This Privacy Policy, as updated from time to time, explains what information about you is collected and how it is processed by FIFA when you register on the present portal (the "Portal") in the context of the Online Video Platform Security Review. By using the Portal, you agree to your information being collected and processed in accordance with this Privacy Policy by FIFA. When we refer to "we", "our" or "us", we are referring to FIFA, acting as an independent data controller, and when we refer to "you" or "your" we refer to you as a user of the Portal.

WHAT INFORMATION DO WE COLLECT?

a) Information that you provide to us

You will register on the Portal using your e-mail address and name which will be recorded in the Portal. This information will allow us to create and maintain your user account, and to contact you in the context of the Online Video Platform Security Review. One of the objectives of the Online Video Platform Security Review is to ensure that you, as Media Rights Licensees (MRLs), implement the relevant measures to protect your coverage of FIFA's content and limit it to your territory /territories. As MRLs, you will be required to complete questionnaires on the Questionnaire Portal regarding the details of your security systems in place to protect your coverage of FIFA's content on your Online Video Platforms.

The questionnaires on this Portal also require that you provide us with personal information from third parties (contact details for your organisation's employees or your third party service providers' employees responsible for various technical areas relevant to content security that we may contact in order to better understand your platforms' security implementation or to resolve ongoing security issues). Prior to submitting any personal information on behalf of third parties through the Portal, you are responsible to inform them, obtain their authorization to act on their behalf and ensure that they understand the present Privacy Policy, in particular the conditions applicable to the collection, transfer and processing of their personal information.

b) Information that is collected automatically when you use the Services

The Portal uses cookies to distinguish you as a user, either for the duration of your visit ("session cookie") or when you return ("persistent cookie"). Cookies are small files stored on your browser or the hard drive of your computer that are used to gather information regarding interactions with the Portal such as date and time of access.

We use different types of cookies, including:

• Strictly necessary cookies that enable you to navigate on our website and other digital properties or provide certain basic features such as storing user names and passwords so that you don't have to log in at each session;
• Functionality cookies that enhance the functionality of our website and other digital properties by storing your preferences.

We use strictly necessary cookies to enable users to remain signed in.

By using the Portal, you accept the use of these cookies. You may turn off cookies or changing your preferences by changing your browser settings. More information is available here:

• Microsoft Edge users: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
• Internet Explorer users: http://windows.microsoft.com/en-GB/internet-explorer/delete-manage-cookies
• Mozilla Firefox users: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences and https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored
• Google Chrome users: https://support.google.com/chrome/answer/95647?hl=en
• Safari users: http://help.apple.com/safari/mac/8.0/#/sfri11471

HOW DO WE USE THE INFORMATION WE COLLECT?

We use the information we collect about you and your use of the Portal to:

• enable your registration and the management of your user account;
• provide you with the questionnaires in relation to the Online Video Platform Security Review that you will be required to complete regarding the details of your security systems in place for delivering FIFA'content;
• contact you or any third party that you registered in order to better understand the security measures you implement in relation to your coverage of the FIFA'content;
• contact you or any third party that you registered to resolve security issues.

WHO DO WE SHARE YOUR INFORMATION WITH?

We may share information you provide through the Portal for the purposes outlined in this Privacy Policy with our service provider that will carry out processing activities on our behalf for the implementation of the Online Video Platform Security Review. This service provider is bound to strict confidentiality obligations under our agreements, ensuring the respect of this Privacy Policy.

We reserve the right to disclose personal information we hold about you if we are required to do so under applicable laws.

HOW DO WE PROTECT YOUR PERSONAL INFORMATION?

a) Data security

We use technical and organisational measures in order to protect your personal information against the risks of damage, destruction, loss or unauthorised access, in accordance with applicable laws.

b) International transfer

We may transfer your information for the purposes and legal basis for processing highlighted in this Privacy Policy to recipients based in countries that do not provide in their laws for a level of protection of your privacy equivalent to the one applied within the European Union and Switzerland. Before transferring data outside Switzerland or the European Union, we implement safeguard mechanisms recognized by Swiss and European regulators.

c) Data retention

We will retain your information only for the duration necessary for the purposes identified in this Privacy Policy or as required to meet our legal requirements.

LEGAL BASIS FOR PROCESSING YOUR PERSONAL INFORMATION

We also rely on the following justifications to process your personal information:

a) Contractual necessity

• Managing registration and user account
• If applicable, transferring, storing or processing your data outside Switzerland or the European Union.

b) Legitimate interests

• Managing registration and user accounts
• Providing you with the questionnaires in relation to the Online Video Platform Security Review
• Contacting you in relation with the Online Video Platform Security Review
• Sharing your information with third parties for the purposes outlined in this Privacy Policy.

c) Compliance with our legal obligations

YOUR RIGHTS

You have the right, in accordance with the law, to object to the processing of your information, to request a restriction of such processing, to request access, deletion or correction of any erroneous or incomplete data, to exercise your data portability right. For these purposes, please contact FIFA through the dedicated portal.

DATA PROTECTION OFFICER

Contact our Data Protection Officer by email at dataprotection@fifa.org. You can also write to us at Fédération Internationale de Football Association (FIFA), FIFA-Strasse 20, 8044 Zurich, Switzerland.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to make changes to this Privacy Policy, at any time. When we make changes, we will revise the "last updated" date at the bottom of the Privacy Policy and any change will be effective immediately upon posting. We will use reasonable efforts to inform you about any material changes made to this Privacy Policy, for example by posting a relevant notice on the Portal. Your continued use of the Portal following the notification of changes will constitute your acceptance of such changes. We encourage you to review our Privacy Policy regularly.

This Privacy Policy was last issued in July 2022.