Purpose | Legal Bases |
---|---|
a) To allow you to use the Website. | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract – Art. 6(1)(b) GDPR. The provision of personal data is necessary for this purpose. If you fail to provide it, it will not be possible for you to use the Website. |
b) To promote the sport, the Olympics’principles and other initiatives of the EOC through the publication of images or videos collected during events organized and promoted by the EOC. | The data subject has given consent to the publication of his or her image within the EOC’s Website. – Art. 6(1)(a) GDPR. in the case in which the images depict minors under the age of 16, processing is subject to prior consent collected from the minor’s parents or legal representatives. In some situations of public interest where consent is not required, the processing may be based on the legitimate interest pursued by the EOC. – Art. 6(1)(a) GDPR. The provision of personal data is optional for this purpose. for processing based on your consent you have the right to withdraw your consent at any time. For processing based on our legitimate interest, you have the right to object at any time. For any information regarding the exercise of your rights, please refer to the section 8 of this Privacy Policy. |
c) To allow you to register and participate to our initiatives and events (such as the Volunteers’ Club). | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract – Art. 6(1)(b) GDPR. The provision of personal data is necessary for this purpose. If you fail to provide it, it will not be possible for us to pursue your registration and participation. |
d) To process and fulfill any requests submitted by you through the contact channels indicated on the Website (such as requests that relate to ticketing). | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract – Art. 6(1)(b) GDPR. |
The provision of personal data is necessary for this purpose. If you fail to provide it, it will not be possible for us to undertake your requests. | |
e) To fulfill legal obligations and comply with requests from competent authorities. | Processing is necessary for compliance with a legal obligation to which the controller is subject – Art. 6(1)(b) GDPR. The provision of personal data is necessary for this purpose. |
f) To protect our rights and those of our employees and partners, both in and out of court. | The processing may be based on the legitimate interest pursued by the EOC or third parties. – Art. 6(1)(a) GDPR. The provision of personal data is necessary for this purpose. However, you have the right to object at any time according to the section 8 of this Privacy Policy. |
g) To carry out extraordinary transactions concerning the EOC (including mergers,acquisitions, corporate reorganizations, corporate restructuring), to the extent strictly necessary for the pursuit of such purpose and on the basis of the legitimate interest of the EOC following appropriate balancing against the fundamental rights and freedoms of data subjects. | the processing may be based on the legitimate interest pursued by the EOC or third parties. – Art. 6(1)(a) GDPR. The provision of personal data is necessary for this purpose. However, you have the right to object at any time according to the section 8 of this Privacy Policy. |
5. FOR HOW LONG WE RETAIN PERSONAL DATA:
Your personal data will be processed for as long as is strictly necessary to achieve the purposes for which they are collected and will be retained for different periods of time, depending on the purpose pursued. At the end of the stated retention period, your personal data will be deleted or anonymized. In particular, your personal data, processed for the purposes mentioned in Section 4 above, will be retained in accordance with the terms and criteria specified below:
– Purposes (a), (b), (c), (e) and (f): personal data collected for these purposes will be kept as long as strictly necessary for the fulfillment of these purposes, unless it is necessary to keep it longer in order to comply with a legal obligation, an order of an Authority, or to defend one of our rights.
– Purpose (d): personal data collected to fulfill your request will be kept until your request is fulfilled, unless it is necessary to keep it longer in order to fulfill a legal obligation, an order of an Authority, or to defend a right of ours.
More detailed information regarding data retention periods is available upon request by contacting us at the contact information provided in this Privacy Policy.
6. POSSIBLE RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
To the extent necessary to pursue the purposes set forth in Section 4 above, your personal data may be transmitted to the following categories of entities:
(a) companies that provide services related and/or instrumental to the services offered by the Data Controller (e.g. companies that provide towards the EOC computer and telematic services, archiving and/or other administrative, accounting or legal services);
(b) consultants, attorneys, accountants of the Data Controller or other party involved in a corporate transaction or for rights protection purposes, as well as the party involved as a potential and/or actual transferee, purchaser etc.,;
(c) independent authorities, law enforcement or judicial and administrative authorities for their institutional purposes within the limits provided by law, as well as for the detection and prosecution of crimes, prevention and safeguard against threats to public security, to enable the EOC to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
With regard to the personal data disclosed, the individuals indicated may act either as data processors or as data controllers, on the basis of a specific agreement for the processing of personal data with the EOC, or as autonomous data controllers, on the basis of their own privacy policy.
You may request at any time a detailed and updated list of such individuals and their privacy roles.
7. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA
If it is necessary for the pursuit of the purposes set out in Section 4 above, your personal data may be transferred outside the European Economic Area (“EEA“).
Whenever your personal data is to be transferred outside the EEA and, in particular, to states that do not benefit from an adequacy decision by the European Commission, we will implement one of the safeguards for this purpose set out in the applicable data protection law, for example by signing the standard contractual clauses adopted by the European Commission, taking care to keep them up to date, and we will take any additional technical, organizational and/or contractual measures that are appropriate to ensure a level of protection for your personal data that is adequate and, in any case, essentially equivalent to that guaranteed within the EEA.
The list of countries outside the EEA to which we may transfer your personal data is available upon request by contacting us at the contact details given in this Privacy Policy.
8. YOUR RIGHTS
At any time and free of charge, you may exercise the following data protection rights.
Right | Description |
---|---|
1. Right to Information – Art. 13,14 GDPR | Right to be informed about the purposes and means of the processing of your personal data. |
2. Right of access – Art. 15 GDPR | Right to access your personal data (so-called “access request”). This right allows you to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, to obtain access to the personal data and to receive a copy of the personal data we hold about you. |
3. Right to rectification – Art. 16 GDPR | Right to request that we update or correct the personal data we hold about you. This right allows you to have incomplete or inaccurate data corrected, although we may need to verify the accuracy of new data you provide. |
4. Right to erasure (‘right to be forgotten’) – Art. 17 GDPR | Right to request the erasure of your personal data. This right allows you to ask us to erase or remove your personal data if the conditions specified in Article 17 GDPR are met. |
5. Right to restriction of processing – Art. 18 GDPR | Right to restrict the processing of your personal data. This right allows you to ask us to suspend the processing of your personal data in the cases provided for in Art. 18 GDPR. |
6. Right to data portability – Art. 20 GDPR | This right allows you to receive from us your personal data, which has been provided to us, in a structured, commonly used and machine-readable format if the conditions specified in Article 20 GDPR are met. |
7. Right to object – Art. 21 GDPR | Right to object to the processing, in whole or in part, of your personal data if the processing is based on EOC’s legitimate interest and if in light of your specific situation you wish to object to the processing because you believe it affects your fundamental rights and freedoms. In some cases, we may be able to demonstrate compelling legitimate grounds that override your rights and freedoms for continuing to process your data. |
8. Right of withdrawal – Art. 7 GDPR | If the processing is based on your freely given consent, you have right to withdraw that consent at any time. However, the withdrawal of consent doesn’t affect the lawfulness of processing based on consent before its withdrawal. |
9. Right to lodge a complaint – Art. 77, 79 GDPR | You have the right to lodge a complaint with the judicial authority or the supervisory authority in the member stare where you. Usually reside, work, or of the place where a GDPR violation is alleged to have occurred. |
A FEW WORDS ABOUT OUR PRIVACY POLICY
Your privacy is very important to us, and we believe that you should always keep the control over your personal information. This privacy policy informs you about how we access and use the information related to your use of the services offered on the Sport Europe Digital Ecosystem, through one or more of the assets: the Sport Europe website, event specific subdomains of this website such as the Bakuriani 2025 or Skopje 2025 websites, the Eurolympics mobile application, and other related mobile applications or platforms. We recommend that you read this privacy policy in its entirety.
WHO WE ARE
EOC is the Controller of the data collected through the Sport Europe Digital Ecosystem. Its registered office is in Via della Pallacanestro, 19, Palazzina CONI – “Villino Giulio Onesti” – 00135 Rome – Italy, Tel.(+39) 06 36 85 78 28, Fax (+39) 06 36 85 76 66.
HOW YOU CAN CONTACT US
If you would like to access, rectify or erase your personal information, you can do so by contacting our data protection officer here:
Data Protection Officer,
European Olympic Committees
Via della Pallacanestro 19 – 00135 Rome – Italy
Email: [email protected]
This Privacy Policy, as updated from time to time, explains what information about you is collected and how it is processed when you use digital services offered on the Sport Europe Digital Ecosystem. When you use the Sport Europe Digital Ecosystem, information about you will be collected and processed in accordance with this Privacy Policy by the EOC.
SERVICES COVERED BY THIS PRIVACY POLICY
This Privacy Policy applies to personal data collected through the use of the Sport Europe Digital Ecosystem.
REGISTRATION
In order to access the content of the Sport Europe Digital Ecosystem, registration will be necessary.
Registration is possible either by filling in the online form or through a social media account.
THE INFORMATION WE COLLECT:
Upon registration, we collect the following data: When the access/registration are performed through a social media account, we collect the following data: HOW WE USE YOUR INFORMATION We use the personal information we collect to deliver and promote our services and events in conformity with the Terms and Conditions of the Sport Europe Digital Ecosystem, to inform and communicate with you and to perform promotional initiatives. PURPOSES OF THE PROCESSING Main purposes and legal basis
a. Registration and access to the Sport Europe Digital Ecosystem:
the personal data that you share in the registration process will be processed
in order to facilitate your registration and access to the Sport Europe Digital Ecosystem.
Specifically, we will use the following personal data for these purposes:
b. In-app notifications related to the Sport Europe Digital Ecosystem:
In the event that you access the Sport Europe Digital Ecosystem’s mobile application, you may receive in-app notifications related to the Sport Europe Digital Ecosystem (for example, about changes in the privacy policy, legal notice or terms and conditions, announcements about new functionalities, etc.). You can oppose to the reception of such communications at any time, through the corresponding section on the Sport Europe Digital Ecosystem. These notifications are displayed only when you are within the mobile application and the supplier will use your user ID to send you the notification.
c. Internal reports:
We will process in aggregate form the personal data you have provided through the registration or social login, data on your usage of the Sport Europe Digital Ecosystem (user ID, device ID, device model, operating system and telemetry, for example, clicking on a particular content or the time you stay in the Sport Europe Digital Ecosystem environment) and finally, interactions with communications of any kind that you receive (e.g., clicking on the content of a communication) or in the communication with the Sport Europe Digital Ecosystem support, for the development of relevant metrics and statistics that allow us to analyse the use made of the Sport Europe Digital Ecosystem by the different user segments generated and the impact of the campaigns, assessing the interest that the campaigns have aroused among the aforementioned segments based on the data analysed. Data stored and processed under this purpose will be retained as anonymised data.
d. Push notifications about the content of the Sport Europe Digital Ecosystem:
In the event that you access the Sport Europe Digital Ecosystem’s mobile application, you may receive push notifications regarding the content of the Sport Europe Digital Ecosystem through the usual notification system of your Smartphone or Tablet (e.g. alerts about new programs, reminders of competitions and sports fixtures, etc.). You can oppose to the sending of such communications, at any time, through the corresponding section of the Sport Europe Digital Ecosystem or through the settings of your own Smartphone or Tablet.
e. EOC commercial communications:
In order to send you commercial communications via email, push notifications, in-app or SMS or other instant messaging channels about its activities, (the competitions it organizes, campaigns, public viewings, shows or live events), products, services, contests, offers, sweepstakes and/or promotions, or contests, offers, sweepstakes and/or promotions carried out by us on products and services promoted jointly with our official sponsors, national or international federations and national and international television channels or media, among other collaborators, with the scope of promoting the European Games (“EG”), the European Youth Olympic Festival (“EYOF”) and the Games of the Small States of Europe (GSSE) upcoming editions.
f. Simple profiling:
To enable us to send you targeted communications via email, SMS or other instant messaging channels about our services and events, sponsors or partners (for example, we may send you communications about services and events that may be of interest to you based on the age or province of residence you have provided in your profile).
g. Thorough profiling:
We will develop a thorough profile of you so that it can offer you personalized experiences, information and products by sending you personalized commercial communications via email, SMS or other instant messaging channels, send you personalized push or in-app notifications (provided that you have granted consent for this purpose) or show you banners with personalized advertising on websites, apps or social networks about our services and events or its sponsors or partners FOR HOW LONG DO WE KEEP YOUR PERSONAL DATA? The personal data we process will be kept as long as the purposes for which they were collected persist and/or you do not revoke the consent you have given, or you do not exercise your rights of deletion, opposition or limitation of processing. YOUR RIGHTS You have the right to access, rectification, deletion, limitation, opposition, refusal as well as to withdraw your consent at any time, through the procedure and means referred to in this document in which the email of the data protection officer is provided, without affecting the lawfulness of the processing based on consent prior to its withdrawal. Moreover, when the processing in based on articles 6.1.a) or b), you have the right to data portability.
The legal basis for the aforementioned purposes is that the data processing is necessary for the execution of a contract in which the interested is one of the parties under the provisions of Art. 6.1 b) of Regulation (EU) 2016/679 (GDPR).
The legal basis for the aforementioned purposes is that the data processing is necessary for the execution of a contract in which the interested is one of the parties under the provisions of Art. 6.1 b) of Regulation (EU) 2016/679 (GDPR).
The legal basis for the aforementioned purpose is that the processing is necessary for the satisfaction of a legitimate interest under the provisions of art. 6.1 f) of Regulation (EU) 2016/679 (GDPR) consisting of the analysis of the users’ usage of the Sport Europe Digital Ecosystem and the impact of its campaigns to improve the services offered to users.
Use of the advertiser identifier (“IDFA”) on iOS devices (Apple)
The use of IDFA for the purpose of “Internal Reporting” requires the user’s tracking permission within Apple’s iOS operating system. In case the user has not given permission for the use of IDFA, SPE will be able to carry out such purpose using the device’s IDFV.
The legal basis for the aforementioned purpose is that the processing is necessary for the satisfaction of SPE’s legitimate interest under the provisions of art. 6.1 f) of the General Data Protection Regulation as well as Spanish Organic Law 3/18 of December 5 on the Protection of Personal Data and Guarantee of Digital Rights, and Regulation (EU) 2016/679 consisting of extracting learnings from the information provided and obtained from users that allows it to improve the Sport Europe Digital Ecosystem and optimize the communication campaigns it carries out based on the interest that these generate among the different groupings of users.
The legal basis for the processing of your data for the aforementioned purpose is the consent you have given us to process your data for the specific purposes selected pursuant to the provisions of art. 6.1 a) of Regulation (EU) 2016/679 (GDPR). Your personal data will be kept for this purpose until you revoke the consent given.
The legal basis for the processing of your data for the aforementioned purpose is the consent you have given us to process your data for the specific purposes selected pursuant to the provisions of art. 6.1 a) of Regulation (EU) 2016/679 (GDPR). Your personal data will be kept for this purpose until you revoke the consent given.
The aforementioned information will be directed to simple segments (groupings of users that are made based on the information provided by them in their profile) that we can elaborate taking into account the following:
The legal basis for the processing of your data for the aforementioned purpose is the consent you have given us to process your data for the specific purposes selected pursuant to the provisions of art. 6.1 a) of Regulation (EU) 2016/679 (GDPR). Your personal data will be kept for this purpose until you revoke the consent given.
Thus, the aforementioned information will be directed to the segments (groupings of users that are made based on the information obtained from them or the use made of the Sport Europe Digital Ecosystem that we can develop based on the following data sources:
The legal basis for the processing of your data for the aforementioned purpose is the consent you have given us to process your data for the specific purposes selected pursuant to the provisions of art. 6.1 a) of Regulation (EU) 2016/679 (GDPR). Your personal data will be kept for this purpose until you revoke the consent given.
In this sense, we will keep your personal data duly blocked for the following retention periods for the sole purpose of meeting the responsibilities of any kind that may arise:
More specifically, your rights consist of: