IPC Privacy Policy

Privacy

Thank you for your interest in using our website. The protection of personal data has top priority for us. Below you will find information about the processing of your personal data and about your rights when using our website www.paralympic.org.

1. Controller

International Paralympic Committee (IPC)
Adenauerallee 212-214
53113 Bonn, Germany
E-Mail: Privacy@paralympic.org
Phone: +49-228-2097-200
Fax: +49-228-2097-209

2. Data Protection Officer

Boris Reibach, LL.M.
Scheja und Partner Rechtsanwälte mbB
Adenauerallee 136
53113 Bonn, Germany
Phone: +49-228-227-226-0
Contact form: https://www.scheja-partner.de/en/contact/contact.html

3. Rights of the Data Subject

As data subject you have the following rights in accordance to the General Data Protection Regulation (GDPR) as far as the respective legal requirements are met: 
Access: You have the right to obtain information about your personal data processed by us.
Rectification: You can obtain the rectification of inaccurate personal data concerning you. Furthermore you can obtain the completion of incomplete personal data.
Erasure: In specific cases you can obtain the erasure of your personal data.
Restriction of processing: In specific cases you can obtain restriction of processing of your personal data.
Data portability: If you provided data to us based on a contract or your consent you can demand that you receive the provided data in a structured, commonly used and machine-readable format or that we transmit the data directly to another controller.

 

Right to object
Individual right to object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Art. 6 sec. 1, including profiling based on those provisions. We will then no longer process the personal data for those purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims.
Right to object to processing for direct marketing purposes
In some cases we process your data for direct marketing. You have the right to object to the processing of your personal data for those purposes at any time. This applies to profiling as far as it is associated with such direct marketing. If you object to the processing for direct marketing purposes, your personal data will not be processed for those purposes any longer.

 

Withdrawal of consent: If you gave your consent to the processing of your personal data you can withdraw your consent at any time with future effect. The lawfulness of the processing of your personal data until your withdrawal will not be affected. In addition to the options stated under ‘enforcement of your rights’ you can explain your withdrawal according to the respective information concerning ‘exercising the right to object’ in the section ‘Services & Cookies’.
Enforcements of your rights: To exercise the aforementioned rights please contact privacy@paralympic.org or by post to the address stated under number 1. When doing so please make sure an unambiguous identification of yourself is possible. 
Right of appeal: You have the right to lodge a complaint with a data protection supervisory authority, particularly one in the member state of your habitual residence, work place or the place of the suspected violation, if you are of the view that the processing of your personal data is unlawful.
The supervisory authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI)
 

Postfach 20 04 44
40213 Düsseldorf, Germany
Phone: +49 211 38424-0
Fax: +49 211 38424-10

4. Details on services 

4.1. Own services and functionalities

4.1.1. Display of service
Processed personal data: Date and time of access, duration of visit, type of device, used operation system, used functions, amount of sent data, type of event, IP-address, domain name
Purpose(s): Display of Service
Legal Basis: Article 6 section 1 f) GDPR; pursued legitimate interest: display of service 
Recipients of personal data: Hosting provider, internal departments, external service provider for technical support
Third country transfer: No
Storage period: Directly after delivery by the web server

4.1.2. Logfiles
Processed personal data: Accessed URL, IP address, Date and time of access, amount of transferred data, website where the user came from (‘referrer’), websites accessed by the user’s system from our website, http-status, information about the browser type and the used version, operating system, inter-net service provider
Purpose(s): Statistical evaluations, optimizing the website, system security (fraud prevention), error diagnosis
Legal Basis: Article 6 section 1 f) GDPR; pursued legitimate interest: Statistical evaluations, optimizing the website, system security (fraud prevention), error diagnosis; Article 6 section 1 c) GDPR (Fulfillment of legal obligation). This includes disclosures to government agencies upon request.
Recipients of personal data: Hosting provider, internal departments, external service provider for technical support government agencies on demand
Third country transfer: No
Storage period: Deletion 7 days after creation


4.1.3. Newsletter and media releases
Processed personal data: Date and time of registration, E-Mail-address, first name, last name
Voluntary information: profile, interests, sport interests, country, language, date of birth 
Purpose(s): Sending the newsletter and/or media releases, proof of consent
Legal Basis: Article 6 Section 1 a) GDPR (consent), Articles 6 Section 1 c), 5 Section 1 a, Section 2, 7 Section 1 GDPR (Fulfilling legal obligation); Article 6 Section 1 f) GDPR; pursued legitimate interest: be able to prove that consent has been given
Recipients of personal data: Hosting provider, internal departments, Hosting-Provider, Processors (e.g. for newsletter mailing and marketing), government agencies on demand
Third Country Transfer: Potential Third Country Transfer due to the use of Third Party CRM. Data Privacy Framework.
Storage Period: Deletion 2 months after unsubscribing from the newsletter: Date and time of registration, E-Mail-address, first name, last name ,profile, interests, sport interests, country, language, date of birth
Obligation to provide the personal data and consequences of non-provision: Mandatory information in the registration form for the newsletter and/or media releases marked with "*", other information does not have to be provided.
Exercising right to object: Cancellation link in every newsletter and media release


4.2 Cookies and comparable technologies
Information on cookies and similar technologies can be found at https://www.paralympic.org/cookie-declaration.