Privacy Notice

Union des Association Européennes de Football (UEFA) whose offices are located at Route de Genève 46, 1260 Nyon 2, Switzerland, acting as data controller.

UEFA is responsible for the processing activities related to the Medical Symposium (the “Event”).

Capitalised terms used but not defined in this Privacy Notification are defined in the Terms and Conditions in the context of which this Privacy Notification must be taken note of and read in the registration process.

When creating an account on the online registration platform (the “Platform”) to participate in the Event, you are requested to provide the following personal data:

• title;
• first name(s) and last name;
• job position and organisation/affiliation;
• email address;
• mobile number;
• address (street, postcode, town/city, country/region);
• skills/qualifications;
• proof of student status;
• special dietary and/or accessibility needs;
• participant category (guest, speaker, attendee); and
• credit or debit card details (including company name, VAT number, billing address and payment confirmation status handled by approved third parties)

We also collect data generated by your activity on the Platform: log information such as Internet protocol (IP) address, navigation behaviour through the website (in particular, by using cookies), device and software used, the time/date/duration of your visit, and other similar information and parameters related to your operating system and computer environment.

The list and description of cookies used on the Platform is available under the section “Cookie Settings”.

When attending the Event, your voice, image and likeness may be recorded during your time at the Event venue (“Recordings”).

The personal data are collected and processed for the following purposes:

1. Attendee Registration: Registration of event attendees on the conference website, or via the conference inbox. In all cases the registration Platform will be used to complete the registration process.
2. Attendee Payments: Payment by attendees for conference via the conference website.
3. Badge printing for Attendees/Speakers: Printing of badges (in advance or onsite) for conference attendees and speakers.
4. Audio Visual for Conference: Putting in place audio visual arrangements for each conference to facilitate speaker presentations.

The Recordings are used for the purposes of public reporting and promotion of the Event.

The personal data are processed on the basis that such processing is necessary to enable participants to register correctly, manage attendance and confirmations, as well as to coordinate on-site operations such as access management and accreditations. Certain personal data may also be processed for the purpose of issuing targeted Event communications.

• Legal basis for the data processing is Article 6 (1) lit. b of the GDPR.

The personal data, including the Recordings obtained through the closed-circuit television (CCTV) system, are processed on the basis that such processing is necessary to pursue the legitimate interest of ensuring an effective security system and a safe environment within the Event venue. These Recordings are operated and managed by the Event venue owner.

The use of the Recordings is also necessary for the purpose of the legitimate interest of public reporting and promotion of the Event.

• Legal basis for the data processing is Article 6 (1) lit. f of the GDPR.

If you give us your consent at the time of your registration, your name, organisation, and email address will be shared with selected partners, delegates and sponsors/exhibitors for their purpose of contacting you with relevant opportunities, updates, and information that may be relevant or beneficial to you or your organisation. They are acting as independent data controllers in this context.

• Legal basis for the data processing is Article 6 (1) lit. a of the GDPR.

Data generated by your activity on the Platform technically necessary for the operation of such may be processed on the basis of the legitimate interest to provide you with the necessary technical functions of the registration Platform. Data generated by your activity on the Platform technically not necessary for the operation of such will only be processed by UEFA and/or authorised third parties if you give us your consent.

Processing of such data will be in accordance with the Cookie Notice; you can withdraw your consent in this context via opt-out in the “Manage Consent” settings under the registration Platform for the Event.

• Legal basis for the data processing is Article 6 (1) lit. a and f of the GDPR.

You understand that your personal data will be available to UEFA. UEFA has contracted Conference Partners International (CPI), with registered office at Suite 21, Hyde Building, The Park, Carrickmines, Dublin 18, D18 V448, Republic of Ireland, for managing the Platform as well as the registration process for the Event, acting as data processor in this context.

Third party providers may access certain personal data for the sole purpose of (i) maintaining the security and performance of the Platform, (ii) processing payment, and (iii) managing access to the Event venue and distributing accreditations, acting as data sub-processor(s) in this context.

If you request accommodation, certain personal data (such as your name and contact details) will be shared with the selected hotels solely for the purpose of facilitating your booking.

The transfer of personal data to the relevant public authorities, based on legal provisions and obligations, for the purpose of safety, security and sanitary measures and law enforcement related to the Event, is reserved.

UEFA will not, in principle, transfer your personal data to countries outside of the European Economic Area (EEA), with the exception of data processing within Switzerland by the UEFA or any service providers identified above. The EU Commission has decided that Switzerland ensures an adequate level of data protection (Article 45 of the GDPR).

In the event of a transfer of personal data to the recipients identified above located in any other country which does not ensure an adequate level of protection within the meaning of applicable data protection laws, in particular, according to Article 44 et seq. of the GDPR, UEFA (i) have put in place European Commission approved standard contractual clauses to protect your personal data and/or (ii) will rely on your consent (where permitted by law).

To learn more about those safeguards, please contact us at: privacy@uefa.ch.

You may request deletion, access or update your personal data directly in the Platform by contacting privacy@uefa.ch.

In addition, you have certain rights under Chapter III of the GDPR, depending on the legal basis and the purpose of the processing, in particular the right of access (Article 15 of the GDPR) and the rights to rectification (Article 16 of the GDPR), erasure (Article 17 of the GDPR), restriction of processing (Article 18 of the GDPR), and data portability (Article 20 of the GDPR), as well as the right to object (Article 21 of the GDPR).

You have also the right to lodge a complaint with your local Data Protection Supervisory Authority and have the ability to seek to enforce your rights through a judicial remedy. The list of relevant local Data Protection Supervisory Authorities in the European Union is available here.

You understand and acknowledge that your personal data is being collected and processed in accordance with:

• UEFA Privacy Policy available at https://www.uefa.com/privacypolicy/
• UEFA Cookie Notice available at https://uefamedicalsymposium.com/cookie-policy-eu/