Football Law Annual Review

Data Protection Policy

Fédération Internationale de Football Association (FIFA)

FIFA-Strasse 20

8044 Zurich

Switzerland

Please read the following to learn more about the ways FIFA uses your personal data before you proceed with the use of the FIFA's Application Platform.

Date of issue of this Data Protection Policy: October 2020

International Transfer

YOUR INFORMATION IS PROCESSED IN SWITZERLAND AND IN THE EUROPEAN ECONOMIC AREA ("EEA"), AND MAY BE PROCESSED ELSEWHERE DEPENDING ON THE LOCATION OF AFFILIATES, BUSINESS PARTNERS, AND OTHER ENTITIES WHO ARE PERMITTED TO ACCESS SUCH INFORMATION UNDER THE TERMS OF THIS DATA PROTECTION POLICY (LOCATIONS OUTSIDE THE EEA MAY INCLUDE COUNTRIES WHICH MAY NOT ASSURE AN ADEQUATE LEVEL OF DATA PROTECTION ACCORDING TO APPLICABLE LAWS IN THE EEA AND SWITZERLAND). IF FIFA PROCESSES YOUR PERSONAL INFORMATION OUTSIDE THE EEA, ALL REASONABLE STEPS WILL BE TAKEN TO ENSURE THAT YOUR PERSONAL INFORMATION IS TREATED AS SAFELY AND SECURELY AS IT WOULD BE WITHIN THE EEA AND SWITZERLAND AND UNDER THE SWISS DATA PROTECTION ACT ("DPA") AND THE GENERAL DATA PROTECTION REGULATION ("GDPR").

The collection of personal data and how FIFA uses it

The processing, collection and use of your personal data will always have a lawful basis. This lawful basis can be FIFA's performance of a contract with you, your freely given consent, compliance with a legal obligation or FIFA's legitimate interest.

Specifically, FIFA may use your personal data for the following purposes:

to manage your registration to FIFA Annual Law Review 2024;
to communicate with you in general;
to respond to your questions and comments;

The personal data FIFA collects from you

The personal data FIFA collects form you when you use FIFA's websites may include but is not limited to the following categories of personal data for the use of FIFA's Application Platform: email address, last name, first name, country of residence date of birth, gender, nationality, role within the club (if applicable), English level, highest education, curriculum vitae, motivation letter, screen name, password, IP address.

Information Sharing and Disclosure

The personal data may be transferred to the relevant public (government) authorities, and/or authorised bodies and organisations as might be required under the applicable national laws and/or for security reasons.

Security

The personal data is stored and maintained in a database in Switzerland or in the European Economic Area (EEA), and is operated by FIFA or on FIFA's behalf.

Some or all of the personal data may be stored outside of the European Economic Area (EEA). If FIFA stores and processes personal data outside the EEA, FIFA will take all reasonable steps to ensure that the personal data is treated as safely and securely as it would be within the EEA and under the Applicable Data Protection Laws. Such measures might include the conclusion of data transfer agreements on the basis of the relevant EU model clauses.

Data security is very important to FIFA. In order to protect the personal data, suitable measures to safeguard and secure the personal data have been put into place.

Your rights

You have the following rights under the DPA and GDPR:

a) the right to be informed about FIFA's collection and use of personal data;

b) the right of access to the personal data FIFA holds about you;

c) the right to rectification if any personal data FIFA holds about you is inaccurate or incomplete;

d) the right to deletion — i.e. the right to ask FIFA to delete any personal data we hold about you;

e) the right to restrict the processing of your personal data;

f) the right to data portability — i.e. obtaining a copy of your personal data to re-use with another service or organisation;

g) the right to object to FIFA using your personal for particular purposes;

h) the right to revoke a given consent at any time; and

i) further rights with respect to the objection to automated decision-making and profiling.

Changes to this Data Protection Policy

This Data Protection Policy may be ended from time to time. If FIFA amends this Data Protection Policy, any changes will be deemed to have accepted the terms of the Data Protection Policy on your first use of the FIFA Application Platform following the alterations.

Contact

If you have any questions about this Data Protection Policy, please contact FIFA's Data Protection Officer by email at dataprotection@fifa.org or by post to Fédération Internationale de Football Association (FIFA), FIFA-Strasse 20, 8044 Zurich, Switzerland. FIFA has a data protection representative within the EU, who may be contacted as follows: VGS Datenschutzpartner UG, Am Kaiserkai 69, 20457 Hamburg, Germany.

Jurisdiction and applicable law

This Data Protection Policy and all matters arising out of or related to this Data Protection Policy shall be governed by the substantive laws of Switzerland, without regard to conflicts of laws and principles thereof.

Any controversy, claim or dispute between you and FIFA arising out of or relating to this Data Protection Policy shall be subject to the exclusive jurisdiction of the competent Courts of the City of Zurich 1, and each party hereby irrevocably consents to the jurisdiction and venue of such Court.