Privacy Policy

1. A FEW WORDS ABOUT OUR PRIVACY POLICY

Your privacy is very important to us and we believe that you should always keep the control over your personal information. This Privacy Policy informs you about how the European Olympic Committees (the “EOC” or the “Data Controller”) process the personal information related to your use of the services offered on the Site https://eoctv.org/ (“Website”).

We recommend that you read this Privacy Policy in its entirety.

Some of the services offered by the EOC may be subject to specific privacy notices; if so, we will be sure to give you all the relevant information from time to time.

2. WHO WE ARE

The Data Controller is the European Olympic Committees, with registered office in Via della Pallacanestro 19 – 00135 Rome – Italy.

For any request regarding the processing of your personal data, you may contact us, at any time, by sending an e-mail to gdpr@eurolympic.org or by sending a communication to the registered office address by regular mail.

The Data Controller has appointed a Data Protection Officer, who can be contacted by sending an e-mail to dpo@eurolympic.org

3. WHICH CATEGORIES OF PERSONAL DATA WE PROCESS

The EOC will process, for the purposes and under the conditions set out in paragraph 4 below, the following common personal data:

• Details about the web browser used and the IP address and any additional data inherent in browsing;

We inform you that personal data of users who are younger than 16 years old will not be processed by the EOC, unless prior written authorization is submitted by the parents or legal representatives of the minor.

4. WHAT IS THE PURPOSE OF PROCESSING AND LEGAL BASIS OF PROCESSING

We will process your personal data, both by manual and electronic means, for the purposes and according to the legal bases described below.

Purpose	Purpose Legal Bases
a) To allow you to use the Website.	Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract - Art. 6(1)(b) GDPR. The provision of personal data is necessary for this purpose. If you fail to provide it, it will not be possible for you to use the Website.
b) To promote the sport, the Olympics’ principles and other initiatives of the EOC through the publication of images or videos collected during events organized and promoted by the EOC.	The data subject has given consent to the publication of his or her image within the EOC’s Website. - Art. 6(1)(a) GDPR. In the case in which the images depict minors under the age of 16, processing is subject to prior consent collected from the minor's parents or legal representatives. In some situations of public interest where consent is not required, the processing may be based on the legitimate interest pursued by the EOC. - Art. 6(1)(a) GDPR. The provision of personal data is optional for this purpose. For processing based on your consent you have the right to withdraw your consent at any time. For processing based on our legitimate interest, you have the right to object at any time. For any information regarding the exercise of your rights, please refer to the section 8 of this Privacy Policy.
c) To process and fulfill any requests submitted by you through the contact channel indicated on the Website (such as requests that relate to ticketing).	Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract - Art. 6(1)(b) GDPR. The provision of personal data is necessary for this purpose. If you fail to provide it, it will not be possible for us to undertake your requests.
d) To fulfill legal obligations and comply with requests from competent authorities.	Processing is necessary for compliance with a legal obligation to which the controller is subject - Art. 6(1)(b) GDPR. The provision of personal data is necessary for this purpose
e) To protect our rights and those of our employees and partners, both in and out of court.	The processing may be based on the legitimate interest pursued by the EOC or third parties. - Art. 6(1)(a) GDPR. The provision of personal data is necessary for this purpose. However, you have the right to object at any time according to the section 8 of this Privacy Policy.
f) To carry out extraordinary transactions concerning the EOC (including mergers, acquisitions, corporate reorganizations, corporate restructuring), to the extent strictly necessary for the pursuit of such purpose and on the basis of the legitimate interest of the EOC following appropriate balancing against the fundamental rights and freedoms of data subjects.	The processing may be based on the legitimate interest pursued by the EOC or third parties. - Art. 6(1)(a) GDPR. The provision of personal data is necessary for this purpose. However, you have the right to object at any time according to the section 8 of this Privacy Policy.
g) To send you information and commercial communications and newsletters, without sharing your personal data to third parties.	The data subject has given his or her consent. - Art. 6(1)(a) GDPR. The provision of personal data is optional. If you don’t provide your personal data, you won’t receive any commercial communications. In any case, you have the right to withdraw your consent at any time pursuant to the section 8 of this Privacy Policy.
h) To carry out profiling activities by analyzing your behavior on the Website and understanding your preferences, habits, interests, browsing experiences, and interactions with our advertisements (including those sent by email), in order to use your interests to personalize marketing communications, making them more interesting to you, as well as to improve the effectiveness of our marketing strategy.	The data subject has given his or her consent. - Art. 6(1)(a) GDPR. The provision of personal data is optional. If you don’t provide your personal data, you won’t receive any targeted commercial communications. In any case, you have the right to withdraw your consent at any time pursuant to the section 8 of this Privacy Policy.

5. FOR HOW LONG WE RETAIN PERSONAL DATA

Your personal data will be processed for as long as is strictly necessary to achieve the purposes for which they are collected and will be retained for different periods of time, depending on the purpose pursued. At the end of the stated retention period, your personal data will be deleted or anonymized. In particular, your personal data, processed for the purposes mentioned in Section 4 above, will be retained in accordance with the terms and criteria specified below:

• Purposes (a), (b), (d) (e) and (f): personal data collected for these purposes will be kept as long as strictly necessary for the fulfillment of these purposes, unless it is necessary to keep it longer in order to comply with a legal obligation, an order of an Authority, or to defend one of our rights.
• Purpose (c): personal data collected to fulfill your request will be kept until your request is fulfilled, unless it is necessary to keep it longer in order to fulfill a legal obligation, an order of an Authority, or to defend a right of ours.
• Purpose (g): your personal data will be processed for the purpose of sending you communications of a commercial nature and/or newsletters, until you decide to withdraw the consent given. In any case, after two years of collection, your data will be deleted or anonymized.
• Purpose (h): your personal data will be processed for the purposes of sending you targeted and personalized communications, until you decide to withdraw the consent given. In any case, after one year of collection, your data will be deleted or anonymized.

More detailed information regarding data retention periods is available upon request by contacting us at the contact information provided in this Privacy Policy.

6. POSSIBLE RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA

To the extent necessary to pursue the purposes set forth in Section 4 above, your personal data may be transmitted to the following categories of entities:

With regard to the personal data disclosed, the individuals indicated may act either as data processors or as data controllers, on the basis of a specific agreement for the processing of personal data with the EOC, or as autonomous data controllers, on the basis of their own privacy policy.

You may request at any time a detailed and updated list of such individuals and their privacy roles.

Your data may also be collected by third parties when you accept third-party cookies. Please see our Cookie Policy for more information.

7. TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

If it is necessary for the pursuit of the purposes set out in Section 4 above, your personal data may be transferred outside the European Economic Area ("EEA").

Whenever your personal data is to be transferred outside the EEA and, in particular, to states that do not benefit from an adequacy decision by the European Commission, we will implement one of the safeguards for this purpose set out in the applicable data protection law, for example by signing the standard contractual clauses adopted by the European Commission, taking care to keep them up to date, and we will take any additional technical, organizational and/or contractual measures that are appropriate to ensure a level of protection for your personal data that is adequate and, in any case, essentially equivalent to that guaranteed within the EEA.

The list of countries outside the EEA to which we may transfer your personal data is available upon request by contacting us at the contact details given in this Privacy Policy.

8. YOUR RIGHTS

At any time and free of charge, you may exercise the following data protection rights.

Right	Description
1. Right to Information – Art. 13,14 GDPR	Right to be informed about the purposes and means of the processing of your personal data.
2. Right of access – Art. 15 GDPR	Right to access your personal data (so-called "access request"). This right allows you to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, to obtain access to the personal data and to receive a copy of the personal data we hold about you.
3. Right to rectification – Art. 16 GDPR	Right to request that we update or correct the personal data we hold about you. This right allows you to have incomplete or inaccurate data corrected, although we may need to verify the accuracy of new data you provide.
4. Right to erasure (‘right to be forgotten’) – Art. 17 GDPR	Right to request the erasure of your personal data. This right allows you to ask us to erase or remove your personal data if the conditions specified in Article 17 GDPR are met.
5. Right to restriction of processing – Art. 18 GDPR	Right to restrict the processing of your personal data. This right allows you to ask us to suspend the processing of your personal data in the cases provided for in Art. 18 GDPR.
6. Right to data portability – Art. 20 GDPR	This right allows you to receive from us your personal data, which has been provided to us, in a structured, commonly used and machine-readable format if the conditions specified in Article 20 GDPR are met.
7. Right to object – Art. 21 GDPR	Right to object to the processing, in whole or in part, of your personal data if the processing is based on EOC’s legitimate interest and if in light of your specific situation you wish to object to the processing because you believe it affects your fundamental rights and freedoms. In some cases, we may be able to demonstrate compelling legitimate grounds that override your rights and freedoms for continuing to process your data.
8. Right of withdrawal – Art. 7 GDPR	If the processing is based on your freely given consent, you have right to withdraw that consent at any time. However, the withdrawal of consent doesn’t affect the lawfulness of processing based on consent before its withdrawal.
9. Right to lodge a complaint – Art. 77, 79 GDPR	You have the right to lodge a complaint with the judicial authority or the supervisory authority in the member stare where you usually reside, work, or of the place where a GDPR violation is alleged to have occurred.

If you wish to exercise the rights outlined above, or submit questions about the personal data we hold about you, you may contact us:

• by sending an e-mail to dpo@eurolympic.org;
• by mailing a letter to the address of the European Olympic Committees at Via della Pallacanestro 19 – 00135 Rome – Italy.

9. CHANGES AND UPDATE

The evolution of our services may lead to changes in the features of the processing of your personal data described so far. Consequently, this Privacy Policy may be subject to changes and amendments over time, which may also be necessary with reference to new regulatory changes. We therefore invite you to check this page periodically to make sure that nothing has changed: where possible, we will try to inform you in a timely manner about the changes made and their consequences.

The updated version of the Privacy Policy, in any case, will be posted on this page, indicating the date of its last update.

Latest update: [May 2024]