The National Anti Doping Agency Germany (NADA) has given top priority to the protection of the personal rights and personal data of the users of its online-offer. Please, take note of our respective procedures below.
NADA processes all personal data in accordance with the provisions of the Basic Data Protection Regulation of the European Union (EU-GDPR) and in compliance with the Telemedia Act.
1. Processing of personal data
For the purposes of the EU-GDPR, personal data is any information relating to an identified or identifiable natural person, such as an individual name, address, e-mail address, telephone number or IP address.
a) Visit the websites of NADA
NADA operates the following websites:
- www.nada.de and the corresponding subdomains like www.nadamed.de
- www.gemeinsam-gegen-doping.de and the corresponding subdomains like athleten.gemeinsam-gegen-doping.de
- as well as the NADA-App
NADA processes access data such as the name of the internet service provider, the page from which you visit one of NADA's online offers, or the name of the requested file. These data do not allow any conclusions to personal data.
When visiting our online offers, the IP address, browser type and settings, the operating system and the date and duration of the visit will automatically be stored on NADA's servers. Based on this data, an identification of your person can be made. However, the service provide supplies NADA with anonymous aggregated information only. In that context, there is no personal data processing whatsoever. The data will always be evaluated anonymously and solely for the purpose of improving and safeguarding the online offers of NADA.
b) Use of applications, registrations or participation in campaigns
Personal data will only be processed by NADA if you actively make them available on NADA's online offers if you have (previously) consented to submit them and when these are indispensable for the execution of certain services (eg for payment and delivery of our merchandising articles). The input of personal data is required for the following services on NADA's websites:
if you register for a NADA mailing list (for the NADA newsletter or the NADA press mailing list);
if you place orders for brochures or merchandising articles on the online portals of NADA;
if you use the contact or donation form;
if you submit a non-anonymous notice through the online service "SPEAK UP";
if you use NADA's e-learning program;
if you participate in a raffle.
Registration to a mailing list of NADA
NADA needs your name and e-mail address to send out press releases or the NADA newsletter. After successful registration on the homepage of NADA by entering the mentioned data, you will receive the required information from NADA. Your data will be deposited and stored in the respective mailing list of NADA.
Order brochures or merchandising articles
For the execution of your orders, NADA will need your name, address, and email address. After entering your order, you will receive a confirmation from NADA immediately. Your data will be temporarily stored on NADA's servers for order processing.
Use of the contact or donation form
In order to answer your inquiry, we need your contact details. These are stored as part of the correspondence on the NADA server and the online server.
If you wish to send a message (via the contact form or by e-mail) containing protected content to NADA, NADA strongly recommends that you encrypt it in order to prevent unauthorized disclosure and falsification in the transmission path. If you would like to give a hint, please use the anonymous system "SPEAK UP".
If you would like to make a donation to NADA, you can either do this directly by making a payment on NADA's donation account or you can grant NADA a direct debit authorization in the form of a direct debit. In addition to the online form, you can also fax NADA a direct debit authorization or send it by post. If you authorize NADA to collect the payments due from you by direct debit from your account, you must notify NADA of your name, e-mail address, bank name, bank code / BIC and IBAN. Your data will be temporarily stored for the handling of the donation on the servers of NADA.
After successful registration, you will receive an automatic confirmation of receipt from NADA by e-mail in which your registration will be summarized and your username and personal password will be communicated. It is your responsibility to ensure that your personal password is stored safely.
You can change your stored data at any time. As a registered user of www.gemeinsam-gegen-doping.de, you have full access to all services of the e-learning platform: It offers important information and doping prevention (like the detailed procedure of a doping control) as part of the online course "TOGETHER AGAINST DOPING".
The online course consists of different, consecutive modules. For this purpose, we save your course progress, so that you can complete the different modules of the online course at different times. As part of the online course, you will be asked knowledge questions about the content covered by you and the answers will be saved. If you have successfully completed the online course, you will receive a certificate that is available for download on the platform.
The personal data of the participants' (name, first name, postal address, e-mail address) will be used by NADA exclusively for the purpose of the raffle, to inform the winner(s) and to send the prize(s). Winners names will be communicated on NADA's online offers. No data will be passed to third parties. All data will be deleted after the end of the raffle.
Your personal data collected by NADA will not be disclosed, except for possible legal obligations, and will not be used for purposes other than those mentioned above. A promotional use of the data is excluded. Your personal data will be kept strictly confidential.
c) Access to the data
Your personal data is accessible to the responsible NADA staff.
Furthermore, the supervising agency of the online offers, kultwerk GmbH, can view all data entered by you via the online offers in order to remedy any possible errors.
Another exception is the e-learning program. An administrative contact person can be designated at the institution where you are active in sports (for example, the Anti-Doping Officer of your sports association). He / she, like the responsible NADA staff, has access to the personal data you have entered on the platform. This serves the independent administration and course administration of the respective sports club or association. If the provision of a service or the response to a request requires the transfer of personal data to a third party (such as an external service provider), NADA shall ensure, through technical and organizational measures, that the legal provisions of data protection are observed.
Your personal information will be stored on NADA's online channels only on servers located within the EU and covered by the EU's General Data Protection Regulation.
d) Data deletion
The legislature has issued a variety of storage obligations and deadlines. After expiration of these deadlines, the corresponding data will routinely be deleted. If data are not required any more, they will be deleted as soon as the respective uses are removed. The deletion of your profile on www.gemeinsam-gegen-doping.de, as well as the deletion from the mailing lists of NADA is possible at any time. Should a deletion conflict with statutory, contractual or tax law or commercial law retention requirements or other statutory reasons, instead of the deletion, only a limitation of the processing of your data can be applied.
e) Transfer of data to third parties
In principle, NADA does not pass on your personal data to third parties unless you have previously consented to the transfer of your personal data or NADA is obliged to disclose it by law, regulation, official or court order. Please, note in this regard the previous explanation on the access to the data by our service provider for NADA's online offers as well as on to the e-learning program of NADA.
In addition, NADA compels its external service providers (including NADA's online agency, kultwerk GmbH) to comply with the relevant legal data protection provisions, the confidential treatment and the immediate deletion of personal data as soon as they are no longer needed.
f) Use of analysis tools
In order to optimize its online offer, NADA uses the analysis tool Matomo for the NADA homepage www.nada.de as well as for the prevention offer www.gemeinsam-gegen-doping.de and the associated subdomains (https://matomo.org/).
Matomo is an open source software tool for web analysis. Web analysis is the survey, collection and analysis of data about the habits of visitors to websites. The web analytics tool collects, among other things, data about the website that led you to the online offer of NADA (through the so-called referrer), which subpages of the online offer of NADA you have accessed or how often and for which period. The software is operated on the server of the online offerings of NADA, the data protection-sensitive log files are stored exclusively on this server.
Matomo sets a cookie that will be sent to your internet browser. What exactly cookies are, is explained below. By using this cookie, NADA will be able to analyse the use of your website. As part of this technical process, NADA receives personally identifiable information, such as your IP address, which, among other things, helps NADA understand the origin of visitors and clicks. The evaluation is carried out by NADA in anonymous form or with a pseudonym. There is no person-related analysis; nor any transmission of data to third countries.
You can object at any time to the analysis of your data by Matomo. For this purpose, you must permanently object to the setting of the cookie by means of your personal internet settings. In addition, a cookie already set by Matomo can be deleted at any time via an internet browser or other software programs. Furthermore, it is possible for you to object to the collection of Matomo-generated data related to the use of the online offerings of NADA by a so-called opt-out cookie setting. If your browser is deleted, formatted or reinstalled at a later date, you will need to set an opt-out cookie again. By setting the opt-out cookie, however, there is the possibility that the online offer of NADA will no longer be fully usable for you.
For the online offer www.alles-geben-nichts-nehmen.de, www.my-moment.org and www.anti-doping-ombudsmann.de WordPress evaluates the usage data of the websites anonymously. A personal evaluation by the NADA does not take place.
g) Cookies, Google fonts and widgets
NADA uses "cookies" on its online offers. These are text files that are sent to your Internet browser. "Cookies" are used to control the navigation on the Internet presence and to make their usability easy. As a rule, the Internet browser automatically accepts the "cookies" and saves them. You have the right to receive notifications about used "cookies" via the settings of your internet browser. Furthermore, you can reject "cookies" and prevent receipt. If your internet browsers do not accept "cookies", this may limit the usability of NADA's online channels. "Cookies" do not store personal data. The information collected during your visit to the NADA website will only be temporarily stored and deleted after your visit.
Within its online channel www.my-moment.org NADA uses the Google Fonts Montserrat. This is a font provided by Google. Each time the page is visited, the browser asks Google servers if there have been any changes to the fonts or the page. This tells Google which page a request was sent from. In addition, Google receives data about your browser history and your IP address. This data transfer to Google can be prevented by blocking your referrer. You can do this via your browser settings.
Furthermore, NADA uses social media widgets on its websites www.alles-geben-nichts-nehmen.de, www.my-moment.org, www.andreas-krieger-story.org and www.gemeinsam-gegen-doping.de. These include a share button Facebook, share button Twitter, share button Google+, share button Pinterest and the YouTube and Vimeo player. Using these applications, your browser connects directly to the servers of the social media platform, and your browser data is communicated to the social media platforms. Further information on the use of your personal data by the social media platforms can be found on the respective platforms.
h) Rights of the person concerned
You have the right to request confirmation from NADA as to whether NADA is processing personal information about you. If this is the case, you have a right to information about these personal data and the following information:
the processing purposes;
the categories of personal data being processed;
the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular to recipients in third countries or to international organizations;
if possible, the planned duration for which the personal data are stored or, if this is not possible, the criteria for determining that duration;
the existence of a right to rectification or erasure of personal data concerning you or restriction of NADA's processing or right to object to such processing; the existence of a right of appeal to a supervisory authority;
if the personal data are not collected from NADA, all available information about the source of the data;
the existence of automated decision-making including profiling - at least in these cases - meaningful information about the logic involved, as well as the implications and implications of such processing for you.
If you would like to exercise your right to information, please use the contact form. You can also send an e-mail to NADA or transmit your request by fax or mail.
i) Revocation of consent
You may revoke your consent to the processing of your personal data at any time with future effect and have your data collected from us deleted. This also applies to consent granted before 25 May 2018. If you want to exercise your right of withdrawal, please use the contact form. You can also send an e-mail to NADA or transmit your request by fax or mail.
2. Publication of personal data
In addition, other applications contain personal data published by NADA. This includes the publication of decisions on anti-doping rule violations in the NADAjus database, as well as the publication of photos and films under the "GIVE EVERYTHING, TAKE NOTHING" initiative.
In order to comply with the requirements of the World Anti-Doping Code (WADC), NADA has to publish decisions on anti-doping rule violations 20 days after the decision with details of the sport, the offended anti-doping rule, the name of the athlete or other person who committed the offense, the respective prohibited substance or method and the consequences of the rule violation(s). For this end, NADA has established the database NADAjus on its homepage.
As NADA's responsible regulatory authority for data protection (LDI NRW) considers the publication of the full name of a doping-convicted athlete on the publicly accessible iInternet as is not proportionate, NADA is pursuing a restrictive publication practice within the NADAjus database. Therefore, names will appear in abbreviated form only. Additionally, arbitration awards appear as blackened version.
All other data entered in NADAjus that are open to the public will not contain any personal information. Any direct linking with the results of the NADAjus database or any search via search services is not impossible. NADA is not liable if information from the NADAjus database, in particular data protected information, is copied and published by third parties.
GIVE EVERYTHING, TAKE NOTHING
Furthermore, as part of its initiative "GIVE EVERYTHING, TAKE NOTHING", NADA processes photos and videos of its booth or campaigns. These are primarily published on the website www.alles-geben-nichts-nehmen.de and can be downloaded by users.
Andreas Krieger Story
The online offer "Andreas Krieger Story" contains the life stories of several former GDR athletes, who were verifiably and massively doped in the sports system of the GDR.
3. Data security
NADA takes the necessary measures to protect your personal data and for this purpose uses appropriate technical and organizational security measures to prevent manipulation, alteration, destruction, loss or access by unauthorized third parties. The safety measures are constantly aligned to the technical conditions and, if necessary, revised. For secure communication with us, we offer encrypted communication via the SSL protocol, which we use to transfer your personal data.
5. Right of appeal
You have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the EU GDPR.
6. Contact person and contact
For questions regarding the collection, processing or use of your personal data, for information, correction, blocking or deletion of data and in case of any revocation of granted consent, please contact:
National Anti Doping Agency Germany
F +49 (0) 228/81292 -0
b) Data Protection Officer
Furthermore, you can always contact the external data protection officer of NADA:
Dr. Ralf Schadowski