DATA PROTECTION INFORMATION

30. July 2022  

  1. What does this Data Protection Information tell you?

This Data Protection Information tells you how adidas collects and uses the information which can be used to identify you directly or indirectly (“Personal Data”). This might happen when we are taking photographs of you as a participant of the GENERALI BERLIN HALF MARATHON, the adidas Runners City Night or the BMW BERLIN-MARATHON for the purpose a digital shoe count of the adidas brand.

  1. Who is responsible for your Personal Data (“adidas Joint Controllers”)?

For the purposes described in this Notice and compliance with local privacy laws and the GDPR, the following adidas entities are responsible:

 

adidas AG - Adi-Dassler Str. 1, 91074 Herzogenaurach, Germany (”adidas AG”)

 

  1. WHAT DOES ADIDAS DO WITH YOUR PERSONAL DATA AND WHY (CATEGORIES OF PERSONAL DATA, PURPOSE, PROCESSING, LEGAL BASIS)?

adidas takes photographs of the running event participants to enable a digital shoe count and a consequent evaluation of the proportion of adidas shoes that are worn by the participants during the running event.

For this we work together with our business partner act3 GmbH (Ohmstr. 2, 91074 Herzogenaurach, Germany) who will place a photographer alongside the running route. This photographer will take photographs that will only show the knees, calves and feet of the participants. The focus will be on the shoes worn by the participants. An identification of the individual participants will not happen.

These images of the participant’s legs from the knee downwards are used exclusively to evaluate the proportion of adidas shoes worn by the participants.

It is our goal to ensure that upper body, start number, faces, fallen persons etc. are not photographed. Should this nevertheless happen unintentionally, these photographs will not be evaluated but deleted as soon as possible.

After the running event, adidas will evaluate the photographs which might take up to three weeks. The Personal Data will be deleted immediately after the evaluation is completed.

 

Our use of the Personal Data is based on our legitimate interest to collect data on how adidas as a brand is performing and especially for this running event on the product distribution within the running community.

  1. What happens when adidas transfers your personal data outside your country of residence?

adidas may need to share your Personal Data with other companies to complete the purpose and the processing of your Personal Data described in this Privacy Notice. Where the other companies are located outside or your country of residence, or outside the EU/EEA,  adidas will make sure your Personal Data is protected in accordance with the laws of your country of residence even when it has been transferred abroad.

To be more specific, we implement the following measures: a) contracts; b) information security controls; and c) organisational privacy standards and processes. More details provided in “5. HOW DO WE SECURE YOUR PERSONAL DATA?”.

  1. How do we secure your Personal Data?

a)      Contracts

adidas concludes appropriate contracts and/or contractual clauses to ensure the privacy standard we established is maintained when we share your Personal Data with other adidas and third-party companies located within or outside your country of residence. This includes: inter-company agreements, data processing agreements, data transfer agreements or data privacy clauses approved by regulatory authorities such as the EU Standard Contractual Clauses approved by the EU Commission.

b)      Information Security Controls

adidas has sufficient information security controls to address the risks and the impacts corresponding to our use of your Personal Data, including loss, alteration, or unauthorised access to your Personal Data as a result of malicious intent (hacking) or negligence (human error).

Please be aware that any transmission of your Personal Data through the internet is at your own risk. We can only protect your Personal Data once we have access to it.

c)       Organisational Standard and Processes

adidas has privacy standard and processes in place to ensure necessary privacy impact assessments are completed before we collect and process any Personal Data, as well as processes to ensure compliance with privacy legal requirements and to enable you to exercise your rights under the law.

 

  1. What are your rights and how can you exercise them?

Depending on your country of residence, you may have the following rights to your Personal Data: a) right to delete your personal data; b) right to access your personal data; c) right to correct your personal data; d) right to object to direct marketing and commercial messages; and e) right to withdraw your consent.

If you are located in a EU/EEA country, Switzerland, and the UK, you have the following rights specifically under the EU GDPR:

If you are located outside the EU/EEA, Switzerland and the UK, you may also have similar rights under local applicable laws. However, the requirements may differ. Please check out the websites or contact your local privacy authorities to understand how your rights mean under the local law.

If you wish to exercise your rights or if you need any help, please contact adidas Customer Service who will be able to assist you with your request. You can find contact information of our local Customer Service by visiting: adidas CUSTOMER SERVICE TEAM and go to “Contact Us”.

  1. Data Protection Officer

In case you have questions in connection with the digital shoe count, please reach out to: shoecount@weareact3.com.

 

If you wish to contact the Data Protection Officer of adidas and adidas Data Controllers, please write to the adidas Privacy team below:

 

By email:

DataProtection@adidas.com

 

By post:

Global Legal (Privacy) | Data Protection Officer

adidas AG

Adi-Dassler-Straße 1

91074 Herzogenaurach

Germany