Effective Date: November 4, 2024
USA Triathlon (“USAT,” “we,” “us,” or “our”) provides this privacy policy (“Policy”) to describe how we collect, use, and share information about you, along with the choices you have with respect to that information.
This privacy policy applies to all information that we collect about you (the “Personal Data” through: (1) our website, www.usatriathlon.org, and other websites that may link to this Policy (collectively, the “Sites”); (2) USA Triathlon official clubs, race directors, coaches, and other affiliated third parties; and (3) when you otherwise contact us or interact with us for any purpose.
How Does USAT Collect Personal Data?
When using our Sites, you may provide Personal Data about yourself, including your name, date of birth, contact information, demographic information, and any other information you choose to provide. We may also obtain personal information from third parties, such as USAT affiliated clubs, race directors, and coaches; the U.S. Olympic and Paralympic Committee; and other National Governing Bodies. We may combine information we collect from third parties with information we have collected ourselves.
We (and other entities) automatically collect Personal Data relating to your interactions with us and our Sites, including browser type, IP address, pages visited and other activities on the Sites, device type, time and date of visit, and any other information we collect through the use of cookies and similar technology. To learn more about the types of cookies that the Sites utilize and manage your consent preferences, you can visit https://go.usatriathlon.org/2024-Email-Preference-Center.html.
How Does USAT Use Personal Data?
We may use information we collect for any lawful purpose, including for:
- Maintaining and making publicly available a history of competitive race registrations and/or results;
- Administering, and entering into contractual relationships with vendors and other third-party service providers;
- Maintaining the Sites and customizing your use of the Sites;
- Communicate with you and respond to your requests;
- Marketing USAT to you, as well as communicate with you about USAT sponsors;
- Analytics and service development;
- Legally required reporting and compliance, including, but not limited to, compliance with the Ted Stevens Olympic and Amateur Sports Act and the Sexual Abuse and Safe Sport Authorization Act of 2017;
- Protecting our sport from doping, by reporting as necessary to comply with the policies, protocols, and rules set forth by the World Anti-Doping Agency and the U.S. Anti-Doping Agency;
- Addressing and refuting claims in legal or official proceedings;
- Responding to requests for information from government authorities;
- Protecting Services from threats, fraud, and spam; or
- With your consent, or as otherwise disclosed at the time information is collected.
USAT will not share your phone number with third parties except as required pursuant to a subpoena, court order, government inquiry, other legal process, or as otherwise required by law.
Lawful Bases For Processing
In certain jurisdictions, including the European Economic Area (EEA), United Kingdom (UK), and Switzerland, a lawful basis is required to process Personal Data. Accordingly, we may process your Personal Data based on these reasons:
- Consent: You have provided consent to use data. For example, when you consent to us placing non-essential cookies on your device and where you have opted in or registered to receive communications from USAT.
- Contract: It is necessary to process data to fulfill a contract with you that requires us to process Personal Data. For example, by responding to your support requests, providing information security, and protecting our Services from threats, fraud, and spam.
- Legitimate Interests: There is a commercial or business interest that is important to us or others which we have balanced against your privacy rights. For example, we may process data for Services, marketing and promotion, for security and fraud prevention, and for managing day-to-day business operations.
- Legal Obligation: It is necessary to use data so that we can fulfill our legal and regulatory obligations. This includes processing your Personal Data to follow the law, such as providing information security, administering opt-outs and opt-ins, conducting legally required reporting, complying with the rules, regulations and protocols of the World and U.S. Anti-Doping Agencies, and keeping records of your consent or when you exercise your privacy rights.
Where we process your Personal Data based on your consent, you may withdraw it at any time; however, this will not affect the lawfulness of our processing before you withdrew your consent. It will also not affect processing performed on other lawful grounds.
Where we receive your Personal Data as part of performing a contract, we require such Personal Data to be able to carry out the contract. Without that necessary Personal Data, we will not be able to fulfill our contractual duties.
With Whom Does USAT Share Personal Data?
USAT does not sell your Personal Data. We may share the information we collect with other parties, including the following:
- With third-party service providers or consultants who process Personal Data, on our behalf, in various areas of business such as billing, payment processing, email deployment, business analytics, marketing, performance monitoring, hosting, and data processing;
- With the U.S. Olympic and Paralympic Committee and other affiliated organizations, in order to fulfill our role as a national governing body, as well as for business, operational, and marketing purposes;
- With the U.S. Anti-Doping Agency and the World Anti-Doping Agency, as necessary to comply with those agencies’ rules and regulations;
- As part of a corporate transaction, such as a corporate entity sale, reorganization, dissolution, the sale of a website, a merger, consolidation, asset sale, similar events, or in the unlikely event of bankruptcy, or other transfer of all or part of our assets;
- Pursuant to a subpoena, court order, governmental inquiry, other legal process, or as otherwise required by law, to protect the security and integrity of our Services, USAT and our interests, or the public from harm or illegal activities;
- With the public, in the form of race registrations for certain races, race results, or information about lifetime bans and suspensions, as needed to comply with legal obligations and/or applicable policies promulgated by the athlete’s international federation, including the USOPC Anti-Doping Policies; or
- With your consent or as otherwise disclosed at the time of data collection or sharing.
We may share information that has been de-identified or aggregated without limitation.
Your Rights
Residents of certain jurisdictions may have rights with respect to the personal data collected by us. You may be able to exercise the following rights regarding Personal Data, subject to certain exceptions and limitations:
- The right to know and access the Personal Data we hold about you;
- The right to correct inaccuracies in the Personal Data we have collected about you;
- Under certain circumstances, the right to request that we delete Personal Data;
- Depending on your jurisdiction, you may have the right to restrict or object to our processing of Personal Data;
- Under certain circumstances, to receive Personal Data about you that we store and transmit to another without hindrance from us, including requesting that we provide personal data directly to another, i.e., the right to portability;
- Where we previously obtained your consent, the right to withdraw consent you previously provided to processing Personal Data.
To exercise these rights, contact us using the “Contact Information” section below. Please be aware that USAT may be unable to afford these rights to you under certain circumstances, such as if we are legally prevented from doing so.
Right to Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority if you believe your data rights have been violated. In particular, you can lodge a complaint in the jurisdiction of your habitual residence, place of work, or of an alleged violation of data protection laws.
How Long Do We Keep Your Personal Data?
We will retain your Personal Data for as long as is necessary to fulfill the purpose for which we collected your Personal Data and any other permitted linked purpose. For example, we will retain and use your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
If your Personal Data is used for more than one purpose, we will retain it until the purpose with the longest retention period expires. Our retention periods are also based on our organization’s needs and good practice.
Where Will My Personal Data Be Transferred To?
Personal Data may be transferred to the United States and to service providers in countries outside the EEA, UK, or Switzerland, and may be stored and processed manually and electronically through global systems and tools for the purposes outlined above.
Please be aware that the Personal Data we collect may be transferred to and maintained on our servers or databases located outside your jurisdiction, where the privacy laws may not be as protective as those in your location. If you are located outside of the United States, please be advised that we process and store personal data in the United States.
Security
USAT uses generally accepted standards to protect the Personal Data submitted to us, both during transmission and once it is received. USAT has implemented and will maintain technical, administrative, and physical measures that are reasonably designed to protect your Personal Data against accidental, unlawful, or unauthorized destruction, loss, alteration, access, theft, or misuse.
Third-Party Links and Tools
The Site may provide links to third-party websites or apps. We do not control the privacy practices of those websites or apps, and they are not covered by this privacy policy. You should review the privacy policies of other websites or apps that you use to learn about their data practices.
Your interactions with third-party companies and your use of their features are governed by the privacy policies of the companies that provide those features. We encourage you to carefully read the privacy policies of any accounts you create and use.
Children
We do not knowingly collect any Personal Data from children under the age of thirteen (13) without parental consent. If we learn that a child under the age of thirteen (13) has provided us with Personal Data, we will delete it in accordance with applicable law.
Changes To This Privacy Policy
We may update this Policy to reflect changes to our information practices or when there are new legal requirements that need to be addressed. If we make any material changes, we will post the revised Policy to this page. We will also revise the “Effective Date” date above. We encourage you to periodically review this page for the latest information on our privacy practices.
Contact Information
If you have any questions about this Policy or our practices, please contact us at legal@usatriathlon.org.