1. About this Privacy Notice

• This is the privacy notice (“Notice”) of the International 420 Class Association, c/o FischerRamp Partner AG. Hottingerstrasse 21, Postfach, CH-8024, Zurich (“ICA”, “we", “us”, “our”).

• This policy explains when and why we collect personal information about event participants, how we use it and how we keep it secure and your rights in relation to it. We will post any changes we may make to this Notice on our Website or communicate them to you by email.

• We may collect, use and store your personal data, as described in this Privacy Notice and as described when we collect data from you.

• We reserve the right to amend this Privacy Notice from time to time without prior notice. You are advised to check our webistes regularly for any amendments (but amendments will not be made retrospectively).

• We will always comply with the General Data Protection Regulation (GDPR) when dealing with your personal data. For the purposes of the GDPR, we will be the “controller” of all personal data we hold about you.

• The Notice currently in place dates of 1st March 2022.

2. What personal data do we collect from you?

• We collect personal data that you provide to us in relation to registering for and participating in ICA events, such as by filling out a registration form or signing up for an email distribution list. Such personal data may consist of:

  - contact information (such as name, physical address, email address, and mobile or other telephone number);

  - gender, age/date of birth
  - World Sailor ID, sponsor information o emergency contact information

• Any information that you may provide voluntarily by filling in forms for your registration to an event, or by otherwise contacting ICA.

3. How we protect your personal data

• In order to manage the participation in this event and other events, it may sometimes be necessary for us to transfer your personal data outside the European Union. However we will only do so in accordance with the GDPR. That is most likely to involve either approval by the EU Commission that the country to which your data is being transferred provides adequate protection for personal data or on the basis of standard clauses, required by the EU, with the organisation to which we are transferring your data.

• We have implemented generally accepted standards of technology and operational security in order to protect personal data from loss, misuse, or unauthorised alteration or destruction.

• Please note however that where you are transmitting information to us over the internet this can never be guaranteed to be 100% secure.

• For any payments which we take from you online we will use a recognised online secure payment system.

• We will notify you promptly in the event of any breach of your personal data which might expose you to serious risk.

4. For which purposes do we process your personal data?

• We process your personal data for the following purposes:

- If you fill out a registration or contact form providing your name, email address, telephone number, etc., we use your data for answering your questions, sending you information or performing other tasks you ask us to.
- If you register for an event, then we process the data required for your registration, for example your name, address, email address, profile picture, etc. to allow your registration and processing of your event results.
- We process your personal data also to comply with and enforce applicable legal requirements, our Terms and Condition for Use, relevant industry standards, contractual obligations and our policies.
- To provide results, calculatory and visual analyses, position monitoring and race analyses will be published with reference to your names and data.
- To inform you about upcoming events, event results, and general information related to the activities of the ICA.

5. To whom do we disclose and transfer your personal data?

5.1.  We will never sell your personal data. We will not share your personal data with any third parties without your prior consent (which you are free to withhold) except where we are required to do so by law or as set out in paragraph 4 or in paragraphs 5.2 and 5.3 below.

5.2.  We may pass your personal data to third parties who are service providers, agents and subcontractors to us for the purposes of completing tasks and providing services to you on our behalf (e.g. managing protests, calculating results and providing tracking information and analysis, media productions). We do this for the purpose of our legitimate interests in operating this event and for performing our responsibilities with you. However, we disclose only the personal data that is necessary for the third party to deliver the service and we require them to keep your information secure and not to use it for their own purposes. It is possible that third parties may themselves engage others (subprocessors) to process your data. Where this is the case third parties will be required to have arrangements with their sub-processor(s) that ensure your information is kept secure and not used for their own purposes.

5.3.  We may disclose your personal data to the following recipients or categories of recipients acting on our behalf and/or as partners (processors), limited to the purpose of the execution of their obligations, which are contractually bound to adhere to an adequate level of data protection when processing your personal data:

• SailTi

• World Sailing and its Member National Authorities

• National and Continental Associations

5.4.  We may disclose your personal data if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of ICA. This includes exchanging data with other companies and organizations for the purposes of fraud protection and credit risk reduction.

5.5.  We may internationally transfer your personal data, including to countries that are not considered providing an adequate level of data protection by the relevant regulatory bodies, for example to countries not considered by the European Commission to be providing such level. In such case, we ensure the adequate protection of your personal data by having the recipients adhere to binding contractual obligations in accordance with applicable standards approved by the relevant regulatory bodies or by relying on other safeguards, such as self-certifications, approved by the relevant regulatory bodies.

6. For how long do we process your personal data?

We process your personal data as long as you are a participant of the event and for as long afterwards as it is in the ICAs’ legitimate interest to do so in order to inform you about future events and event results, or for as long as is necessary to comply with our legal obligations. We will review your personal data every year to establish whether we are still entitled to process it. If we decide that we are not entitled to do so, we will stop processing your personal data except that we will retain your personal data in an archived form in order to be able to comply with future legal obligations e.g. compliance with tax requirements and exemptions, and the establishment, exercise or defence of legal claims.

7. When do we require your personal data?

If you wish to participate in an ICA event, then we are required to obtain from you certain personal data to allow us to create and administrate it, for example, your name, address, or contact information. Should you decide not to provide us the required information, you may not be able to participate in this event.

8. What are your rights?

• You have the right:
  - to request from us access to and rectification or deletion of your personal data;

- to request us to restrict the processing of your personal data, in particular to object to the processing of your personal data for direct marketing purposes;

and
- to request from us to provide you or any person or entity you appointed with a digital file of your personal data (data portability).

• You may withdraw your consent that allows us to process your personal data for the indicated purposes at any time.

• To exercise the above rights, you may contact us as indicated below.

You also have the right to lodge a complaint with the competent authority.

9. How can you contact us?

For any questions or to exercise your rights, you may contact us as follows: Postal address: International 420 Class Association, c/o FischerRamp Partner AG. Hottingerstrasse 21, Postfach, CH-8024, Zurich
Email-address: office@420sailing.org