IBU Privacy Policy
IBU PRIVACY POLICY
DATA PROTECTION INFORMATION ACCORDING TO ART. 13, 14 GDPR
The following entity is the data controller for the data processing carried out on the IBU Platforms (as defined below) in accordance with Art. 4 No. 7 of the General Data Protection Regulation (“GDPR”):
International Biathlon Union Sonystraße 20 5081 Anif (Salzburg) Austria
Represented by the president of the IBU together with another member of the association board
The International Biathlon Union (“IBU” or “we”, “us” and “our”) takes your privacy seriously and understands the importance of maintaining the confidentiality of your personal data and other information stored about you. In particular, IBU is committed to complying with its obligations under the GDPR. To this end, IBU has prepared this document ("Privacy Policy") to provide you with the necessary information regarding the processing of your personal data.
The terms used in this Privacy Policy shall have the meaning ascribed to them in the GDPR (in particular its Art. 4), unless expressly defined otherwise herein.
The Privacy Policy is available at all times on the IBU Platforms (as defined below) and may be amended from time to time. We will post an updated version on the applicable page of the relevant IBU Platforms (as defined below). The relevant IBU Platform (as defined below) may also provide you with notices of changes to this Privacy Policy or other matters by displaying notices or links to notices to you.
It is your responsibility to review this Privacy Policy periodically. IBU reserves the right to change this Privacy Policy at any time without prior notice to you. If IBU changes in a material way any of the processing activities concerning your data for which IBU has obtained your consent, IBU will ask you for your consent in respect to the new processing activity.
Date of issue of the latest version of this Privacy Policy: 03/2025
1. WHAT THIS PRIVACY POLICY COVERS
This Privacy Policy applies to IBU’s processing of your personal data when you visit or use any website, application or service operated by IBU which links to or presents this Privacy Policy (collectively the “IBU Platforms” and each an “IBU Platform”). Personal data means any information which relating to an identified or identifiable data subject, i.e. the natural person to whom the data relates. Your personal data therefore includes any information that can be related to you directly or indirectly linked to you, such as a name, an identification number, or an online ID such as an IP address.
This privacy policy covers the International Biathlon Union and the IBU Event and Marketing GmbH.
2. THE PERSONAL DATA WE COLLECT FROM YOU
IBU collects and processes personal data relating to of your use of and interactions with the IBU Platforms. The types of personal data we may collect, and process vary from IBU Platform to IBU Platform but can be summarised as follows:
Identity data, which includes first name, middle name, last name, username or similar identifier, date of birth, gender and location.
Contact data, including email address or social media identifier (nickname or similar).
Technical data, which may include internet protocol (IP) address, your login data, the referring website, your preferred language, browser type and version, time zone setting, your location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access IBU Platforms.
Profile data, which includes your username and password for any IBU Platform as well as your interests and preferences.
Usage data, which includes information about how you use IBU Platforms, such as screen captures and diagnostic logs.
Marketing and communications data, which includes your preferences for receiving marketing from us and our third parties and your communication preferences.
Cookie and device data, which includes data collected by cookies used by IBU Platforms, the details of which are set forth in section 4.
Submitted data, which includes any information you may provide to us, such as photographs and contest entries.
3. HOW WE COLLECT YOUR PERSONAL DATA
We collect your personal data in a variety of ways as described below.
3.1 Information you give to us directly
We collect information about you when you:
register for an account with us (including via social media profiles such as Facebook) or to log in and make changes to your online account;
register to receive marketing communications from us;
enter into a contest on IBU Platforms;
interact with our social media profiles; and
contact us (including via email or social media messaging).
3.2 Personal data we collect automatically
IBU also automatically receives and records non-sensitive information on its technical infrastructure logs about your device when you visit IBU Platforms, regardless of whether you have registered for an account or not, by simply browsing our servers. This includes the technical data and usage data referred to in section 2 above.
IBU also further collects certain data through the use of cookies on IBU Platforms. Please see section 4 for more details on our use of cookies.
4. COOKIES
When you visit IBU Platforms, information about the pages you view may be stored in so-called cookies, which are stored on the device that you use to access the IBU Platforms, or through similar technologies such as tracking pixels.
4.1 What is a cookie?
Cookies are text files that, depending on your preferences, may be stored on the hard drive of your device (whether a computer, tablet, mobile phone, or Internet-enabled device) when you visit a website or click on an advertisement. Cookies are used to identify the device on which they are stored and are valid for a limited period of time.
4.2 Why do we use cookies?
There are four different types of cookies that may be stored on your device while browsing the IBU Platforms. The intended purpose of each is described below:
4.2.1 Essential cookies
Essential cookies help make the IBU Platforms work by providing basic functionality needed to navigate the site, access secure areas, authenticate logins and use contact forms, as well as other advanced features. This type of operational cookie cannot be disabled. You can set your browser to block or warn you about them, but if you block their use, some parts of the IBU Platforms will not work.
4.2.2 Personalisation cookies
Session-based personalisation cookies allow the IBU Platforms to associate your actions during a particular browser session. These cookies expire each time you close your browser and do not remain on your device thereafter.
Persistent personalisation cookies are stored on your device in between browser sessions. They are used to remember your preferences or actions across IBU Platforms, such as items between the IBU website and app. These cookies remain on your device until they expire or you delete them.
4.2.3 Analysis cookies
Analysis cookies allow us to count visits and traffic sources, so that we can measure and improve the performance of the IBU Platforms. They help us know which pages are the most and least popular, and show us how visitors move around the site. If you choose not to accept these cookies, we will not know when you have visited the IBU Platforms and will not be able to monitor their performance.
4.2.4 Targeting/advertising cookies
Targeting cookies may be sent through the IBU Platforms by our advertising partners, to help them build a profile of your interests and show you relevant ads on other sites. They do not directly store personal data but are based on unique identification of your browser and internet device. If you choose not to accept these cookies, you will experience less targeted advertising.
4.3 What are tracking pixels?
In addition to the four types of cookies described above, the IBU Platforms may use so-called tracking pixels to monitor the effectiveness of various elements of the IBU Platforms (including advertising elements). Tracking pixels are very small 1x1 pixel images integrated into the code of the IBU Platforms.
When you visit the IBU Platforms, tracking pixels send a limited amount of information to the pixel-server. This information is used solely for statistical purposes regarding (i) the number of unique users of the IBU Platforms; (ii) the number and type of pages visited; and (iii) the effectiveness of advertising strategies. The information collected may include, for example, match locations viewed, match dates viewed, ticket categories viewed, your browser language, your IP address and your location data (such as country of residence).
4.4 How do I manage cookies?
The cookie preference centre allows you to customise your cookie preferences at any time according to your needs and preferences. This tool records your consent and specifically controls the performance and targeting cookies that are enabled when you use the IBU Platforms.
If you wish to restrict or block the use of cookies generally, you can set your browser to display a warning message each time a cookie is about to be stored, or you can block all cookies. You can also manually delete any cookies that have already been sent by your browser.
For ease of navigation, IBU recommends that you accept cookies on IBU Platforms and do not delete them. Otherwise, some of the features of the IBU Platforms may not display or function properly.
5. HOW DO WE PROCESS YOUR PERSONAL DATA
The personal data we hold about you will be used for a number of purposes depending on the IBU Platform, as set out below. Under data protection laws, we must have a lawful basis for processing your personal data. This section describes how we use your personal data, namely (i) for what purposes and (ii) on what legal basis.
Failure to provide your personal data would result in limited use of our site. It would also not be possible to create an account.
5.1 Providing IBU Platforms
We will process your personal data, including, in particular, technical data and profile data, in order to operate the IBU Platforms, including the correction of technical faults and the defence of the relevant IBU Platform against misuse and technical attacks, and to provide you with access to the IBU Platforms. This data processing is based on our legitimate interest in operating the IBU Platforms and the need to fulfil our contractual obligations when we agree to provide you with access to those parts of the IBU Platforms that require registration.
5.2 Marketing and Communications
We will process your personal data, including in particular your identity data, contact data, and marketing and communications data, in order to send you marketing and other communications concerning the IBU, IBU events, etc., as well as marketing and other communications on behalf of our partners and sponsors, concerning their organisation, their business and the events they organise. This data processing is based on your consent, which we will ask for separately (e.g. when you register to receive marketing communications from us). You may withdraw your consent at any time with effect for the future by contacting us (please see section 9 for contact details).
5.3 Competitions
We may process your personal data, including in particular your identity and contact details, in order to administer your participation in any competition that we organize and that you choose to enter. This data processing is based on the need to fulfil our contractual obligations under the terms of the relevant contest.
5.4 Data collected by cookies
We will use the data collected through cookies for the following purposes:
Essential cookies: to optimise the respective IBU Platform for ease of use, to troubleshoot technical errors, to protect the IBU Platform from misuse and technical attacks, to access secure areas, to authenticate logins and use contact forms, and to provide other advanced functionality.
Personalisation cookies: to provide you with a better user experience by linking your actions during a particular browser session and remembering your preferences or actions across IBU Platforms.
Analysis cookies and tracking pixels: to count visits and traffic sources and to compile statistics about the popularity of features and the types of software and computers used by visitors, so that we can measure and improve the performance of the IBU Platform.
Targeting/advertising cookies and tracking pixels: to identify your device in order to deliver personalized advertising and to track the effectiveness of such advertising.
Our use of essential cookies is based on our legitimate interest in the effective operation of IBU Platforms. We ask for your consent to use all other cookies, as well as tracking pixels and other similar technologies on your device, we ask for your permission (consent). There is a notice on the IBU Platforms that describes how we use cookies and ask for your consent to place cookies on your device. You may revoke this consent at any time in the cookie preferences centre or by deleting cookies in your browser, either manually or by configuring your browser to automatically delete cookies (e.g., when you close it). See section 4.4 for more information.
6. WITH WHOM DO WE SHARE YOUR PERSONAL DATA
We may share your personal data with the parties listed below for the purposes described below:
With internal departments and external third parties who perform functions on our behalf and who also provide services to us, such as professional advisors, technology providers and hosting companies; advertising companies and exchanges; analytics companies; payment providers. The purposes of such disclosures will be limited to the provision of their respective services and will be based on our legitimate interest in obtaining such services.
With external third-party advertisers (such as Facebook or Google) to help us identify customers similar to our audience or to show you relevant ads on third party websites. The information shared with these advertisers is pseudonymised to protect your personal data. This sharing is based on your consent given through your cookies consent, which can be revoked at any time. Please see sections 4 and 5.4 for more details.
with police and government authorities, particularly in response to investigations or requests for information pursuant to subpoenas or court orders. This disclosure is based on our legal obligations under applicable laws.
with our partners and sponsors for marketing and other communications we may send to you on their behalf. This sharing is based on your consent, which may be revoked at any time.
Your personal data will generally be stored within the EEA, but in limited circumstances may be transferred to suppliers located outside the EEA. In such cases, we will have taken appropriate steps to provide equivalent protection to that which would apply to your personal data within the EEA and in accordance with applicable data protection laws. If you would like to obtain more information about the locations to which your personal data may be transferred and the specific measures taken to protect your personal data, please contact us at any time (please see section 9 for contact details).
7. HOW LONG WE RETAIN YOUR PERSONAL DATA
Your personal data will be kept as long as necessary to fulfil the respective purpose for which it was collected and will be deleted as soon as it is no longer necessary to achieve that purpose. In the case of data collection for the provision of IBU websites, this is done at the end of each session. The IP address of the user must be stored for the duration of the session in order to allow the use of the website.
8. WHAT ARE YOUR RIGHTS
By law, you have a number of rights (subject to certain conditions) in relation to your personal data, as described in this section 8. For more information and advice about your rights, please contact the data protection authority in your country.
8.1 Your right to object to processing
You have the right to object to certain types of processing, including processing for direct marketing purposes (i.e. if you no longer wish to be contacted with potential offers or opportunities). The easiest way to unsubscribe from newsletters and email marketing communications is to click on the unsubscribe link at the bottom of any email newsletter we have sent to you, or alternatively by changing your account settings and preferences. You may also unsubscribe by contacting us using the contact information provided in Section 9.
You may also object to any data processing based on our legitimate interests, on grounds relating to your particular situation. Please note, however, that we may be able to continue the processing in this case if we can demonstrate compelling legitimate grounds for the processing that override your interests.
8.2 Your right to be informed
You have the right to be provided with clear, transparent and easy to understand information about how we use your personal data and your rights. That is why we provide the information in this Privacy Policy.
8.3 Your right to access your personal data
You have the right to ask us to confirm whether we are processing your personal data and, if we are, to obtain access to your personal data and certain other information (similar to that set out in this Privacy Policy).
8.4 Your right to update and correct (retification)
You have the right to have your personal data corrected if it is inaccurate or incomplete.
You may review, correct or update some of your personal data at any time by accessing your account on the IBU Platforms where it was created. However, you may also send us a written request to do so on your behalf at any time.
8.5 The right to deletion (the “right to be forgotten”)
You may request that your personal data be deleted or removed if there is no compelling reason for us to continue using it. This is not a general right to deletion, but can only be requested in the following cases:
The personal data is no longer necessary for the purposes for which it was collected and/or processed.
You have withdrawn your consent to the processing of personal data, and there is no other legal basis to justify the processing.
You have successfully objected to our processing of your personal data (as detailed in section 8.1 above) and (in the case of processing based on our legitimate interests) there are no overriding legitimate grounds for the processing.
Your personal data has been processed unlawfully.
The deletion of your personal data is necessary to comply with a legal obligation under EU law or the law of the member states to which we are subject.
You are under the age of 14 and your personal data has been collected with your consent.
This right is also subject to exceptions, in which case we may still be entitled to retain your data. In particular, this is the case when we exercise our right to the freedom of expression and information, for reasons of public interest in the field of public health, or if we need your data to establish or exercise our legal claims or to defend against legal claims of others.
8.6 Your right to restrict processing
You have the right to request that the processing of your personal data be restricted. If processing is restricted, we may still store your personal data, but we will not use it further. This right is available to you:
if you dispute the accuracy of your personal data for a period of time sufficient to allow us to verify the accuracy of such information;
if the processing is unlawful, but you object to the deletion of the erased personal data and instead request a restriction on the use of the personal data;
if we no longer need the personal data for the purposes of processing, but you need it for the establishment, exercise or defence of legal claims, or
if you object to the processing and it is not yet clear whether our legitimate reasons outweigh your reasons for objecting.
8.7 Your right to data portability
You have the right to receive and re-use your personal data for your own purposes across different services and the right to receive your personal data in a structured, standardised and machine-readable format. You may also request that your personal data be transferred directly from us to another controller, where technically feasible. This must not affect the freedoms and rights of any other person.
8.8 Your right to lodge a complaint
You have the right to lodge a complaint about the way IBU handles or processes your personal data with your national data protection authority by contacting the relevant data protection authority directly.
In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), www.dsb.gv.at, Barichgasse 40-42, 1030 Vienna, Phone: +43 1 52 152-0, E-Mail: dsb@dsb.gv.at.
8.9 Your right to withdraw consent
If you have given us your consent to do something with your personal data, you have the right to withdraw your consent at any time, with effect for the future. This includes your right to withdraw your consent for us to use your personal data for marketing purposes.
9. CONTACT
If you have any questions about this Privacy Policy or our processing of your information, please contact us using the details below.
9.1 Responsibility for Data Processing
In accordance with Article 4 (7) of the GDPR, the responsibility lies with the
IBU International Biathlon Union
A – 5081 Anif b. Salzburg, Sonystrasse 20 Phone +43 662 855050 Fax +43 662 855 08 Email: biathlon@ibu.at
Our Data Protection Officer is
Dr. Raphael Toman LL.M. (NYU)
BRANDL TALOS I ATTORNEYS AT LAW
VIO PLAZA Tower, Rechte Wienzeile 223/14.Stock, 1120 Vienna, Austria
Einloggen
DE
Suche
Kontakt
