Gracenote Sports Privacy Statement
Last Revised: June 2019
Gracenote, a Nielsen Company, is committed to protecting your privacy and handling your information in an open and transparent manner. This Privacy Statement details what personal information (i.e., information relating to an identified or identifiable natural person) Gracenote Sports (“Gracenote Sports,” “we,” or “us”), a division of Gracenote, may gather in connection with the Sports data services that we deliver to our clients/customers (the “Services”) and how this personal information is used, shared, and protected. This Privacy Statement also describes your choices and legal rights in relation to such information.
Please note that this Privacy Statement applies only to Gracenote Sports’ processing of information about professional athletes and sports figures (hereinafter referred to as “you”) in connection with the Services. If you have any questions about this Privacy Statement or our processing of information about you, please refer to the “Contact Us” section below for our contact information.
Collection of Your Information
The types of personal information that we collect about you and other athletes and sports figures may include your biographical information (e.g., your name, gender, date of birth, etc.) as well as photos/images of you and other information relating to you (e.g., career milestones, statistics, etc.).
We mainly collect or otherwise obtain personal information about you and other athletes and sports figures from publicly-available sources, including public websites and various types of publications (e.g., books, articles, press releases, etc.). We may also observe or reasonably infer certain information about you from the information that we collect from publicly-available sources and/or information that is otherwise present in the public domain.
Additionally, we may obtain personal information about you that you or the team/league/organization with which you are associated provide directly to us through various means, including in-person discussions, telephone conversations, and electronic or written communications.
Where another party, such as the team/league/organization with which you are associated, provides your personal information to us, they must also comply with their obligations under applicable data protection and privacy laws and regulations. If you believe that another party has not provided you with details of the personal information that it holds about you and/or does not have a valid basis for providing us with that personal information for processing as described in this Privacy Statement, please contact such party directly.
In some jurisdictions, some of the information that we collect or obtain and process about you, such as information that we observe or infer, may be considered “special” or “sensitive” personal information (e.g., information relating to your racial or ethnic origin, health or medical conditions, sexual orientation, etc.). If we process any “special” or “sensitive” personal information relating to you, we will use it only in the ways described in this Privacy Statement and in accordance with applicable law.
Use of Your Information
We use your information to deliver the Services, which may result in us making personal information that we hold about you available to our clients/customers in accordance with their legitimate interests.
Where necessary, we will also use information that we hold about you in order to: (i) protect the rights, property, operations, health, or safety of you, us, or others; (ii) enforce our agreements; comply with applicable laws and regulations; and establish, exercise, and/or defend our legal rights; and (iii) respond to subpoenas, court orders, or other legal process/ requests and communications from law enforcement authorities or other government officials.
Legal Basis for the Processing of Your Personal Information
Applicable law in your country of residence may require us to set out in this Privacy Statement the legal basis upon which we rely in order to process your personal information.
If you are based in the European Union (“EU”)/European Economic Area (“EEA”), we will process your personal information for the purposes outlined in this Privacy Statement based on one or more of the legal bases listed below in accordance with the EU General Data Protection Regulation 2016/679.
Legitimate interests: We rely on our legitimate interests, provided that such interests shall not be overridden by your interests, fundamental rights, or freedoms. In particular, among other things, we process your personal information in reliance on a legitimate interest in maintaining a curated set of professional sports-related information and delivering the Services to our clients/customers.
Compliance with legal obligations: We may process your personal information if necessary for us to comply with a legal obligation arising under applicable law to which we are subject.
To the extent that we process any “special” or “sensitive” personal information relating to you, we will do so because either: (i) you have made the information manifestly public; or (ii) the processing is necessary for the establishment, exercise, or defense of legal claims.
If you have any questions or concerns about the legal basis upon which we collect and process your personal information, please contact us at email@example.com.
Disclosures of Your Information
In connection with one or more of the purposes outlined above in the “Use of Your Information” section, we may disclose your information to:
- entities within the Nielsen group of companies;
- our clients/customers (in connection with the Services);
- third-party service providers, including providers of the following services (among others): website hosting, management, or support; data analysis or processing; data backup; data security and storage; and product development (subject to binding contractual obligations of confidentiality and security);
- relevant third parties as part of a corporate transaction, such as a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or any portion of our business, assets, or stock (including in connection with a bankruptcy or similar proceeding);
- competent governmental and public authorities, in each case to comply with legal or regulatory obligations or requests; and
- other third parties as we believe necessary or appropriate for legal purposes.
The disclosures described above may result in the transfer of your personal information to countries or regions with data protection or privacy laws and regulations that differ from those in your country of residence. In cases where your information is transferred outside of your country of residence, we will ensure that there are adequate safeguards in place to protect your personal information.
If you are based in the EU/EEA, such safeguards might include a data transfer agreement with the information recipient based on standard contractual clauses approved by the European Commission for transfers of personal information to third countries not providing an adequate level of data protection. Alternatively, in certain circumstances, your personal information may be transferred on the basis of an applicable derogation or exemption. For further details relating to the transfers described above and the adequate safeguards used with respect to such transfers, please contact us at firstname.lastname@example.org.
We have in place reasonable organizational, technical, and administrative measures that are designed to protect your information from loss, misuse, and unauthorized access, disclosure, alteration, destruction, and other forms of unlawful processing while it is under our control. However, please be aware that the storage and transfer of information cannot always be one-hundred percent secure.
We will retain your information in a form that permits identification only for as long as necessary for the fulfillment of the purposes set out in this Privacy Statement, unless a longer retention period is required under applicable law or is necessary in order to resolve disputes, protect our legal rights, or otherwise to comply with our legal or professional obligations.
Your Choices and Legal Rights
You have choices about how your personal information is handled, and we are committed to providing you with reasonable access to your personal information and the ability to review and limit the use of such information in accordance with applicable law.
Depending on your country of residence, under applicable law, you may have the right to:
- request confirmation as to whether or not we are processing any of your personal information;
- request access to or copies of your personal information;
- request that we update or correct your personal information (e.g., if it is inaccurate or incomplete);
- propose restrictions on the ways in which we use your personal information (e.g., if we have no legal right to keep using it) or limit our use of your personal information (e.g., if your personal information is inaccurate or unlawfully held);
- object to our processing of your personal information;
- request that your personal information be transferred to another organization in a structured, commonly used, and machine-readable format (to the extent applicable);
- request that we delete your personal information; and
- lodge a complaint with the appropriate data protection or privacy authority regarding our processing of your personal information.
If you are interested in exercising one or more of the rights described above, please contact us. Because we want to avoid taking action regarding your personal information at the direction of someone other than you, please note that we may request information verifying your identity before we can give effect to these rights.
Additional information for EU/EEA residents
If you have any questions or concerns about our collection or use of your personal information, you can contact our EU Data Protection Officer at email@example.com.
If you are unsatisfied with the way in which we have handled your personal information or any privacy query or request that you have raised to us, you have a right to complain to the Data Protection Authority (“DPA”) in your country of residence or the country in which the issue that is the subject of your complaint occurred. To find the contact details of the appropriate DPA, please visit http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.
Updates to this Privacy Statement
We may update and make changes to this Privacy Statement from time to time in light of, for example, changing business practices, technology, or legal requirements. When we make changes to this Privacy Statement, we will amend the “Last Revised” date at the top of this page and such modified or amended version of this Privacy Statement shall be effective as to you and your information as of that revision date.
The most current version of this Privacy Statement will always be available here on this website. We encourage you to review this Privacy Statement periodically to remain informed about how we are using and protecting your information.
If you have any questions, comments, or concerns about this Privacy Statement or our information handling practices, please email us at firstname.lastname@example.org or write us at:
For EU/EEA residents:
Oxford Business Park South
John Smith Drive
Oxford OX4 2WB
Attn.: Legal Dept.
For residents in all other countries:
85 Broad Street
New York, NY 10004
Attn.: Legal Dept.