Resolutions, opinions and reports search tool

The complainant considered that, by publishing the results of the chess competitions, organised by the FCE, the participants' health data were disseminated and preserved whenever, to participate in the competition, the Passaport Covid-19 had to be exhibited. In this respect, information regarding whether a person is vaccinated or has suffered a disease constitutes health data in accordance with Article 4 of the GDPR. However, in this case, the ECF has argued sufficiently that, on the one hand, in order to comply with the legality in force, it should require the display of Passport Covid-19 to competition participants and, on the other hand, that there were people who displayed an antigen test, PCR or vaccination exemption document. In these circumstances, it cannot be claimed that the publication of the aforementioned acts allowed third parties to relate the persons identified to the acts, to the fact that they had been vaccinated against COVID-19, whenever, there were people who might not be vaccinated, and to have presented a PCR or an antigen test, and others who had a vaccination waiver document. For these reasons, the reported facts should be archived.

The FCF made available to football sports clubs a form through which clubs had to identify members with a federal license who were positive of Covid-19 and the federated persons with whom they had been close contact. They also had to report the start date of symptoms and their vaccination state. In this regard, the FCF has argued that the collection of data was carried out in compliance with the Action Plan for Sports Deconfinement of the Government of Catalonia, within which the FCF drew up its Protocol to minimize COVID-19 infections. That being the case, it should be noted that Resolution SLT/3652/2021 of 7 December, which was in force at the time of the reported facts, referred to the content of the action plan for sports deconfinement in anything that did not contradict it. In relation to the above, it must be made on the basis that, knowing which people were positive from COVID-19, the date of symptom presentation, and their vaccination state, was information necessary for the adoption of decisions relating to the organisation of the sports competition. In the light of the above, it should be concluded that the reported processing was disabled by Article 6.1c) GDPR, with the exceptions provided for in Article 9.2g) and i), in connection with the current public health regulations and the prevention of COVID-19 infection.

The divulging through the publication on the web page of a list of persons associated with the entity, without consent of the affected persons nor legal habilitation, is considered a foreseen offense in the article|item 44.3.k) in relation to the article|item 6.1,ambdós of the LOPD.

The writing of the article 21 of the Regulations of the Register of Sport Entities of the Generalitat de Catalunya allows the emission of certificates, whenever, in the cases that these certificates contain particulars of the documents shown by the registered entities, the forecasts of the regulations is had into consideration on the subject of protection of data, that it requires the consent and, in the event of not having the same, to have legal habilitation, habilitation that gives to us Law 30/1992, precisely the article 37.3.

It corresponds to the Catalan Agency of Protection of Data the Inscription in the Register of Data Protection of Catalonia of the files of titularity of a Catalan sport federation.