Privacy Policy Infront Sports & Media AG

A. General Policy Infront Sports & Media AG

1.    Introduction

We are very pleased about your interest in our company. Data protection is of particularly high importance for the Infront Sports & Media Group. The processing of personal data, such as the name, address, email address, or phone number of a data subject, is always carried out in accordance with the EU General Data Protection Regulation and in compliance with the applicable national data protection regulations relevant to the respective company or companies of the Infront Sports & Media Group involved.

2.    Name and Address of the Data Controller („Controller“)

The responsible body for this website is Infront Sports & Media AG based in Switzerland:

Infront Sports & Media AG
Grafenauweg 2
6302 Zug
Switzerland
+41 41 723 15 15
data-protection@infrontsports.com

3.    What personal data do we process and on which legal basis?

a)    Technical data and access data
Data on website provision and access data, e.g., IP address, duration, date and time of your visit, search terms, country, name of your internet service provider, web browser, operating system, website from which you visit us. 
Processing basis: Art. 6 (1) clause 1 lit. f) GDPR (overriding legitimate interests).

b)    Signup and login data
Data that you provide yourself, e.g., first name and surname, address, membership number, e-mail, title, password
Processing basis: Art. 6 (1) clause 1 lit. f) GDPR (overriding legitimate interests) and Art. 6 (1) clause 1 lit. b) GDPR (initiation, entering into, and performance of a contract).

c)    Communication data
Data that you provide yourself, e.g., first name and surname, e-mail, telephone number, membership number, data provided by you.
Processing basis: Art. 6 (1) clause 1 lit. f) GDPR (overriding legitimate interests).

d)    Master data and contractual data
Data that needs to be collected is, e.g., first name and surname, address, e-mail, title, membership number.
Processing basis: Art. 6 (1) clause 1 lit. b) GDPR (initiation, entering into, and performance of a contract).

e)    Behaviour and preference data
Data for optimisation of targeting, the website, and to increase customer satisfaction.
Processing basis: Art. 6 (1) clause 1 lit. f) GDPR (overriding legitimate interests) and, in part, Art. 6 (1) clause 1 lit. a) GDPR (consent).

f)    Newsletter requests
Data entered in the signup form, analysis of user behaviour to optimise the target group
Processing basis: Art. 6 (1) clause 1 lit. a) GDPR (consent).

g)    Online job applications
Data that you provide yourself, e.g., application documents.
Processing basis: Art. 6 (1) clause 1 lit. b) GDPR (initiation of a contract) and in case of longer retention Art. 6 (1) clause 1 lit. a) GDPR (consent).

h)    Event Photos
Event photos, including additional personal data provided in the context of event photos. 
Processing basis: Art. 6 (1) clause 1 lit. f) GDPR (overriding legitimate interests) and Art. 6 (1) clause 1 lit. a) GDPR (consent).

B.    Our Individual Processing Procedures

1.    When Using Our Website or Trying to Contact Us

a)    Purpose
When you use our website, we collect the IP address of your device and other technical data to ensure the functionality and security of our website. This data also includes logs that record the use of our systems or technically necessary cookies/identifiers. Additionally, we use external service providers, for example, to provide the cookie banner. You also have the option to contact us through various means, such as the contact form, email, or telephone. For this purpose, we collect the personal data that you provide to us.

b)    Legal Basis
The processing of your personal data is necessary for the provision and operation of this website and communication and is based on our legitimate interests, which lie in operating an online presence and exchanging with interested parties, visitors, and partners. The processing of certain personal data (such as the IP address) is technically necessary for the functionality of this website, including the provided features, IT security measures, and possible legal prosecution. Handling the respective personal data is necessary for communication with us.

c)    Balancing of Interests
In the scope of balancing interests, we have weighed your interest in confidentiality against our interests in providing this website and contact. In these cases, your interest in confidentiality is overridden. Otherwise, we would not be able to provide you with this website or respond to your contact requests.

d)    Categories of Recipients
We contract cloud, communication, and IT service providers in the EU and the USA for the operation of our website and, in this context, transfer personal data to these service providers. These providers are contractually obligated to apply the same care in processing personal data as we do.

2.    When Signing Up for Our Newsletter

a)    Purpose
You can provide the necessary consent on our website to sign up for our newsletter. In this process, we collect the personal data that you enter in the registration form. Furthermore, we analyse your usage behaviour to further optimise our newsletter and align it better with our target group.

b)    Legal Basis
Your consent is the legal basis for signing up for the newsletter and for analysing your usage behaviour. You may revoke this consent at any time for the future. To do this, simply info@insfrontsports.com or unsubscribe from the newsletter directly by clicking on “Unsubscribe” in any of our newsletters.

c)    Categories of Recipients
We commission communication service providers in the EU and the USA to send our newsletters and transfer personal data to these service providers based on your consent. These providers are contractually obligated to apply the same care in processing personal data as we do.

3.    When We Would Like to Offer Similar Products or Services to You

a)    Purpose
We process your personal data and send you relevant e-mails for the purpose of direct advertising of our own and similar products and/or services, for example, if you have signed up for our services. We do this only if we have explicitly informed you when collecting the necessary data and any time we use it that you have the right to opt out of processing without incurring any other costs except for the costs of transmission based on the basic rate and provided that you have not opted out of processing.

b)    Legal Basis
The processing of your personal data is based on our legitimate interests.

c)    Balancing of Interests
In the scope of balancing of interests, we have weighed your interest in confidentiality against our interests in data processing. In this case, your interest in confidentiality is overridden. Otherwise, we would not be able to send you any direct advertising. However, you may opt out of the processing of your data any time. To do this, simply contact info@infrontsports.com

4.    When You Apply to Us

a)    Purpose
You have the opportunity to apply to us. Therefore, all data that you provide or make available to us during the application process will be processed

b)    Legal Basis
We process your personal data for the initiation, execution, and completion of the respective contract (employment contract) and store your application documents for a maximum of 12 months after your last consent to storage. Additionally, we store your personal data to assert, exercise, or defend any potential legal claims for up to 6 months after submission.

c)    Categories of Recipients
We contract cloud and communication service providers in the EU and the USA during the application process and transfer personal data to these service providers. These providers are contractually obligated to apply the same care in processing personal data as we do.

5.    When Giving Your Consent

You can give us consent for various purposes.

a)    Legal Basis
Your consent is the legal basis for the respective data processing agreement (Art. 6 (1) lit. a) GDPR), as well as national laws such as the Act Against Unfair Competition.

b)    Categories of Recipients
As part of the consent you have given, we inform you about the recipients to whom we pass on your personal data. We use external service providers to whom we transfer personal data. These service providers are contractually obligated to process your data with the same care as we do. If a data recipient is located outside Switzerland, the European Union (“EU”), or the European Economic Area (“EEA”), it usually involves data transfer to a third country. Details on this can be found in the section 'Data Transfer to Third Countries'.

6.    When Using Social Media Technologies

a)    Purpose
We use social media platforms and integrate social media plug-ins on our website to interact with our users, to share information and content, and to present our services or invite to events. These plug-ins enable you to share content directly to your social media profiles or to interact with it. For this purpose, we process data that you provide to us through your activities on these platforms or by using the plug-ins, as well as data provided by the platform operators. Depending on the social media service used, we have the option of analysing user data to improve the design and effectiveness of our presence on these platforms. You can manage your privacy settings on a social media platform yourself.

b)    Legal Basis
The processing of your personal data is based on our legitimate interests. We process your personal data with regard to the plug-ins only with your consent. You may revoke your consent at any time, most easily via our cookie manager.

c)    Balancing of Interests
In the scope of balancing of interests, we have weighed your interest in confidentiality against our interests in data processing. In this case, your interest in confidentiality is overridden. Otherwise, we would not be able to provide our social media offers to you.

d)    Categories of Recipients
Personal data is sent to the USA due to the use of these services.

7.    When Activating Tracking Technologies and Analytics Tools in Your Browser

a)    Purpose
We use our website cookies, pixels, scripts (“tracking technologies”) and analysis tools to do our marketing and to improve user experience. This comprises the personalisation of content and advertisement, the provision of social media features, and the analysis of our traffic. In addition, tracking technologies and tools help us learn more about how our website is used, which enables us to continue to improve and optimise our services.

b)    Legal Basis
The processing of your personal data using tracking technologies and analytics tools is based on your express consent; this excludes technically necessary cookies/identifiers (see section 1.1 “When Using Our Website”), in which case the legal basis is our overriding legitimate interests. When you visit our website for the first time, you will be asked to consent to the use of cookies through our cookie banner. You may revoke your consent at any time.

c)    Categories of Recipients
We contract cloud, analytics, marketing, as well as communication service providers and send personal data to these service providers in this context. These service providers are bound by contract to process personal data with as much care as we do.

8.    When Using Third-Party Services via Our Website

We integrate third-party services on our website so that you can use them to enjoy a better user experience.

a)    Google
We use streaming services (YouTube, Vimeo). These services are provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and operated by Vimeo.com Inc, 330 West 34th Street, 10th Floor, New York, New York 10001, USA.

b)    Cookiefirst
We use Cookiefirst to provide you with cookie and consent management. Cookiefirst is a service of Digital Data Solutions B.V., Plantage Middenlaan 42a, 1018 DH, Amsterdam, Netherlands.

c)    Legal Basis
The processing of your personal data for the provision of the aforementioned services is based on your consent, which you have given us through the cookie banner. You can revoke your consent at any time here.

d)    Categories of Recipients
Due to the use of these services, personal data is transferred to the USA. For more information on data transfers to third countries, please see Section 12 of this privacy policy. Further information can be found in the respective privacy policies on the websites of the respective service providers.

9.    Who Receives My Data?

To provide our services, we may use external service providers to whom we transfer personal data. These service providers are contractually obligated to handle personal data with the same care as we do. Additionally, we cooperate with associated companies, including those outside the EU/EEA.

If a recipient is located in a country without adequate legal data protection, we contractually oblige the recipient to comply with applicable data protection (using the current new standard contractual clauses of the European Commission, which can be accessed here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj), unless they are already subject to a legally recognized framework ensuring data protection, or we can rely on an exception provision. An exception might exist, for example, if the processing of a contract requires such disclosure, if you have consented to the transfer, or if it involves data that you have made publicly accessible and have not objected to its processing.

10.    Is Data Transferred to Third Countries or International Organizations?

Your data may be shared with companies within the Infront Group and/or specialized IT service providers. This may involve transferring your data to countries outside Switzerland or the European Economic Area (EEA). The transfer of personal data outside the EEA is based on adequacy decisions or other appropriate safeguards, particularly the current standard contractual clauses issued by the European Commission in 2021. The legal basis for data transfer without additional protective measures, especially without EU standard contractual clauses, is generally based on your consent (Art. 49 (1) clause 1 lit. a GDPR) or the necessity for the performance of a contract (Art. 49 (1) clause 1 lit. b GDPR).

11.    How Long Is Your Personal Data Stored?

We process your data for as long as required by our processing purposes, the legal retention periods, and our legitimate interests in the processing for documentation and evidence purpose, or for as long as storage is technically necessary. Depending on the data category, this comprises a period of six months to ten years. As regards the video monitoring, we store the recordings for a period of up to seven days.

If there are no legal or contractual obligations to the contrary, we erase or anonymise your data after the expiry of the retention or processing period in the scope of our standard processes.

12.    Are Automated Individual Decisions Made?

We generally do not use automated decision-making according to Article 22 GDPR. If we apply this procedure in individual cases, we will inform you separately, provided this is legally required.

13.    What Are My Data Protection Rights?

• Right to information: You may request information about your personal data being processed by us.
• Right to rectification: You may request rectification of your inaccurate personal data or completion of your incomplete personal data.
• Right to erasure: You may request the erasure of your personal data in specific circumstances.
• Right to restriction of processing: You may request the restriction of processing of your personal data in certain cases.
• Right to data portability: ou may receive your personal data, which you have provided, in a common format and send it to others.
•  Right to object: You may object to the processing of your personal data.
• Right to revoke consent: If you have given consent to data processing, you may revoke it at any time.
• Right to Complain: You have the right to file a complaint with the relevant data protection supervisory authority at any time.