Data Protection Information for applicants of IPC Membership programmes and initiatives

We, the International Paralympic Committee, Dahlmannstraße 2, 53113 Bonn, Germany (hereinafter also “IPC”, “we” or “us”), take the protection of personal data and its confidential treatment very seriously. In the following, we will inform you about how IPC processes your personal data in case of applying for participation in IPC Membership programmes and initiatives.

 

I. Controller of your personal data

International Paralympic Committee

Dahlmannstraße 2

53113 Bonn

Germany

Phone: +49-228-2097200

Fax: +49-228-2097-209                                 

Email: privacy@paralympic.org

 

II. Data Protection Officer

Boris Reibach, LL.M.

Scheja & Partners GmbH & Co. KG

Adenauerallee 136

53113 Bonn

Germany

Tel.: (+49) 0228-227 226 0

https://www.scheja-partners.de/kontakt/kontakt.html

www.scheja-partners.de

 

III. Personal data we may collect 

Depending on the exact programme/initiative or service/opportunity you apply for, we generally collect only those personal data that are necessary for participation in IPC Membership programmes and initiatives. These are usually: first and last name, gender, birth date, nationality, passport number, passport expiration date, address, contact number, email address, bank details, travel and accommodation details, educational background, sporting discipline, disability information.

 

IV. Information on relevant processing purposes

 

1. Offering a programme/initiative to IPC members or a service or opportunity to individuals who engage with the Paralympic Movement.  

 

aa) Purpose(s) of the data processing

We process your personal data in order to manage our offering.  

 

bb) Legal basis(s) for data processing

Data processing is carried out on the basis of Art. 6 para. 1 subpara. 1 b) GDPR (contract fulfilment / contract initiation)].

 

cc) Recipients

The following recipients/categories of recipients may have access to your data to the extent necessary:

• IPC staff

• Staff/volunteers of third parties supporting the program/initiative or service/opportunity management. Typical third parties are hotels and similar institutions, local organizing committees, IPC member organizations, service providers, e.g. for transportation, workshop facilitation etc.

 

ee) Storage period

We store your data for four years after collection, to manage our offering and for monitoring and evaluation purposes. .

 

ff) Obligation to provide and consequences of non-provision

Insofar as we process your data for the fulfilment of a contract already concluded between us, you are contractually obliged to provide us with your personal data for the purpose of fulfilling this contract. If you do not provide us with this data, we will not be able to fulfil our obligations arising from the contractual relationship in full or exercise our rights arising from it in full and you may suffer legal disadvantages.

Insofar as we process your data in the context of contract initiation or preparation, you are not obliged to provide the data, but without the data we will not be able to process your application or conclude and fulfil the intended contract with you.

                                                                                 

 

2. Assertion, exercise or defence of legal claims

aa)    Purpose(s) of the data processing
We may process your personal data for the establishment, exercise or defence of legal claims, including those related to the breach of your contractual obligations. 

bb) Legal basis(s) for data processing
Data processing is carried out on the basis of Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). The legitimate interests here lie in asserting, exercising or defending legal claims. In this context, we may also process special categories of personal data on the basis of Art. 9 para. 2 f) GDPR. 

cc)    Recipients
The following recipients / categories of recipients may have access to your data to the extent necessary:  
•    responsible employees of our legal department, 
•    our management,
•    eExternal lawyers.

dd)    Storage period
We store your data for as long as is necessary for the purposes pursued by us for the assertion, exercise or defence of legal claims, i.e. in principle for as long as is necessary for the purposes pursued by us.

 

3. Communication Activities

aa) Purpose(s) of the data processing

We also process your personal data with regard to our communication activities that are carried out due to your participation (e. g. publication of photos and media articles, interviews, press conferences, video and audio recording).

 

bb) Legal basis(s) for data processing

Data processing is carried out on the basis of Art. 6 para. 1 subpara. 1 f) GDPR (balancing of interests). The legitimate interests here lie in presenting the IPC to the public.

 

cc) Recipients

The following recipients / categories of recipients may have access to your data to the extent necessary: 

• external media outlets and media agencies
• IPC management
• IPC Partners
• Competition organisers

dd) Storage period

Depending on the monitoring and evaluation framework of the programme/initiative applied for, we store data for up to six years.

 

V. Intended transfer to third countries

Your data will be transferred to the host country of the programme/initiative or service/opportunity. If this is located in a third country we - prior to the transfer - ensure that, except in exceptional cases permitted by law and unless there is an adequacy decision by the European Commission, suitable guarantees exist in the form of the agreement of so-called EU standard contractual clauses of the European Commission with the recipient or binding corporate rules or that your express consent has been obtained.

 

VI. Automated individual decision-making including profiling

We do not use automated individual decision-making including profiling in accordance to Art. 22 GDPR.

 

VII. Your rights

As a data subject, you have the following rights in accordance with the GDPR as far as the respective legal requirements are met:

Access: You have the right to obtain information about your personal data processed by us.

Rectification: You can obtain the rectification of inaccurate personal data concerning you. Furthermore, you can obtain the completion of incomplete data.

Erasure: In specific cases you can obtain the erasure of your personal data.

Restriction of processing: In specific cases you can obtain restriction of processing of your personal data.

Data portability: If you provided data to us based on a contract or your consent, you can demand that you receive the provided data in a structured, commonly used, and machine-readable format, or that we transmit the data directly to another Controller.

Withdrawal of consent: If you gave your consent to the processing of your personal data, you can withdraw your consent at any time with future effect. The lawfulness of the processing of your personal data until your withdrawal will not be affected.

 

You can contact us at any time to execute your rights. To do so, please use the contact details of the Controller mentioned above under section 1.

 

Right of appeal: You have the right to lodge a complaint with a data protection supervisory authority, particularly one in the EU Member State of your habitual residence, work place, or the place of the suspected violation, if you are of the view that the processing of your personal data is unlawful.

 

This also includes the supervisory authority responsible for us:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Germany
Phone: +49 211/38424-0
Fax: + 49 211/38424-999
E-Mail: poststelle@ldi.nrw.de