Ticketing
privacy policy
Privacy policy
1. A FEW WORDS ABOUT OUR PRIVACY POLICY
YYour privacy is very important to us and we believe that you should always keep the control over your personal information. your personal information. This Privacy Policy informs you about how the European Olympic Committees (the “EOC ” or the “Data Controller”) process the personal information related to your use of the services offered on the https://sporteurope.org/ . (“Website”).
We recommend that you read this Privacy Policy in its entirety.
Some of the services offered by the EOC may be subject to specific privacy notices; if so, we will be sure to give you all the relevant information from time to time.
2. WHO WE ARE
The Data Controller is the European Olympic Committees, with registered office in Via della Pallacanestro 19 – 00135 Rome – Italy.
For any request regarding the processing of your personal data, you may contact us, at any time, by sending an e-mail to [email protected] or by sending a communication to the registered office address by regular mail
The Data Controller has appointed a Data Protection Officer, who can be contacted by sending an e-mail to [email protected].
3. WHICH CATEGORIES OF PERSONAL DATA WE PROCESS
The EOC will process, for the purposes and under the conditions set out in paragraph 4 below, the following common personal data:
· Identifying and contact information such as name, surname, age, nationality, e-mail, home address, telephone number;
· Images and videos published within the “Multimedia” websites’ section;
· Details about the web browser used and the IP address and any additional data inherent in browsing;
· Any other additional information you may have provided when contacting us through the Website.
We inform you that personal data of users who are younger than 16 years old will not be processed by the EOC, unless prior written authorization submitted by the parents or legal representatives of the minor.
4. WHAT IS THE PURPOSE OF PROCESSING AND LEGAL BASIS OF PROCESSING
We will process your personal data, both by manual and electronic means, for the purposes and according to the legal bases described below.
| Purpose | Legal Bases |
|---|---|
| a) To allow you to use the Website. | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract – Art. 6(1)(b) GDPR. The provision of personal data is necessary for this purpose. If you fail to provide it, it will not be possible for you to use the Website. |
| b) To promote the sport, the Olympics’principles and other initiatives of the EOC through the publication of images or videos collected during events organized and promoted by the EOC. | The data subject has given consent to the publication of his or her image within the EOC’s Website. – Art. 6(1)(a) GDPR. in the case in which the images depict minors under the age of 16, processing is subject to prior consent collected from the minor’s parents or legal representatives. In some situations of public interest where consent is not required, the processing may be based on the legitimate interest pursued by the EOC. – Art. 6(1)(a) GDPR. The provision of personal data is optional for this purpose. for processing based on your consent you have the right to withdraw your consent at any time. For processing based on our legitimate interest, you have the right to object at any time. For any information regarding the exercise of your rights, please refer to the section 8 of this Privacy Policy. |
| c) To allow you to register and participate to our initiatives and events (such as the Volunteers’ Club). | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract – Art. 6(1)(b) GDPR. The provision of personal data is necessary for this purpose. If you fail to provide it, it will not be possible for us to pursue your registration and participation. |
| d) To process and fulfill any requests submitted by you through the contact channels indicated on the Website (such as requests that relate to ticketing). | Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract – Art. 6(1)(b) GDPR. |
| The provision of personal data is necessary for this purpose. If you fail to provide it, it will not be possible for us to undertake your requests. | |
| e) To fulfill legal obligations and comply with requests from competent authorities. | Processing is necessary for compliance with a legal obligation to which the controller is subject – Art. 6(1)(b) GDPR. The provision of personal data is necessary for this purpose. |
| f) To protect our rights and those of our employees and partners, both in and out of court. | The processing may be based on the legitimate interest pursued by the EOC or third parties. – Art. 6(1)(a) GDPR. The provision of personal data is necessary for this purpose. However, you have the right to object at any time according to the section 8 of this Privacy Policy. |
| g) To carry out extraordinary transactions concerning the EOC (including mergers,acquisitions, corporate reorganizations, corporate restructuring), to the extent strictly necessary for the pursuit of such purpose and on the basis of the legitimate interest of the EOC following appropriate balancing against the fundamental rights and freedoms of data subjects. | the processing may be based on the legitimate interest pursued by the EOC or third parties. – Art. 6(1)(a) GDPR. The provision of personal data is necessary for this purpose. However, you have the right to object at any time according to the section 8 of this Privacy Policy. |
5. FOR HOW LONG WE RETAIN PERSONAL DATA:
Your personal data will be processed for as long as is strictly necessary to achieve the purposes for which they are collected and will be retained for different periods of time, depending on the purpose pursued. At the end of the stated retention period, your personal data will be deleted or anonymized. In particular, your personal data, processed for the purposes mentioned in Section 4 above, will be retained in accordance with the terms and criteria specified below:
– Purposes (a), (b), (c), (e) and (f): personal data collected for these purposes will be kept as long as strictly necessary for the fulfillment of these purposes, unless it is necessary to keep it longer in order to comply with a legal obligation, an order of an Authority, or to defend one of our rights.
– Purpose (d): personal data collected to fulfill your request will be kept until your request is fulfilled, unless it is necessary to keep it longer in order to fulfill a legal obligation, an order of an Authority, or to defend a right of ours.
More detailed information regarding data retention periods is available upon request by contacting us at the contact information provided in this Privacy Policy.
6. POSSIBLE RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
To the extent necessary to pursue the purposes set forth in Section 4 above, your personal data may be transmitted to the following categories of entities:
(a) companies that provide services related and/or instrumental to the services offered by the Data Controller (e.g. companies that provide towards the EOC computer and telematic services, archiving and/or other administrative, accounting or legal services);
(b) consultants, attorneys, accountants of the Data Controller or other party involved in a corporate transaction or for rights protection purposes, as well as the party involved as a potential and/or actual transferee, purchaser etc.,;
(c) independent authorities, law enforcement or judicial and administrative authorities for their institutional purposes within the limits provided by law, as well as for the detection and prosecution of crimes, prevention and safeguard against threats to public security, to enable the EOC to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
With regard to the personal data disclosed, the individuals indicated may act either as data processors or as data controllers, on the basis of a specific agreement for the processing of personal data with the EOC, or as autonomous data controllers, on the basis of their own privacy policy.
You may request at any time a detailed and updated list of such individuals and their privacy roles.
7. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA
If it is necessary for the pursuit of the purposes set out in Section 4 above, your personal data may be transferred outside the European Economic Area (“EEA“).
Whenever your personal data is to be transferred outside the EEA and, in particular, to states that do not benefit from an adequacy decision by the European Commission, we will implement one of the safeguards for this purpose set out in the applicable data protection law, for example by signing the standard contractual clauses adopted by the European Commission, taking care to keep them up to date, and we will take any additional technical, organizational and/or contractual measures that are appropriate to ensure a level of protection for your personal data that is adequate and, in any case, essentially equivalent to that guaranteed within the EEA.
The list of countries outside the EEA to which we may transfer your personal data is available upon request by contacting us at the contact details given in this Privacy Policy.
8. YOUR RIGHTS
At any time and free of charge, you may exercise the following data protection rights.
| Right | Description |
|---|---|
| 1. Right to Information – Art. 13,14 GDPR | Right to be informed about the purposes and means of the processing of your personal data. |
| 2. Right of access – Art. 15 GDPR | Right to access your personal data (so-called “access request”). This right allows you to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, to obtain access to the personal data and to receive a copy of the personal data we hold about you. |
| 3. Right to rectification – Art. 16 GDPR | Right to request that we update or correct the personal data we hold about you. This right allows you to have incomplete or inaccurate data corrected, although we may need to verify the accuracy of new data you provide. |
| 4. Right to erasure (‘right to be forgotten’) – Art. 17 GDPR | Right to request the erasure of your personal data. This right allows you to ask us to erase or remove your personal data if the conditions specified in Article 17 GDPR are met. |
| 5. Right to restriction of processing – Art. 18 GDPR | Right to restrict the processing of your personal data. This right allows you to ask us to suspend the processing of your personal data in the cases provided for in Art. 18 GDPR. |
| 6. Right to data portability – Art. 20 GDPR | This right allows you to receive from us your personal data, which has been provided to us, in a structured, commonly used and machine-readable format if the conditions specified in Article 20 GDPR are met. |
| 7. Right to object – Art. 21 GDPR | Right to object to the processing, in whole or in part, of your personal data if the processing is based on EOC’s legitimate interest and if in light of your specific situation you wish to object to the processing because you believe it affects your fundamental rights and freedoms. In some cases, we may be able to demonstrate compelling legitimate grounds that override your rights and freedoms for continuing to process your data. |
| 8. Right of withdrawal – Art. 7 GDPR | If the processing is based on your freely given consent, you have right to withdraw that consent at any time. However, the withdrawal of consent doesn’t affect the lawfulness of processing based on consent before its withdrawal. |
| 9. Right to lodge a complaint – Art. 77, 79 GDPR | You have the right to lodge a complaint with the judicial authority or the supervisory authority in the member stare where you. Usually reside, work, or of the place where a GDPR violation is alleged to have occurred. |
If you wish to exercise the rights outlined above, or submit questions about the personal data we hold about you, you may contact us:
– by sending an e-mail to [email protected];
– by mailing a letter to the address of the European Olympic Committees at Via della Pallacanestro 19 – 00135 Rome – Italy.
9. CHANGES AND UPDATE
The evolution of our services may lead to changes in the features of the processing of your personal data described so far. Consequently, this Privacy Policy may be subject to changes and amendments over time, which may also be necessary with reference to new regulatory changes. We therefore invite you to check this page periodically to make sure that nothing has changed: where possible, we will try to inform you in a timely manner about the changes made and their consequences.
The updated version of the Privacy Policy, in any case, will be posted on this page, indicating the date of its last update.
This version is dated [March 2024]