Privacy Policy

The privacy policy (“Privacy Policy”) will be supplemented with the mentions of additional information that will be made available for each service present on the website (hereinafter, respectively, “Website”, “Milano Cortina 2026” or “Data Controller”).

Personal data as defined in the data protection regulations (General Data Protection Regulation no.2016/679 of 27 April 2016 and Legislative Decree n. 196 of 30 June 2003 as amended from time to time) consists of any information that directly or indirectly identifies the user as a natural person.

Milano Cortina 2026 reserves the right to amend the Privacy Policy, in particular to take account of any changes in the applicable law. Therefore, the user is invited to regularly consult this page.

Milano Cortina 2026 has appointed its own Data protection officer (or “DPO”) who can be contacted by e-mail at DPO@milanocortina2026.org.

We inform you that your personal data collected on Website and the sub-sites and during our interactions is processed by Milano Cortina 2026, with registered office in Piazza Tre Torri 3, Milan, VAT no. 97866790153, VAT no. 11199200962, as the data controller.

In order to ensure optimal use of the websites dedicated to the Games and in particular to facilitate your access to the various websites, including the Olympics.com website and the Olympics mobile application operated by the International Olympic Committee (IOC), Maison Olympique (Olympic House) 1007 Lausanne, Switzerland, Milano Cortina 2026 and the IOC have set up a unique authentication and access management system (so called “Olympic ID”), allowing you to create accounts using the same login details on different environments, including (i) on the Milano Cortina 2026’ Website and/or certain sub-sites available on its Website, and (ii) the Olympics.com website and the Olympics mobile application published by the IOC. Creating the Olympic ID account on one of these websites thus allows you to access your account, which may be created on the various platforms managed by Milano Cortina 2026, using the same access data. Milano Cortina 2026 - as part of the creation of the Olympic ID - will share with the IOC information such as (i) technical data collected only once at the time of user registration; (ii) the set of consents required for the Olympic ID system; and (iii) first name, last name, date of birth necessary for the basic management of the profile and to ensure a consistent user experience. Consequently, with specific regard to the processing of your data related to the authentication and management of your access to your account on the Website or sub-sites of Milano Cortina 2026, Milano Cortina 2026 and the IOC process your data as joint data controllers.

In addition, your data is also intended for use by each of the IOC and the International Paralympic Committee, which use it as separate data controllers to better understand their fans, evaluate the performance of digital properties or activities connected to the Olympic Games or Paralympic Games respectively, personalise their services, products and marketing activities and, where you have given your consent, send you direct marketing, including marketing related to their products, services and partners. They inform you, in accordance with their obligations, about their own purposes for use of your data and how they use your data through their respective privacy policies. We invite you to consult their privacy policies available on their websites ( https://olympics.com/en/privacy-policy and https://www.paralympic.org/privacy ), which set out the purposes pursued by these recipients and how to assert your rights with regard to your data with them.

The Olympic ID allows the user to access certain platforms on the Website with the same credentials. Once the user has created his/her Olympic ID, accepting the terms and conditions of use of each of the platforms, may (i) receive so-called "institutional" communications, i.e. communications relating to the organisation of the Milan Cortina 2026 Olympic and Paralympic Winter Games. (so-called light account) and (ii) access, on a voluntary basis, a dedicated section of Fan26 (even without having created an account on this specific platform) available at https://fan26.olympics.com in order to have content and updates on the upcoming Olympic Games available. 

Once a user has created his/her Olympic ID and registered on one of the platforms, he/she will be able - always logging in via the Olympic ID - to view certain information such as, for example, his/her personal details and e-mail address on the other platforms he/she wishes to access. This information is always marked [*] and is therefore mandatory. This circumstance on the one hand allows the user an easier user experience and on the other guarantees Milano Cortina 2026 a better management of the information collected. 

In the event that the user decides to no longer receive institutional communications, his/her light account will be cancelled from the relevant platform; only the Olympic ID will remain active.

The controller could collect such following type of data: 

When some of your data is essential for the pursuit of certain purposes and in order to respond to you request or to meet a legal obligation, we will inform you of this during collection.

Your personal data is collected and used in different ways. You will be informed directly on the data collection pages of the specific uses envisaged by Milano Cortina 2026 as data controller. In general, your data is collected according to the following legal bases and purposes:

FOR THE PERFORMANCE OF OUR CONTRACTUAL RELATIONSHIP OR PRE-CONTRACTUAL MEASURES TAKEN AT YOUR REQUEST:

• Facilitate your use of the services, allow your registration and authentication and manage your user account (the processing of personal data for authentication and access management being the joint responsibility of Milano Cortina 2026 and the IOC for the following sites: https://milanocortina2026.olympics.com/);
• Provide you with the information and content you have requested.

TO MEET OUR LEGAL, ACCOUNTING AND TAX OBLIGATIONS (MANAGEMENT OF REQUESTS TO EXERCISE YOUR RIGHTS) UNLESS YOU OBJECT AND WITHIN THE LIMITS OF YOUR INTERESTS AND RIGHTS, TO MEET ORGANISATIONAL AND OPERATIONAL NEEDS BY MILANO CORTINA 2026:

• Develop and promote the Games and the Olympic movement (sending institutional communication concerning our news, developing statistics, carrying out satisfaction surveys, etc.);
• Maintain and develop the Website and sub-sites;
• Ensure the security of the Website and sub-sites and ensure that they are used in accordance with applicable law;
• Develop traffic statistics and improve the operation, security and efficiency of the website or sub-sites;
• Combat fraud.

IF YOU HAVE CONSENTED, YOUR DATA IS USED FOR THE PURPOSE OF SENDING PROMOTIONAL MESSAGES OR INFORMATION BY ELECTRONIC MEANS COMMUNICATION (INCLUDING NEWSLETTERS, MARKETING MESSAGES RELATED TO THE PRODUCTS, SERVICES OR OTHER INITIATIVES OF THE RELEVANT DATA CONTROLLER OR THEIR COMMERCIAL PARTNERS):

• By Milano Cortina 2026, and/or
• By the recipients, which are the IOC and its partners and/or
• By any other recipient of the data to which you have consented.

Where appropriate, the recipient uses your data as the data controller in accordance with its privacy policy.

IF YOU HAVE CONSENTED, YOUR DATA IS USED FOR THE PURPOSE OF SENDING PROMOTIONAL MESSAGES OR INFORMATION BY ELECTRONIC MEANS COMMUNICATION (INCLUDING NEWSLETTERS, MARKETING MESSAGES RELATED TO THE PRODUCTS, SERVICES OR OTHER INITIATIVES OF THE RELEVANT DATA CONTROLLER OR THEIR COMMERCIAL PARTNERS) DEPENDING ON YOUR CHOICES – Profiling activites:

• By Milano Cortina 2026, and/or
• By the recipients, which are the IOC and its partners and/or
• By any other recipient of the data to which you have consented.

Relating to profiling activities, the automatic processing will be executed as following described. Profiling and personalisation of iterations with users may be carried out through automated analysis, based on: (A) preferences expressed directly by users such as: (i) preferred Olympic and Paralympic winter disciplines; (ii) language habitually used; (iii) privacy consents expressed; (B) on user data such as (i) date of birth; (ii) country of domicile; (iii) postcode; (iv) gender; (v) date of registration; (C) on the user's behaviour in response to communications sent by email (open, click, unsubscribe); (D) on the active participation in initiatives within Milano Cortina 2026’ platforms (answer to quizzes, subscription to contests, surveys); as well as (E) on the behaviour within third party platforms for which the Milano Cortina 2026 will receive information and data via offline sharing from providers (e.g. ticketing platform that will transmit information related to ticket purchases). 

For electronic means communication we could intend include email, instant messaging apps, blogs, and text messages. Milano Cortina 2026’ electronic communication network can include any combination of these types of means.

We use automatic tracking mechanisms like cookies and similar technologies to collect certain data while you are browsing our services, or when you visit the sites or services of other organisations that we work with. A cookie is a small file, stored on your browser or computer hard drive, which is used to collect data about your interactions with websites and other digital properties. For example, information about your device (browser type, operating system, language, unique device identifier), network connections (Internet Service Provider, IP address, time zone), browsing history including date and time and pages visited, as well as general location such as your city and country. 

You can disable cookies (except those cookies that are strictly necessary) or manage cookies using the cookies settings available on each of the websites or other digital properties through which the cookies are set. You can also manage cookies by configuring the functionalities of your internet browser.

To know more about the use of cookies, and how to manage your consent, please consult our  Cookie Policy. Where our cookies are placed on third party sites or services, you should consult their cookie policies and consent management tools.

Milano Cortina 2026 may send the data to the following recipients:

• The IOC for the purposes determined by itself under the conditions set out in its own privacy policy, in particular to know its fans better, evaluate the performance of digital properties or activities connected to the Olympic Games, personalise its services, products and marketing activities and, if you have consented, send you marketing and/or profiling communication (according to your preferences), including marketing related to its products, services and partners. The sharing of collected is based on consent (where you have provided it) or the IOC’s legitimate interest to fulfil its purposes. Subject to some exceptions, you have the right to object to such processing activities. You may contact directly the IOC to exercise this right of objection. The IOC’s contact details are contained in its privacy policy, a link to which has been included in this Privacy Policy.
• The other Olympic Movement stakeholders, including International Federations, National Olympic Committees, other Organising Committees of the Olympic Games, and the IOC’s commercial partners, if you consent to receive their marketing communications, with the Committee or Partner using your data in accordance with its privacy policy. The data collected will be used in accordance with each party's privacy policy. 
• The Paralympic International Committee (“IPC”), if you agree to receive its marketing communications, with the Partner using your data in accordance with its privacy policy.
• Milano Cortina 2026’ technical service providers for the strict needs of their mission and in accordance with its instructions, in particular in the fields of IT (publishers of hosted software, IT platform development services, hosting services, customer relationship services (CRM) and other communication services, analysis and measurement services, communication services by email and push notification, internet services).
• Third parties who may use the collected data for their specific needs (consultant, judicial authority, etc.)

Milano Cortina 2026 may receive data in connection with your use of third-party platforms such as the IOC websites or the shop operated by the IOC partner Fanatics, which collect it from their websites as data controllers.

In particular:

• If you create an account or interact with the IOC on one of its websites, and you have an account on the Milano Cortina 2026 website or sub-sites, the IOC shares with Milano Cortina 2026 the data it collects in connection with the services it provides to you in accordance with its privacy policy.
• The IOC and Milano Cortina 2026 have authorised Fanatics, Inc. (“Fanatics”), 225 Washington Street, Third Floor, Conshohocken, PA 19428, USA, to sell official Olympic merchandise. In accordance with the privacy policy of the Fanatics Olympic Shop, Fanatics shares the data of visitors to the shop with the IOC, which then shares it with Milano Cortina 2026. In particular, the IOC shares with Milano Cortina 2026 the data of visitors who (i) purchase a product bearing the Milano Cortina 2026 trademark or having a link with the Milano Cortina 2026 Olympic Games, (ii) reside in Italy or (iii) have given their consent to receive communications from Milano Cortina 2026 as above described.

Your data will be kept by Milano Cortina 2026 for the period during which it is necessary to fulfil the aforementioned purposes, and with regard to the data used in the context of Milano Cortina 2026 marketing and/or profiling communications if you have consented to it, for a maximum period of 2 years from the collection and unless you revoke your consent. 

At the end of these periods, your data will, if necessary, be archived for a period not exceeding the legal limitation periods or the applicable archiving obligations or for the duration of the proceedings in the event of litigation. Once these deadlines have expired, the data will be destroyed by Milano Cortina 2026.

We remind you that the data transferred to the IOC or to other recipients as indicated above is kept by said recipients for the periods they indicate in their respective privacy policies.

The data collected by Milano Cortina 2026 as the data controller, for the purposes listed in paragraph above, is protected via appropriate technical and organisational measures against the risks of unauthorised access to or disclosure of your data, in accordance with the applicable laws.

Through the use of our subcontractors, your data may be transferred to third countries outside the European Union (EU) or the European Economic Area (EEA). Where applicable, and if the third country does not benefit from an adequacy decision issued by the European Commission, these subcontractors have put in place instruments governing these transfers in accordance with the applicable laws, including the applicable standard contractual clauses enacted by the European Commission. Each supplier and/or third party takes appropriate technical and organisational measures for the protection of personal data. 

You have the following rights over your data: 

• The right to obtain confirmation as to whether or not data concerning you is or is not being processed and, when it is, the right to access this data, as well as the right to more information on this processing;
• The right to rectify inaccurate data;
• In certain specific cases, the right to obtain the erasure of certain personal data;
• In certain specific cases, the right to portability of your data: right to receive the data you have provided to us and/or the right to ask us to transmit it to another controller, if the processing is based on your consent or on a contract and the processing is automated;
• The right to restrict processing in some cases;
• The right to object to the processing of your data, for reasons relating to your particular situation, or, regardless of your particular situation, the right to object to the use of your data for marketing purposes;
• The right to withdraw your consent at any time, without affecting the lawfulness of the processing if it is based on your consent, with regard to processing that are subject to your consent. 

To exercise your rights, simply write to privacy@milanocortina2026.org and attach, if applicable, any documentary evidence to prove your identity and substantiate your request.

Please note that Milano Cortina 2026 may, in accordance with the law, refuse to grant certain requests relating to some of these rights (in particular the right to cancellation), for legitimate reasons or where there is a need to assert a right in court.

If you have any unresolved issues, you may lodge a complaint with the Italian Supervisory Authority for the Protection of Personal Data, as provided for in Article 77 of the GDPR, or to take appropriate legal action (Article 79 of the GDPR).

With regard to the processing of your personal data by Olympic ID, you can contact Milano Cortina 2026 at the e-mail address above mentioned or the IOC via its dedicated portal. 

If you wish to assert your rights with the third parties to which the data have been disclosed by the Data Controller, it is your responsibility to contact them in accordance with the procedures set out in their privacy policies.

Last update: 23/04/2024