UEFA may transfer Your data to third parties who perform functions on our behalf, such as IT service suppliers, consultants and any other third party processing personal data on behalf of UEFA. This covers in particular third-party processors in the context of online advertising campaigns that are carried out by the UEFA, especially on social networks. UEFA requires such parties to maintain appropriate security standards to protect Your personal data. Unless otherwise stated, these third parties are prohibited to use the personal data UEFA provides to them beyond what is necessary to provide the product or service to You. UEFA may also share Your personal data with other third parties like carefully selected partners and UEFA Member Associations such as the ones that you can find here https://www.uefa.com/partners/ if UEFA has Your consent to do so, for example if You have opted in to receive information or offers, and for other reasons consistent with the purpose for which the data were originally collected or for other purposes authorized by law.
UEFA may also transfer Your personal data to relevant third parties if:
1. UEFA needs to send the data to the police/state authorities, in particular to carry out security or administrative controls in relation to venues or events You have requested access to.
2. UEFA needs to comply with court or authority orders.
3. UEFA finds that it is necessary, as determined in UEFA’s sole discretion, to investigate, prevent or take action regarding illegal activities, suspected fraud, emergency situations involving potential threats to the physical safety of any persons, violations to Our Terms or as otherwise required or permitted by law.
Before disclosing Your personal data to third parties, UEFA will ensure that sufficient security measures and adequate data protection are guaranteed by the third party and take reasonable steps to ensure compliance with those measures.
In particular, UEFA ensures that an adequate protection is guaranteed for personal data to be transferred outside of Switzerland and the EEA. In some specific cases when this level of protection is not guaranteed, UEFA will obtain Your prior consent or establish with the recipient of personal data a contractual framework or sufficient safeguards that ensure an adequate level of protection abroad. You may request access to a copy of these safeguards by contacting UEFA.
As part of its internal data auditing process, UEFA may conduct regular checks on processing by third parties, especially with respect to security measures.