set forth in Section 4 above, your personal data may be transmitted to the following categories of entities:

(a) companies that provide services related and/or instrumental to the services offered by the Data Controller (e.g. companies that provide towards the EOC computer and telematic services, archiving and/or other administrative, accounting or legal services);

(b) consultants, attorneys, accountants of the Data Controller or other party involved in a corporate transaction or for rights protection purposes, as well as the party involved as a potential and/or actual transferee, purchaser etc.,;

(c) independent authorities, law enforcement or judicial and administrative authorities for their institutional purposes within the limits provided by law, as well as for the detection and prosecution of crimes, prevention and safeguard against threats to public security, to enable the EOC to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.

With regard to the personal data disclosed, the individuals indicated may act either as data processors or as data controllers, on the basis of a specific agreement for the processing of personal data with the EOC, or as autonomous data controllers, on the basis of their own privacy policy.

You may request at any time a detailed and updated list of such individuals and their privacy roles.

7. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

If it is necessary for the pursuit of the purposes set out in Section 4 above, your personal data may be transferred outside the European Economic Area (“EEA“).

Whenever your personal data is to be transferred outside the EEA and, in particular, to states that do not benefit from an adequacy decision by the European Commission, we will implement one of the safeguards for this purpose set out in the applicable data protection law, for example by signing the standard contractual clauses adopted by the European Commission, taking care to keep them up to date, and we will take any additional technical, organizational and/or contractual measures that are appropriate to ensure a level of protection for your personal data that is adequate and, in any case, essentially equivalent to that guaranteed within the EEA.

The list of countries outside the EEA to which we may transfer your personal data is available upon request by contacting us at the contact details given in this Privacy Policy.

8. YOUR RIGHTS

At any time and free of charge, you may exercise the following data protection rights.

Right Description
1. Right to Information – Art. 13,14 GDPR Right to be informed about the purposes and means of the processing of your personal data.
2. Right of access – Art. 15 GDPR Right to access your personal data (so-called “access request”). This right allows you to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, to obtain access to the personal data and to receive a copy of the personal data we hold about you.
3. Right to rectification – Art. 16 GDPR Right to request that we update or correct the personal data we hold about you. This right allows you to have incomplete or inaccurate data corrected, although we may need to verify the accuracy of new data you provide.
4. Right to erasure (‘right to be forgotten’) – Art. 17 GDPR Right to request the erasure of your personal data. This right allows you to ask us to erase or remove your personal data if the conditions specified in Article 17 GDPR are met.
5. Right to restriction of processing – Art. 18 GDPR Right to restrict the processing of your personal data. This right allows you to ask us to suspend the processing of your personal data in the cases provided for in Art. 18 GDPR.
6. Right to data portability – Art. 20 GDPRThis right allows you to receive from us your personal data, which has been provided to us, in a structured, commonly used and machine-readable format if the conditions specified in Article 20 GDPR are met.
7. Right to object – Art. 21 GDPRRight to object to the processing, in whole or in part, of your personal data if the processing is based on EOC’s legitimate interest and if in light of your specific situation you wish to object to the processing because you believe it affects your fundamental rights and freedoms. In some cases, we may be able to demonstrate compelling legitimate grounds that override your rights and freedoms for continuing to process your data.
8. Right of withdrawal – Art. 7 GDPR If the processing is based on your freely given consent, you have right to withdraw that consent at any time. However, the withdrawal of consent doesn’t affect the lawfulness of processing based on consent before its withdrawal.
9. Right to lodge a complaint – Art. 77, 79 GDPR You have the right to lodge a complaint with the judicial authority or the supervisory authority in the member stare where you. Usually reside, work, or of the place where a GDPR violation is alleged to have occurred.

A FEW WORDS ABOUT OUR PRIVACY POLICY

Your privacy is very important to us, and we believe that you should always keep the control over your personal information. This privacy policy informs you about how we access and use the information related to your use of the services offered on the Sport Europe Digital Ecosystem, through one or more of the assets: the Sport Europe website, event specific subdomains of this website such as the Bakuriani 2025 or Skopje 2025 websites, the Eurolympics mobile application, and other related mobile applications or platforms. We recommend that you read this privacy policy in its entirety.

WHO WE ARE

EOC is the Controller of the data collected through the Sport Europe Digital Ecosystem. Its registered office is in Via della Pallacanestro, 19, Palazzina CONI – “Villino Giulio Onesti” – 00135 Rome – Italy, Tel.(+39) 06 36 85 78 28, Fax (+39) 06 36 85 76 66.

HOW YOU CAN CONTACT US

If you would like to access, rectify or erase your personal information, you can do so by contacting our data protection officer here:

Data Protection Officer,
European Olympic Committees
Via della Pallacanestro 19 – 00135 Rome – Italy
Email: [email protected]

This Privacy Policy, as updated from time to time, explains what information about you is collected and how it is processed when you use digital services offered on the Sport Europe Digital Ecosystem. When you use the Sport Europe Digital Ecosystem, information about you will be collected and processed in accordance with this Privacy Policy by the EOC.

SERVICES COVERED BY THIS PRIVACY POLICY

This Privacy Policy applies to personal data collected through the use of the Sport Europe Digital Ecosystem.

REGISTRATION

In order to access the content of the Sport Europe Digital Ecosystem, registration will be necessary.

Registration is possible either by filling in the online form or through a social media account.

THE INFORMATION WE COLLECT:

Upon registration, we collect the following data:

  • First Name (Required)
  • Preferred Name/Username (Optional)
  • Last Name (Optional)
  • Email (Required)
  • Sports of interest (Optional)
  • National Olympic Committees of interest (Optional)

When the access/registration are performed through a social media account, we collect the following data:

  1. Data shared through Facebook:
    • – Name and profile picture (Required to register)
    • – E-mail address (Required)
    • – Birthday (Optional)
    • – Biography posts (Optional. Your public and private posts in your biography, including pictures and videos, information about the places mentioned or tagged to them and the type of reactions they receive).
    • – Sex (Optional)
    • – Likes (Optional)
    • – Current city (Optional)
  2. Data shared through Google:
    • – Name and Last Name (Required to register)
    • – Email address (Required to register)
  3. Data shared through Apple:
    • – Apple ID or email address (Required to register)
    • – Name (Required to register)

HOW WE USE YOUR INFORMATION

We use the personal information we collect to deliver and promote our services and events in conformity with the Terms and Conditions of the Sport Europe Digital Ecosystem, to inform and communicate with you and to perform promotional initiatives.

PURPOSES OF THE PROCESSING

Main purposes and legal basis

a. Registration and access to the Sport Europe Digital Ecosystem: the personal data that you share in the registration process will be processed in order to facilitate your registration and access to the Sport Europe Digital Ecosystem. Specifically, we will use the following personal data for these purposes:

  • Email address (required): necessary for registration and access to the Sport Europe Digital Ecosystem.
  • Username (optional): used to identify the user inside the Sport Europe Digital Ecosystem.
  • Country: used to identify the content to be displayed in the Sport Europe Digital Ecosystem (some content can be geo-blocked due to exclusivity agreements with broadcasters in some countries).
  • Identification data: name, last names, contact information.
  • Personal data: age, date and place of birth, social and demographic information, as well as tastes and preferences.

    The legal basis for the aforementioned purposes is that the data processing is necessary for the execution of a contract in which the interested is one of the parties under the provisions of Art. 6.1 b) of Regulation (EU) 2016/679 (GDPR).

b. In-app notifications related to the Sport Europe Digital Ecosystem: In the event that you access the Sport Europe Digital Ecosystem’s mobile application, you may receive in-app notifications related to the Sport Europe Digital Ecosystem (for example, about changes in the privacy policy, legal notice or terms and conditions, announcements about new functionalities, etc.). You can oppose to the reception of such communications at any time, through the corresponding section on the Sport Europe Digital Ecosystem. These notifications are displayed only when you are within the mobile application and the supplier will use your user ID to send you the notification.

The legal basis for the aforementioned purposes is that the data processing is necessary for the execution of a contract in which the interested is one of the parties under the provisions of Art. 6.1 b) of Regulation (EU) 2016/679 (GDPR).

c. Internal reports: We will process in aggregate form the personal data you have provided through the registration or social login, data on your usage of the Sport Europe Digital Ecosystem (user ID, device ID, device model, operating system and telemetry, for example, clicking on a particular content or the time you stay in the Sport Europe Digital Ecosystem environment) and finally, interactions with communications of any kind that you receive (e.g., clicking on the content of a communication) or in the communication with the Sport Europe Digital Ecosystem support, for the development of relevant metrics and statistics that allow us to analyse the use made of the Sport Europe Digital Ecosystem by the different user segments generated and the impact of the campaigns, assessing the interest that the campaigns have aroused among the aforementioned segments based on the data analysed. Data stored and processed under this purpose will be retained as anonymised data.

The legal basis for the aforementioned purpose is that the processing is necessary for the satisfaction of a legitimate interest under the provisions of art. 6.1 f) of Regulation (EU) 2016/679 (GDPR) consisting of the analysis of the users’ usage of the Sport Europe Digital Ecosystem and the impact of its campaigns to improve the services offered to users.

Use of the advertiser identifier (“IDFA”) on iOS devices (Apple)

The use of IDFA for the purpose of “Internal Reporting” requires the user’s tracking permission within Apple’s iOS operating system. In case the user has not given permission for the use of IDFA, SPE will be able to carry out such purpose using the device’s IDFV.

The legal basis for the aforementioned purpose is that the processing is necessary for the satisfaction of SPE’s legitimate interest under the provisions of art. 6.1 f) of the General Data Protection Regulation as well as Spanish Organic Law 3/18 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, and Regulation (EU) 2016/679 consisting of extracting learnings from the information provided and obtained from users that allows it to improve the Sport Europe Digital Ecosystem and optimize the communication campaigns it carries out based on the interest that these generate among the different groupings of users.

d. Push notifications about the content of the Sport Europe Digital Ecosystem: In the event that you access the Sport Europe Digital Ecosystem’s mobile application, you may receive push notifications regarding the content of the Sport Europe Digital Ecosystem through the usual notification system of your Smartphone or Tablet (e.g. alerts about new programs, reminders of competitions and sports fixtures, etc.). You can oppose to the sending of such communications, at any time, through the corresponding section of the Sport Europe Digital Ecosystem or through the settings of your own Smartphone or Tablet.

The legal basis for the processing of your data for the aforementioned purpose is the consent you have given us to process your data for the specific purposes selected pursuant to the provisions of art. 6.1 a) of Regulation (EU) 2016/679 (GDPR). Your personal data will be kept for this purpose until you revoke the consent given.

e. EOC commercial communications: In order to send you commercial communications via email, push notifications, in-app or SMS or other instant messaging channels about its activities, (the competitions it organizes, campaigns, public viewings, shows or live events), products, services, contests, offers, sweepstakes and/or promotions, or contests, offers, sweepstakes and/or promotions carried out by us on products and services promoted jointly with our official sponsors, national or international federations and national and international television channels or media, among other collaborators, with the scope of promoting the European Games (“EG”), the European Youth Olympic Festival (“EYOF”) and the Games of the Small States of Europe (GSSE) upcoming editions.

The legal basis for the processing of your data for the aforementioned purpose is the consent you have given us to process your data for the specific purposes selected pursuant to the provisions of art. 6.1 a) of Regulation (EU) 2016/679 (GDPR). Your personal data will be kept for this purpose until you revoke the consent given.

f. Simple profiling: To enable us to send you targeted communications via email, SMS or other instant messaging channels about our services and events, sponsors or partners (for example, we may send you communications about services and events that may be of interest to you based on the age or province of residence you have provided in your profile).

The aforementioned information will be directed to simple segments (groupings of users that are made based on the information provided by them in their profile) that we can elaborate taking into account the following:

  • Lowlevel of profile detail: by creating simple segments such as, for example, segments on women over 25 years of age.
  • Barely thorough profile: To make the segments, we will only process the personal data that you have provided in this Sport Europe Digital Ecosystem.
  • Positive consequences for the user: We may send you commercial communications that best fit the profile you have declared, avoiding unwanted commercial communications or uninteresting content.

    The legal basis for the processing of your data for the aforementioned purpose is the consent you have given us to process your data for the specific purposes selected pursuant to the provisions of art. 6.1 a) of Regulation (EU) 2016/679 (GDPR). Your personal data will be kept for this purpose until you revoke the consent given.

g. Thorough profiling: We will develop a thorough profile of you so that it can offer you personalized experiences, information and products by sending you personalized commercial communications via email, SMS or other instant messaging channels, send you personalized push or in-app notifications (provided that you have granted consent for this purpose) or show you banners with personalized advertising on websites, apps or social networks about our services and events or its sponsors or partners 

Thus, the aforementioned information will be directed to the segments (groupings of users that are made based on the information obtained from them or the use made of the Sport Europe Digital Ecosystem that we can develop based on the following data sources:

  • The information you provide us during registration;
  • The information obtained through social login;


  • The legal basis for the processing of your data for the aforementioned purpose is the consent you have given us to process your data for the specific purposes selected pursuant to the provisions of art. 6.1 a) of Regulation (EU) 2016/679 (GDPR). Your personal data will be kept for this purpose until you revoke the consent given.

FOR HOW LONG DO WE KEEP YOUR PERSONAL DATA?

The personal data we process will be kept as long as the purposes for which they were collected persist and/or you do not revoke the consent you have given, or you do not exercise your rights of deletion, opposition or limitation of processing.
In this sense, we will keep your personal data duly blocked for the following retention periods for the sole purpose of meeting the responsibilities of any kind that may arise:

  • Registration and access to the Sport Europe Digital Ecosystem: the data provided for registration and access to the Sport Europe Digital Ecosystem will be retained as long as you are registered on it, this purpose persists and, once it is finished, during the period of limitation of legal actions that may arise from it.
  • In-app notifications related to the Sport Europe Digital Ecosystem: the data provided for in-app notifications related to the Sport Europe Digital Ecosystem will be kept as long as you are registered to the Sport Europe Digital Ecosystem and, once this purpose has ended, for the period of limitation of legal actions that may arise from it.
  • Internal reports: the data provided for internal reports will be kept as long as you do not request the deletion of your data, this purpose persists, you do not oppose the processing and, once this purpose is fulfilled, during the period of limitation of legal actions that may arise from it.
  • Internal reports: the data provided for internal reports will be kept as long as you do not request the deletion of your data, this purpose persists, you do not oppose the processing and, once this purpose is fulfilled, during the period of limitation of legal actions that may arise from it.
  • Push notifications on the content of the Sport Europe Digital Ecosystem: the data provided for push notifications on the content of the Sport Europe Digital Ecosystem will be kept as long as you are registered to the Sport Europe Digital Ecosystem, you do not request the deletion of your data, this purpose persists, you do not revoke the consent granted or limit the processing. Once this purpose has been fulfilled, during the period of limitation of legal actions that may arise from the same.
  • Commercial communications: the data provided for commercial communications made by EOC will be kept for the period of the organisation and promotion of the upcoming and future editions of EG and EYOF, as long as you do not request the deletion of your data, this purpose persists, you do not revoke the consent given or limit the processing and, once this purpose is fulfilled, during the period of limitation of legal actions that may arise from it.
  • Simple profiling: the data provided for the preparation of simple profiles will be kept as long as you are registered to the Sport Europe Digital Ecosystem and do not request the deletion of your data, this purpose persists, you do not revoke the consent granted or limit the processing, once this purpose has been fulfilled, during the period of limitation of legal actions that may arise from the it.
  • Thorough profiling: the data provided for the elaboration of exhaustive profiles will be kept as long as you are registered in the Sport Europe Digital Ecosystem, you do not request the deletion of your data, this purpose persists, you do not revoke the consent granted or limit the processing and, once this purpose has been fulfilled, during the period of limitation of the legal actions that may arise from it.

YOUR RIGHTS

You have the right to access, rectification, deletion, limitation, opposition, refusal as well as to withdraw your consent at any time, through the procedure and means referred to in this document in which the email of the data protection officer is provided, without affecting the lawfulness of the processing based on consent prior to its withdrawal. Moreover, when the processing in based on articles 6.1.a) or b), you have the right to data portability.

More specifically, your rights consist of:

  • Right of access: you have the right to obtain confirmation as to whether SPE processes your personal data, as well as to access it;
  • Right of rectification: you may request SPE to modify or rectify personal data that is inaccurate.
  • Right of deletion: you may request SPE to delete your personal data.
  • Right of limitation of processing: In certain circumstances, you may request the limitation of the processing of your data, in which case it will only be kept for the exercise or defense of claims.
  • Right to object: You may object to the processing of your data for the purpose you specify. SPE will cease processing the data, except for compelling legitimate reasons, or the exercise or defense of possible claims
  • Right of portability: if permitted by the Sport Europe Digital Ecosystem, you may exercise your right to data portability, in a structured, commonly used and machine-readable format, and to transfer it to another data controller.