大象传媒

PRIVACY NOTICE FOR THE TELEVOTING OF THE 2024 EUROVISION SONG CONTEST

The following information is intended to provide You as a participant (hereinafter, “You”, “Your”) in the 2024 Eurovision Song Contest (“ESC”) televoting (“Televoting”) with an overview of the personal data we collect and process about You when You vote by call and about Your rights under data protection law.

As Joint Controllers, We

The European Broadcasting Union – Union Européenne de Radio Télévision, L’Ancienne-Route 17A, 1218 Le Grand-Saconnex, Genève, Switzerland, (the EBU)

jointly with

The 大象传媒 – British Broadcasting Corporation, Room 103, 16 Langham Street, W1A 1AA acting as Participating Broadcaster for The United Kingdom in the ESC 2024, and the other Participating Broadcasters taking part in the ESC 2024 (the list of which is included at the end of this Privacy Notice).

and

Once Germany GmbH (formerly known as digame GmbH), Schanzenstrasse 38 D-51063 Cologne, Germany (the Company)

are committed to protect Your personal data and respect Your privacy in compliance with applicable data protection laws notably the EU General Data Protection Regulation 2016/679 (GDPR) and the German Federal Data Protection Act (BDSG). We will not process Your personal data for any other Purposes than the ones set out below.

The EBU, the Participating Broadcasters and the Company have executed specific and separate Joint Controllers’ arrangement pursuant to Article 26 of GDPR, the key content of which is available on demand at the premises of either the EBU or the Company.

What categories of personal data are being processed?

We will process only the personal data which We receive when You cast Your vote either by call or by texting SMS message (whether sent directly or via the ESC App) using connections provided by your landline or mobile network provider or payment provider.

When doing so, we will – depending on Your country of origin – gather the following categories of data from You if applicable:
• Your mobile telephone number (MSISDN - Mobile Station Integrated Services Digital Network Number) or landline telephone number (CLI – Caller Line Identification);
• the date and time at which You participated in Televoting;
• the song number You voted for; -
• the name of Your landline or mobile network provider;
• the type network provider contract which You have (prepaid, contract); - the payment method and origin that has been chosen.

What are the purposes of processing and what is the legal basis for this?

We process Your personal data on the basis of our legitimate interest (Art. 6 Para. 1 (f) GDPR) for the purpose of (“Purposes”):

• calculating and generating valid and official results of the ESC on the basis of the votes casted by the audience (including Yours) to generate the official results determining the ranking of the songs entered in the ESC and the winner thereof;
• generating aggregated statistics on the voting in the ESC;
• publishing aggregated and anonymized results/votes.

Who will have access to your personal data?

To participate in the Televoting, You are using a telecommunication service facilitated by your national telecommunication carrier and/or aggregator who may forward part or all of Your personal data to the Company to enable the calculation of a valid audience result.

Inside the Company, Your personal data will be made accessible to the departments which need it to fulfil the Company’s contractual and legal obligations. Service providers and vicarious agents working for the Company may also receive personal data for such purposes provided that they undertake to maintain, in particular, confidentiality and integrity. Such recipients could, for example, be IT service or telecommunications providers.

There will be no transfer of personal data to recipients outside the Company. Whilst the EBU is joint controller with the Participating Broadcasters and the Company with regard to the Televoting, the Company will not transfer Your personal data to the EBU and the Participating Broadcasters which will receive from the Company only anonymised results for the Purposes listed above. Only the aggregated and anonymized results will be published.

Will personal data be transferred to a third country or an international organization?

Votes cast outside of Germany will be transferred to the Company in Germany in order to process them and no further transfer will be operated. The Company will not transfer personal data to third countries outside the European Economic Area, Switzerland, or the United Kingdom.

How long will my personal data be kept by us?

The Company will process and store your personal data for as long as required to fulfil our contractual and legal obligations.

Once the personal data is no longer required to fulfil contractual or legal obligations, it will regularly be erased unless its further processing - for a fixed period of time – is required for the following purposes:
• fulfilment of commercial- and tax-law related storage obligations;
• the German Commercial Code (HGB), Tax Code (AO), Money Laundering Act (GwG). These laws generally specify storage periods for archiving and documentation purposes ranging from two (2) to ten (10) years.

What are your rights?

You have the right to access Your personal data, and to request that they are corrected in the event of inaccuracy or deleted in the event that they are no longer necessary in relation to the Purposes for which they were collected and processed.

In some cases, You have the right to ask for a restriction of processing, for data portability or to object to processing. Any consent you give to the processing of your personal data by us may be withdrawn at any time. Please note that the withdrawal of consent will only apply for the future. Processing which took place before the withdrawal of consent will not be affected by it.

You may exercise your rights by sending your request by mail at privacy@digame.de.

If you consider that the processing of Your personal data constitutes a violation of the data protection law(s), You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of the European Union of your usual place of residence, Your place of work or the place where the violation occurred.

How can you contact our Data Protection Officers?

If you have any questions or concerns about this Privacy Notice You may contact:

The Company’s Data Protection Officer at privacy@digame.de

Effective date and Changes

This Privacy Notice is effective from 19 April 2024

We reserve the right, at our complete discretion, to change, modify, add, or remove portions of this Privacy Notice at any time.