Resolutions, opinions and reports search tool

Un club deportivo de fútbol de nueva creación contactó con la Federación Catalana de Fútbol dado que cuando intentaba vincular dieciséis jugadores a su club, la Intranet federativa le mostraba un mensaje mediante el cual se lo informaba que los mencionados jugadores estaban vinculados a otro club deportivo. Al respeto, la persona denunciando se quejaba por el hecho que, desde la FCF se había enviado al mencionado club de nueva creación unas impresiones de pantalla que contenían los datos personales de los 16 jugadores que, en aquel momento, estaban vinculados a otro club. Pues bien, por su parte, la entidad denunciada ha reconocido haber enviado las impresiones de pantalla - con información personal de los jugadores (nombre, apellidos y DNI) - al club de nueva creación, a los efectos de mostrarle los pasos que tenía que seguir para poder inscribir a los jugadores, y ha argumentado que este hecho no constituye una comunicación ilícita de datos personales dado que el receptor de la información, ya era conocedor de estas información. Al respeto, añadía que, la Intranet muestra el mencionado mensaje después de que el club haya introducido los datos personales de los jugadores. En estos términos, procede el archivo de los hechos denunciados dado que, cuando la FCF envió los datos personales de los jugadores al Club que los intentaba inscribir, este ya disponía de la información.

The complainant considered that, by publishing the results of the chess competitions, organised by the FCE, the participants' health data were disseminated and preserved whenever, to participate in the competition, the Passaport Covid-19 had to be exhibited. In this respect, information regarding whether a person is vaccinated or has suffered a disease constitutes health data in accordance with Article 4 of the GDPR. However, in this case, the ECF has argued sufficiently that, on the one hand, in order to comply with the legality in force, it should require the display of Passport Covid-19 to competition participants and, on the other hand, that there were people who displayed an antigen test, PCR or vaccination exemption document. In these circumstances, it cannot be claimed that the publication of the aforementioned acts allowed third parties to relate the persons identified to the acts, to the fact that they had been vaccinated against COVID-19, whenever, there were people who might not be vaccinated, and to have presented a PCR or an antigen test, and others who had a vaccination waiver document. For these reasons, the reported facts should be archived.

The FCF made available to football sports clubs a form through which clubs had to identify members with a federal license who were positive of Covid-19 and the federated persons with whom they had been close contact. They also had to report the start date of symptoms and their vaccination state. In this regard, the FCF has argued that the collection of data was carried out in compliance with the Action Plan for Sports Deconfinement of the Government of Catalonia, within which the FCF drew up its Protocol to minimize COVID-19 infections. That being the case, it should be noted that Resolution SLT/3652/2021 of 7 December, which was in force at the time of the reported facts, referred to the content of the action plan for sports deconfinement in anything that did not contradict it. In relation to the above, it must be made on the basis that, knowing which people were positive from COVID-19, the date of symptom presentation, and their vaccination state, was information necessary for the adoption of decisions relating to the organisation of the sports competition. In the light of the above, it should be concluded that the reported processing was disabled by Article 6.1c) GDPR, with the exceptions provided for in Article 9.2g) and i), in connection with the current public health regulations and the prevention of COVID-19 infection.

The complainant complained about the fact that the Sports Park Municipal Guiera, managed by the City Council of Cerdanyola del Vallès, conditioned access to the users of the sports center, in the exhibition of Passaport Covid-19. In relation to this, it should be noted that Resolution SLT/3787/2021 of 23 December, in force at the time of the event, provided for the requirement to submit the certificate of vaccination, diagnostic testing or recovery of COVID-19 to access "to rooms and gymnasiums where physical and/or sports activity is practised". In these terms, it should be pointed out that the reported processing was made redundant by Article 6.1 GDPR (c) since it was necessary to comply with a legal obligation and that, according to the exceptions provided for in Article 9.2 g) GDPR, the processing of health data must be necessary for reasons of essential public interest, and for the exception of paragraph 1(i) of the aforementioned article, which provides that the processing must be necessary for reasons of public interest in the field of public health. Ultimately, the complainant complained about the fact that PEM Guiera staff accessed his personal data, without prior consent. However, consulted by this Authority, the complainant confirmed that he had not exhibited the Passaport covid-19 to the staff of the PEM Guiera when required, and the complainant has argued that the staff of the center acted in the exercise of their functions, so no breach of the current legislation is noted.

The capture, recording and diffusion of images of natural persons identified or identifiable in the municipal pavilion constitutes a processing of personal data subject to the principles and obligations of the GPD, which could be permissible for the effects of Article 6.1.f) GDPR, provided that specific guarantees are applied, specifically, in relation to the duty of information and the principle of minimisation. The responsibilities of the intervening subjects should be clarified in order to determine who is responsible for treatment, as well as the justification of the use of mechanisms based on artificial intelligence.

The diffusion of identified or identifiable images of physical persons who occupied a public charge or a profession of public projection, or of persons who turn up as merely accessory (especially in the event of images of persons under age), in events or public sport events organized by the Town Council, sufficient juridical basis (art. 6.1.e) could have RGPD), whenever the Town Council takes the considerations that expose themselves in this judgement into account.

S'arxiva la denúncia en considerar que l'Ajuntament no va desatendre la sol·licitud de cancel·lació presentada per la persona denunciant, qui havia sol·licitat que el seu nom i cognoms no figuressin en els llistats de la cursa de la Mercè, que figuraven publicats a internet, i això perquè l'Ajuntament va procedir a la despublicació d'un llistat, i el que encara hi figurava corresponia a un blog aliè a l'Ajuntament.

The catchment, the recording and the retransmission live of the football matches constitutes a data processing of personal character that can find habilitation in the consent of the persons affected or in another rule with rank of law, as now the freedom of information (art. 20.1 CE) or the article 8.2.c) of the organic Law 1/1982. The responsible for the treatment will have to give fulfillment to a series of duties as creating the corresponding file, notify it to the authority of control, establish a contract of person in charge of the treatment with the company that intervenes in the management of the system, attend to the rights of the affected persons and inform the affected persons.

The communication to the Syndic of Offenses of Catalonia of the reports of the 20 minors in which the federative license would not have been granted, is fitted out by the article 11.2.d) of the LOPD, in connection with the articles 78 and 79 of the EAC and the forecasts of the Law 24/2009 (article 55), taking the personal information contained in these reports into account.

The recording and retransmission of the sport events that policemen are celebrated in the sport facilities, in which the images of the persons turn up as merely accessory, would be in agreement with the LOPD, in attention to the habilitation of the article 8.2.c) HIM 1/1982. However, the catchment of images of the persons who train in these facilities would require the consent previous and informed of the affected ones or, if it was the case, that of its parents, tutors or legal representatives, except another legal habilitation.