Information Notice on the processing of personal data

Fondazione Milano Cortina 2026, with registered office in Piazza Tre Torri 3 in Milan, C.F. 97866790153, P.IVA 11199200962, in its capacity as data controller ("Controller" or "Milano Cortina 2026"), pursuant to EU Regulation 2016/679 ("GDPR") and the applicable national data protection legislation, provides the following information in the context of its participation in the "Cultural Olympiad" programme ("Programme").

Milano Cortina 2026 has appointed its own Data Protection Officer (DPO) who can be contacted by e-mail at DPO@milanocortina2026.org.

Please refer to the Terms and Conditions of the Cultural Olympiad Programme for definitions of terms in capital letters, where not expressly included in this notice

Milano Cortina 2026 will collect information - which under the GDPR represents personal data ("Data" or "Personal Data") - via the form. For example, name, surname, date of birth, e-mail and telephone number will be collected).

Personal Data shall be processed, without prior consent, for: (i) the participation in the Programme and the provision of services related thereto (e.g. the sending of communications relating to the evaluation process); (ii) the fulfilment of legal obligations (e.g. to verify compliance with the age requirements of the Regulations), regulations, EU legislation, orders and prescriptions of the competent authorities; as well as (iii) to prevent fraud and unlawful activities and to exercise the rights and protect the interests of the Controller (e.g. the right of defence in court). For these purposes, therefore, the provision of information is necessary and, without it, it will not be possible to consider the Application.

Personal Data shall be processed, subject to consent, in order to: (i) send you communications - through digital communication channels, such as, for example, e-mail, advertising programmes, Milano Cortina 2026 website, Social Media - relating to initiatives generally proposed by Milano Cortina 2026 (such as, for example, discounts and promotions, events, initiatives and competitions on services and products of the Owner, Partners and Sponsors); (ii) analyse, also by automated means, your preferences, your interests (for example, sports practices, events and initiatives of interest, adhesion to promotions, etc.), and your online behaviour (therefore, the use of tracking tools is foreseen) and propose to you online initiatives (for example, the use of the website, the use of the website, the use of the web site, the use of the web site and the web site's services and products), and your online behaviour (i.e. the use of tracking tools) and to propose to You - through digital communication channels, such as, for example, e-mail, advertising programmes, Milano Cortina 2026 website, Social Media - services, initiatives and customised promotions as well as (iii) to communicate your data to the International Olympic Committee (IOC), the International Paralympic Committee (IPC) and/or other third parties, in order to involve you in the Olympic Games, Paralympic Games and the Olympic Movement through generic or personalised communications according to the purposes and methods more fully described in the information notice of each of the above-mentioned subjects (privacy policy available at the link https://www.olympic.org/privacy-policy). Each of them, with respect to the processing of the information received, will act as an autonomous data controller within the meaning of the GDPR.

The Data collected are processed in compliance with the principles of lawfulness, fairness and transparency, as set out in Article 5 GDPR, with and without the use of electronic means and in any case in such a way as to guarantee the security and maximum confidentiality of the data subject. Data is protected in such a way as to minimise the risk of destruction, loss (including accidental loss), unauthorised access/use or use incompatible with the initial purpose of collection. This is achieved by the technical and organisational security measures implemented by the Data Controller.

With regard to profiling, information is processed in order to carry out a classification based on the preferences expressed, according to the methods described in the information notice available at the following address https://milanocortina2026.olympics.com/en/privacy-policy

The Controller shall process the Personal Data for the time necessary to fulfil the above purposes and, in any case, not beyond the conclusion of the Olympic Games. The right to withdraw one's consent with respect to the processing for which this legal basis applies remains, of course, unaffected. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

The Data may be made accessible for the above purposes to (i) employees and/or collaborators of Milano Cortina 2026, in their capacity as persons authorised to process the Data and (ii) third parties appointed as data processors.

The Data may be communicated to control bodies, law enforcement agencies or the judiciary, at their express request, which will process them as autonomous data controllers.

Milano Cortina 2026 may transfer Data outside the European Union by adopting the most appropriate instruments and guarantees identified by law and by the competent bodies.

Any request for the exercise of rights - as recognised by Articles 15 et seq. of the GDPR - may be sent by registered letter with advice of receipt to the address of the Foundation, as Data Controller, or by email to privacy@milanocortina2026.org. Lastly, if you believe that the processing carried out is in breach of the provisions of the GDPR, you may lodge a complaint with the Supervisory Authority for the Protection of Personal Data, as provided for by Article 77 of the GDPR itself, or take legal action (Article 79 of the GDPR).

Date of last update: 16/05/2024