Olympic
Broadcasting
Services

OVP Privacy Policy

  1. Purpose

    This privacy policy (the "Privacy Policy"), as updated from time to time, explains what information about you is collected and how it is processed when you use OBS Services and particularly the Olympic Video Player ("OVP") as an exclusive service offered to Media Rights Holders Broadcasters and other Olympic Stakeholders to access directly to the Olympic content and broadcasting feed during Olympic and Paralympic Games Times directly via the OVP app and website or via the OVP widgets which are included in certain broadcasters' digital platforms. Specifically, this Privacy Policy lays down the limited data that OBS will collect in order to operate OVP different offerings, including the OVP Data Widgets, the OVP Video Widgets and the OVP app (for convenience referred from here onwards as the "OVP Services"), as the integration of certain OVP Services will entail the accessing and collection MRH Properties end­ users limited personal data in order to deploy such OVP Services.

    When we refer to "we", "our" or "us", we are referring to OBS acting as data controller, and when we refer to "you" or "your" we refer to you as a user of the Services.

    SUMMARY
    Data Controller Olympic Broadcasting Services, S.L.U. ("OBS")
    Purposes
    1. Providing and managing the OVP Services.
    2. Management of any OVP Services requests, support, as well as troubleshooting.
    3. Ensuring the appropriate tech infrastructure and delivery the of the OVP Services, ensuring the protection of our content and copyright and the access to such content depending on the region of access and rights restrictions.
    Lawfulness of the processing
    1. For the purposes number 1 and 2: Performance of a contract
    2. For the purpose 3: OBS Legitimate interest
    Recipients
    • OBS appointed Service Providers, including tech providers that assist us to deliver content over the internet (e.g. CON Providers such as Akamai and Fastly as described hereunder).
    • International Olympic Committee ("IOC"), Olympic Channel Services, S.L.U. ("OCS") and other Olympic stakeholder as strictly necessary.
    Rights Access, rectification, deletion and other rights which can be consulted in detail in our Privacy Policy below

  2. The Data Controller of your Personal Data

    1. The Data Controller for the processing of your personal data is Olympic Broadcasting Services, S.L.U. ("OBS"), with company registration No. B83747691 and registered address at Calle Torrelaguna 75, 28027 Madrid. OBS has appointed a Data Protection Officer who can be contacted via the email address dpo@obs.tv.

    2. OBS has implemented the appropriate technical and organisational measures to prevent the alteration, loss, misuse, unauthorized processing and access, or theft of your personal data, taking into consideration the available technology.
    3. Services are intended for users who are of legal age for data protection purposes under the laws of their country of residence, in that regard please consult https://www.olympic.org/age-limits . If we become aware that a child under that age has provided us with personal data, we will take steps to delete this information and close the child's account. If you become aware that your child has provided us with personal data without your consent, please contact us.

  3. Legal Grounds for Processing Personal Data

    Under applicable data protection law, there are various legal bases or grounds on which we can rely when processing your Personal Data. In some contexts, more than one ground applies. The grounds for processing are as follows:

    • Performance of a contract: data processing is necessary for performance of a contract with you or to take steps at your request to enter a contract. These covers carrying out our contractual duties and exercising our contractual rights.
    • Legal Obligation: data processing is necessary to comply with our legal obligations. The processing is necessary for ensuring we perform our legal and regulatory obligations. For example, providing a safe place of work or complying with health and safety laws.

    • Legitimate Interest: data processing is necessary for our or a third party's legitimate interest. We or a third party have legitimate interests in carrying on, managing, and administering our respective businesses effectively and properly and in connection with those interests processing your Personal Data. Where we rely on legitimate interests, we consider:

      1. what our legitimate interest is - these are set out in the table below;
      2. whether the processing is necessary to achieve it (i.e. whether it is proportionate); and
      3. whether it can be balanced against individuals' interests, rights, and freedoms. Where this test is not met, we do not rely on legitimate interest. This Policy serves as a record of our legitimate interest assessment. You can oppose to the processing of your personal data when relying on Legitimate Interest by emailing OBS' Data Protection Officer via dpo@obs.tv.
    • Consent: this is where you have given specific consent to processing your Personal Data. Where the legal ground is your express consent, we will only process your personal information in this way if you agree to us doing so. You have the right to withdraw your consent at any time by contacting our DPO at the address indicated in this Privacy Policy or the email address dpo@obs.tv; however please note that this does not affect the lawfulness of our processing of your personal information based on your express consent before such withdrawal.

  4. Information and Personal Data we collect and process, purposes and legal bases

    Purpose Data Processed Legal Basis
    1. Delivery and deployment of the OVP Services Log-in details (only for OBS OVP App): name, surname, email address and company name. Performance of a contract
    2. Management of any OVP user request and log-in to the platform as well as troubleshooting. Contact details (only for OBS OVP App): name, surname, company name and position. Any other information that you directly provide us to manage those requests. Performance of a contract
    3. Ensuring appropriate functioning of the OVP Services, Delivery of Content and Content Protection (ensuring appropriate implementation of technical means to deliver content in the particular region depending on broadcasting exclusive rights and territory limitations). Limited technical information through CDN cookies and similar technologies provided by our service providers (Akamai and Fastly): IP addresses (only store for 90 days). For more details on how we use these technologies and how to configure them, please see our Cookies Section hereunder. Legitimate Interest: OBS' legitimate Interest in the protection OBS (and ultimately the International Olympic Committee) copyright and content and ensuring the delivery of OVP Services. Such limited data processing activities do not override the rights of the individuals.

  5. Cookies

    1. OBS may use their own or third-party cookies or tracking technologies ("Cookies") when you browse the site to improve your browsing experience. These cookies collect information about you and your browsing, including IP address, date and time of connection, if applicable, login, web pages viewed, sections visited within the website, etc. To find out more about the Cookies we use on the Site, you can consult our Cookies Policy (available at all times in our OVP App).
    2. OBS only use first party Cookies for performance and technical purposes to provide the OVP Services and protect content delivery and the exclusive rights of our Media Right Holders.

  6. Data Retention

    1. Your personal data shall be retained for the time required to fulfil the purposes in section 4 above and in accordance with the applicable law.
    2. We will retain your information only for the duration necessary for the purposes identified in this Privacy policy or as required to meet our legal requirements. Once your personal data is no longer necessary for these purposes, data will be blocked. During the blocking period, your data will be only unblocked and processed again exclusively to comply with legal retention periods, for the purpose of the exercise or the defence against administrative or legal claims and, beyond that, until the statute of limitation for any legal actions for which such data may be relevant. Once this period is over, your personal data will be erased.

  7. Recipients

    1. Generally, for all purposes, we may share information and personal data with service providers that OBS contracts, or may contact, in order to deliver the OVP Services, including those that facilitate technology to allow the functioning of the OVP Services as described hereunder or in the OVP Cookies Policy.
    2. Public authorities and bodies, including Courts and Tribunals, when required by the applicable regulations.
    3. Data may be occasionally disclosed to the International Olympic Committee, located in Switzerland, for administrative purposes. This disclosure also constitutes an international data transfer. Switzerland is a country with level of protection equivalent to the European Economic Area according to the Commission Decision of 26 July 2000 pursuant to Directive 95/46/EC of the European Parliament and of the Council, on the adequate protection of personal data provided in Switzerland.

  8. International Transfers

    1. We may process your personal data in a country other than your place of residence. We adopt measures as required under applicable law to ensure your data will be given the relevant protection. While the personal data we collect will usually be processed in the European Union or in Switzerland (which provides a level of protection equivalent to the European Economic Area according to the Commission Decision of 26 July 2000), we may also transfer your personal data for the purposes allowed under this Privacy Policy some of which may be based in countries (like the United States of America) that do not provide in their laws for a level of protection of your privacy equivalent to the one applied within the European Union and Switzerland.
    2. Before transferring any personal data from the European Union or Switzerland to other countries, we implement safeguard mechanisms recognized by European regulators such as standard contractual clauses. You can request a copy of any such safeguards in the address mentioned in the first Section of this Privacy Policy.

  9. Data Subject's Rights

    1. Any person has the right to obtain confirmation of the processing of their personal data carried out by OBS.
    2. You can exercise your rights of access, rectification, deletion and portability of your data, limitation and opposition to its processing, as well as not being the subject of decisions based solely on the automated processing of your data, where appropriate, before OBS. You also have the right to withdraw your consent at any given moment. You have the right to object to our processing of your Personal Information that is based on our legitimate interests by sending an email to our DPO on dpo@obs.tv. We will then stop processing the data unless we can demonstrate a compelling legitimate ground that overrides your rights (e.g. exercising or defending a legal claim) or an exemption that applies. If you live outside the European Union, you may also have rights under applicable laws in such jurisdiction.
    3. You may exercise your rights through an e-mail to dpo@obs.tv. If you feel like your request or query have not been satisfactory you have the right to lodge a complaint before Spain's supervisory authority: Agencia Espanola de Protecci6n de Datos, Calle Jorge Juan 6, 28001 Madrid, Spain and its website www.aepd.es.

  10. Changes to this Privacy Policy

    1. We reserve the right to make changes to this Privacy Policy, at any time. When we make changes, we will revise the "last updated" date at the bottom of the Privacy Policy and any change will be effective immediately upon posting. We will use reasonable efforts to inform you about any material changes made to this Privacy Policy, for example by posting a relevant notice on the Services.
    2. We encourage you to review this Privacy Policy regularly.

This Privacy Policy was last updated on June 3rd 2024