IPC Learn privacy policy

Thank you for your interest in the International Paralympic Committee’s online learning platform, IPC Learn (https://learn.paralympic.org). We, the International Paralympic Committee, Dahlmannstraße 2, 53113 Bonn, Germany (hereinafter also “IPC”, “we” or “us”), take the protection of personal data and its confidential treatment very seriously. This privacy policy will explain how the IPC processes your personal data when you register with, and access IPC Learn.

CONTROLLER OF YOUR PERSONAL DATA

A “controller” is a person or organisation who alone or jointly determines the purposes for which, and the manner in which, any personal data is, or is likely to be, processed. This privacy notice is issued on behalf of us as controller for your personal data, and collected for IPC Learn. For our contact details, please see the "How to contact us" section below.

WHAT DATA DO WE COLLECT ABOUT YOU AND HOW?

We collect the following personal data as part of the registration process to provide access to IPC Learn: name, email address, organisation, organisational role, role category, gender, nationality, country of residence, date of birth, preferred language. We do not collect or process any special categories of personal data about you (such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health, and genetic and biometric data). Nor do we collect any information about criminal convictions and offences.

We also collect data when you access IPC Learn, using your browser’s cookies. For more information, please see the IPC Learn cookie declaration, found in the bottom left corner of the browser window.

We may also collect data when you register for an event, voluntarily complete a survey, provide feedback via online forms, forums, or email, or complete non-mandatory fields as part of your user profile.

HOW WILL WE USE YOUR DATA?

We may process your personal data for the following purposes:

• Enrol you into relevant courses and learning opportunities offered via IPC Learn.
• Issue certificates and/or digital badges to credit your engagement in IPC Learn activities.
• Improve the IPC Learn site by analysing aggregated data to identify issues or areas for optimisation.
• Report on IPC Learn user activity, including statistics for the purposes of decision making and future planning of IPC management.

WHAT IS THE LEGAL BASIS OF THE PROCESSING?

When we process your personal data, we do so by relying on Article 6(1)(f) GDPR, namely the pursuit of our legitimate interest in achieving the purposes set out above. We rely on this interest only where we have concluded that, on balance, our processing does not prejudice your privacy, interests, fundamental rights or freedoms in a way that would override our legitimate interest in pursuing those purposes. When we process your personal data, we may also do so to comply with our regulatory and legal obligations.

WHO WILL HAVE ACCESS TO YOUR DATA?

Authorised members of IPC staff, which includes authorised employees and approved contractors, will have access to personal data stored within IPC Learn for the purposes listed in the previous section. In certain circumstances, we may share your personal data with the following parties, where reasonably necessary and in accordance with applicable data protection law for the purposes described above:

1. IPC's legal or other professional advisers for the purpose of getting legal or other professional advice; or
2. to the extent required by EU law, UK law or the law of an applicable EU Member State, in exceptional circumstances:
   1. to competent regulatory, prosecuting and other governmental agencies, or litigation counterparties, in any country or territory; and
   2. other organisations and agencies, where we are required to disclose your personal data.; or
3. any third party data processor engaged by us for the purpose of delivering IPC Learn and related support services; or
4. to our customer relationship management (CRM) system, hosted by the IPC, for the purpose of integrating its functionalities with IPC Learn.

Any transfers to third party processors by IPC will be as per our obligations as a controller under applicable data protection laws, including the requirement for them to process your personal data on our documented instructions and under contract. Furthermore, we do not foresee that your personal data will be transferred to outside of the United Kingdom or European Economic Area.

HOW DO WE PROTECT AND STORE YOUR DATA?

We are committed to protecting your personal data and have implemented appropriate technical, physical and organisational security measures to protect personal data.

We intend to keep personal data connected to your IPC Learn account accurate and up to date, and only store it for as long as it is necessary and proportionate for the purpose for which it has been collected. We will delete or anonymise any information that we hold about you when it is no longer required for the purposes set out above, or where longer, such period as is required or permitted by law or regulatory obligations which apply to us. IPC Learn accounts which have been inactive are likely to be deleted along with any personal data associated with the account within 18 months.

AUTOMATED DECISION-MAKING INCLUDING PROFILING

We do not use automated individual decision-making including profiling in accordance with Article 22 GDPR.

WHAT ARE YOUR DATA PROTECTION RIGHTS?

As a data subject, the IPC would like to make sure you are fully aware of your data protection rights in accordance with the General Data Protection Regulation (GDPR). Every user is entitled to the right to, subject to the GDPR:

• ACCESS: You have the right to ask us for copies of your personal data. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights below). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
  
  
• RECTIFICATION:You have the right to ask us to correct any personal data you believe is inaccurate or incomplete, although we may need to verify the accuracy of the new data you provide to us.
  
  
• DELETION:You have the right to ask us to delete your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. We may be unable to delete your data if we are legally obliged to retain it.
  
  
• RESTRICT PROCESSING:You have the right to request that we restrict the processing of your personal data, under certain conditions.
  
  
• OBJECT TO PROCESSING ON A CASE-BY-CASE BASIS: You have the right to object to our processing of some or all of your personal data on grounds relating to your particular situation which are based on legitimate interests, at any time (and require such personal data to be deleted). This is based on Article 6(1)(e) GDPR (performance of a task carried out in the public interest or in the exercise of official authority vested in the controller), or Article 6(1)(f) GDPR (balancing of interests). It also applies to profiling based on these provisions. If you object, we shall no longer process your personal data unless we can demonstrate compelling legitimate grounds for such processing which override your interests, rights and freedoms or where it is necessary for the establishment, exercise or defence of legal claims.
  
  
• DATA PORTABILITY:You have the right to request that we transfer the personal data that we have collected to another organisation, or directly to you in machine readable format if we process that data using automated means.
  
  
• WITHDRAW CONSENT:If you have consented to our processing of your personal data, you retain the right to withdraw it at any time with future effect.
  
  

EXERCISING YOUR RIGHTS

If you would like to exercise any of the above rights, please contact us using the details set out under "How to Contact Us" below. When doing so, please clearly identify yourself.

PRIVACY POLICIES OF OTHER WEBSITES

This privacy policy only applies to IPC Learn. Should you click on a link to another website whist accessing this platform, please consider reading their privacy policy.

HOW TO CONTACT US

If you have any questions about this privacy policy, the personal data we store about you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us at privacy@paralympic.org or by post at the address stated below:

In addition, the IPC also appoints a Data Protection Officer:

COMPLAINTS

If you feel that the IPC has not addressed your concern in a satisfactory manner, or you wish to report a complaint, you may contact a data protection supervisory authority (e.g., one in the member state of your habitual residence, workplace, or the place of the suspected violation). The supervisory authority responsible for the IPC is:

CHANGES TO OUR PRIVACY POLICY

The IPC keeps this privacy policy under regular review and publishes any updates here. If we plan to use your personal data for a new purpose, we update our privacy information and communicate the changes to individuals before starting any new processing. This privacy policy was last updated on 28 January 2025.