IPC Events Privacy Policy
Events
Thank you for your interest in our event. We take the protection of your personal data and its confidential treatment very seriously. Your personal data is processed exclusively within the framework of the applicable statutory provisions of data protection law, in particular the General Data Protection Regulation (hereinafter "GDPR"). With this data protection notice, we are informing you about the processing of your personal data and your data protection rights in the context of our event.
1. Controller and Data Protection Officer
1.1 Controller
International Paralympic Committee (IPC)
Dahlmannstraße 2
53113 Bonn, Germany
E-Mail: info@paralympic.org
Phone: +49-228-2097-200
Fax: +49-228-2097-209
1.2 Data Protection Officer
Boris Reibach, LL.M.
Scheja & Partners GmbH & Co. KG
Adenauerallee 136
53113 Bonn, Germany
Phone: +49-228-227-226-0
SSL-encrypted contact form: https://www.scheja-partners.de/kontakt/kontakt.html
2. Purposes and Legal Bases
Below you will find an overview of the purposes and legal bases of data processing in the context of our event.
2.1 Preparation and realisation of our event
2.1.1 Mandatory Information
We process your personal data if this is necessary for the preparation and realisation of your participation in our event. The purposes include in particular the registration and processing of RSVP.
When registering for our event, the following mandatory information marked with an "*" is requested: title, first name, surname, gender. Registration is not possible without providing with this mandatory data. The processing is carried out on the basis of Art. 6 para. 1 letter b) GDPR.
2.1.2 Voluntary Information
As part of your registration, you also have the option of providing additional voluntary information: dietary requirements and accessibility needs, requirement of a living assistant.
Please note that this information is not required for registration and that you alone decide whether you wish to provide us with this data.
Your consent to the processing of special categories of personal data may be required so that we can take special requests into account when you register. This applies in particular to data relating to restricted mobility or health-related requirements for the catering provided. If you have given your consent for specific purposes, the purposes are determined by the content of this consent.
Data processing is carried out on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR. In cases in which you must provide data for this purpose, we expressly point this out. Without this provision, we would not be able to fulfil your request covered by your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
We erase the data if it is no longer required for the purposes we are pursuing or if you have withdrawn your consent and no other legal basis applies. If the latter is the case, we will erase the data once the other legal basis no longer applies.
2.2 Recording and publication of image and sound material
2.2.1 Purposes
As part of our event, we process image and/or sound material in order to make it accessible within the IPC and/or to third parties.
The image and/or sound material on which you can be recognisably seen and/or heard is processed for the following purposes:
- Coverage of our event
- Passing on the image and/or sound material to third parties authorized by the IPC for promotional and/or commercial use
- Promotion of the IPC’s activities and the Paralympic movement
If the aforementioned purposes require publication of the image and sound material, this may take place in the following media if a corresponding legal basis exists:
- Website of the IPC and third parties authorized by the IPC
- Appearances on social networks (Facebook, Instagram, TikTok, LinkedIn, X) and video services (YouTube)
- Email newsletters of the IPC and third parties authorized by the IPC
Further details on the purposes can be found in the respective contract documents or in the content of any declaration of consent given.
2.2.2 Legal basis
a. Data processing for the purposes of contract fulfilment
If the processing of image and/or sound material is necessary for the fulfilment of a contract with you or for the implementation of pre-contractual measures, the data processing is carried out on the basis of Art. 6 para. 1 letter b) GDPR.
b. Establishment and/or implementation of the employment relationship
If the processing of image and/or sound material is necessary for the establishment and/or execution of the employment relationship, the data processing is carried out on the basis of Art. 88 para. 1 GDPR in conjunction with Art. 6 para. 1 lit. b GDPR. Art. 6 para. 1 lit. b GDPR.
c. Consent
If we process image and/or sound material on the basis of a declaration of consent given by you, this is done on the basis of Art. 6 para. 1 letter a) GDPR [if applicable in conjunction with § 26 para. 2 BDSG].
If we specifically process special categories of personal data within the meaning of Art. 9 (1) GDPR, this is done exclusively on the basis of your express consent (Art. 9 (2) (a) GDPR).
You can withdraw your consent at any time. Please note, however, that this revocation only has effect for the future, i.e. the legality of the data processing already carried out on the basis of your consent up to the time of revocation is not affected by the revocation.
d. Processing for the protection of legitimate interests
If necessary, we process image and/or sound material on which you can be seen and/or recognisably heard in order to protect our legitimate interests or the legitimate interests of third parties. The data processing is carried out on the basis of Art. 6 para. 1 letter f) GDPR.
We only process the material if, after weighing up the interests involved, we assume that the IPC's interests in processing the image and/or sound material outweigh our own. The legitimate interests in this case lie in the purposes stated under point 2.
3. Recipients of personal
Within the IPC, only those persons have access who need it for the purposes mentioned under point 2. We only pass on your personal data to external recipients outside the IPC if this is necessary to achieve the purposes described in section 2, if another legal authorisation exists or if we have your consent to do so. External recipients may be:
3.1. Private bodies
- Cooperation partners or auxiliary persons of the IPC to whom data is transmitted for the implementation of our event on the basis of consent or another legal basis, for example service providers.
- Platform operators of the social networks or video services used (regularly Facebook, YouTube)
- Commercial and institutional partners of the IPC
3.2. Processors
External service providers that we use to provide services, for example in the areas of technical infrastructure and maintenance for the registration platform. These processors are carefully selected and regularly reviewed by us to ensure that your privacy is protected. The service providers may only use the data for the purposes specified by us.
3.3. Public bodies
Authorities and state institutions, such as public prosecutors' offices, courts or tax authorities, to which we may have to transfer personal data for mandatory legal reasons.
4. Data processing in third countries
If data is transferred to bodies whose registered office or place of data processing is not located in a member state of the European Union or in another signatory state to the Agreement on the European Economic Area, we ensure before the transfer that, outside of legally permitted exceptional cases, the recipient either has an adequate level of data protection (e.g. through an adequacy decision by the European Commission, through suitable guarantees such as the agreement of so-called EU standard contractual clauses of the European Union with the recipient) or that you have given sufficient consent. You can obtain an overview of the recipients in third countries and a copy of the specifically agreed regulations to ensure an adequate level of data protection from us. Please use the information in section 1 for this purpose.
5. Automated individual decision-making including profiling
Automated decisions in individual cases, including profiling within the meaning of Art. 22 of the GDPR, do not take place.
6. Storage Period
We delete the data if it is no longer required for the purposes we are pursuing or if you have withdrawn your consent and there are no other legal grounds for continued processing, in particular statutory or contractual retention periods.
7. Rights of Data Subjects
As a person affected by data processing, you have numerous rights. In detail:
Right to information: You have the right to receive information about the personal data we have stored about you.
Right to rectification and erasure: You can demand that we rectify incorrect data and - insofar as the legal requirements are met - erase your data.
Right to processing: You can demand that we restrict the processing of your data, provided that the legal requirements are met.
Data Portability: If you have provided us with data on the basis of a contract or consent, you can request that you receive the data you have provided in a structured, commonly used and machine-readable format or that we transfer it to another controller if the legal requirements are met.
Objection to data processing on the legal basis of "legitimate interest": You have the right to object to data processing by us at any time for reasons arising from your particular situation, insofar as this is based on the legal basis of "legitimate interest". If you exercise your right to object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for further processing that override your rights in accordance with the statutory provisions.
Revocation of consent: If you have given us your consent to process your data, you can revoke this at any time with effect for the future. The legality of the processing of your data up to the time of revocation remains unaffected by this.
Right to lodge a complaint with the supervisory authority: You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. To do so, you can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.
How to contact us and exercise your rights: You can contact us free of charge if you have any questions about the processing of your personal data, your rights as a data subject and any consent you may have given. To exercise all of your aforementioned rights, please contact privacy@paralympic.org or send a letter to the address given in section 1 above. Please ensure that we are able to clearly identify you. When withdrawing your consent, you can also use the same contact method that you used when you gave your consent.