PRIVACY NOTICE FOR THE PAID ONLINE VOTING OF THE 2024 EUROVISION SONG CONTEST
The following information is intended to provide you, as a voter (hereinafter, “You”, “Yours”) in the Eurovision Song Contest (ESC) via the paid online voting platform available at esc.vote (the “Voting Platform") with an overview of the personal data We collect and process about You when You vote online in the ESC 2024 and about Your rights under data protection law.
As Joint Controllers, We
The European Broadcasting Union - Union Européenne de Radio Télévision, L’Ancienne-Route 17A, 1218 Le GrandSaconnex, Genève, Switzerland (the “EBU”)
And
Special Broadcasting Service - 14 Herbert Street, Artarmon NSW 2064 Australia, acting as Participating Broadcaster for Australia in the ESC 2024 (the “National Broadcaster”), and the other Participating Broadcasters taking part in the ESC 2024, the list of which is included at the end of this Privacy Notice.
And
Once Germany GmbH (formerly known as digame GmbH), Schanzenstrasse 38 D-51063 Cologne Germany (the “ESC Voting operator”) are committed to protect Your personal data and respect Your privacy in compliance with applicable data protection laws, notably the EU General Data Protection Regulation 2016/679 (GDPR) and the German Federal Data Protection Act (BDSG). We will not process your personal data for any other Purposes that the ones set below.
The EBU the Participating Broadcasters and the ESC Voting operator have executed specific and separate joint controllers’ arrangement pursuant to Article 26 of GDPR, the key content of which is available on demand at the premises of either the EBU or of the ESC Voting operator.
What categories of personal data are being processed?
We will process only the personal data which the ESC Voting operator receives when You cast Your vote online via Voting Platform.
When doing so, the ESC Voting operator will – depending on your country of origin – gather or have access to the following categories of data from you if applicable:
• IP-address
• IP geolocation
• User Agent
• Voting metadata
- Which songs you voted for
- Timestamp
• Payment data
- Payment card details (card number, card expiry date, card type, card issuer bank, 3D Secure authentication details) - Payment amount
- Unique ID of payment method
- Fingerprint (identifies returning customers, potentially links payments of different payment cards) - Country of issuing bank
- Date and time of transaction
- The payment method and origin that has been chosen - Email address - Name.
Please note that the ESC Voting operator does not store Your banking details or payment card details which are solely processed by the appointed payment providers as Independent Controller. However, payment providers may provide the ESC Voting operator access to Your payment data (as listed above) to enable us to detect fraudulent or non-eligible votes or verify any refund request.
What are the Purposes of processing and what is the legal basis for this?
We collect Your personal data on the basis of the performance of a contract (Art. 6 Para. 1 (b) GDPR) and of our legitimate interest (Art. 6 Para. 1 (f) GDPR) for the purposes of (“Purposes”):
- calculating and generating valid and official results of the ESC on the basis of the votes cast by the audience
(including Yours) to determine valid results and ranking of the songs entered in the ESC and the winner thereof;
- detecting fraudulent or non-eligible votes or verifying any refund request; - generating aggregated statistics on the voting in the ESC; - publishing aggregated and anonymized results.
Who will have access to your personal data?
We will share Your personal data with the following service providers acting as processors on our behalf with whom the ESC Voting operator has entered into a data processing agreement (DPA) in accordance with Article 28 GDPR and which will process Your data for different purposes such as hosting, content delivery etc.
- External Hosting provider acting as processor
The Voting Platform is hosted by an external service provider (host). Personal data collected on the Voting Platform are stored on the servers of the host.
Our provider will only process Your data to the extent necessary to fulfil the performance of its obligations and to follow our instructions with respect to such data.
- Content delivery network providers acting as processors
The information transfer between Your browser and the Voting Platform is technically routed via the content delivery network. This enables us to boost the global availability and performance capabilities of the Voting Platform.
- Payment services providers acting as separate Independent controllers
We integrate payment services of third-party companies on the Voting Platform . When You proceed with payment for Your votes, Your payment data (as listed above) are processed by the payment service providers as Independent data controllers for the purpose of payment processing. For these transactions, You acknowledge that Your personal data will be processed in accordance with those service providers own respective legal ground and privacy notice for which We have no responsibility. You acknowledge that payment providers will provide the ESC Voting operator access to Your payment data (as listed above) to enable us to detect fraudulent or non-eligible votes or verify any refund request.
- Inside the ESC Voting operator
Your personal data is accessible to various staff members acting under the ESC Voting operator’s authority and in accordance with our instructions. Whilst the EBU and the Participating Broadcaster are joint controller with the ESC Voting operator with regard to the Paid Online Voting, the ESC Voting operator will not transfer your personal data to them, and they will receive from the ESC Voting operator only anonymized results for the purposes listed above. Only the aggregated and anonymized results will be published.
Will personal data be transferred to a third country or an international organization?
Please note that whenever Your personal data is transferred to processors or third parties located in countries outside the European Economic Area which are not considered by the European Commission to guarantee an adequate level of protection for personal data, we will ensure that appropriate measures are implemented according to the applicable national and European legislation relating to data protection. We will, in particular, use Standard Contractual Clauses approved by the European Commission to ensure adequate protection. For further information, including a copy of the documents used to protect your personal data, please contact us at [email protected].
How long will my personal data be kept by us?
The ESC Voting operator will process and store Your personal data for as long as required to fulfil our contractual and legal obligations. Once the personal data is no longer required to fulfil contractual or legal obligations, it will regularly be erased unless its further processing – for a fixed period of time – is required for the following purposes including:
- fulfilment of commercial- and tax-law related storage obligations;
- compliance with the German Commercial Code (HGB), Tax Code (AO), Money Laundering Act (GwG). These laws generally specify storage periods for archiving and documentation purposes ranging from two (2) to ten (10) years.
Use of cookies
The Voting Platform uses cookies to function. Cookies are small text files placed in the browser of Your computer (or other digital device used) by websites that You visit. They are employed by us to detect and protect against fraudulent payments. These cookies do not require consent and cannot be refused if You wish to visit the Voting Platform, as they are strictly necessary for proper functioning of our services.
Please refer to the table below for all relevant information about these cookies.
| Domain that places the cookie | Firstparty or thirdparty cookie | Information processed | Purpose | Legal base for processing | Running time | Possibility for third parties to have access |
| company.com | First party Cookie | IP address | The cookie is strictly necessary to provide a service expressly requested by the subscriber or the final user. | Legitimate interest | Session | no |
Cookies Requiring Consent
In addition, the Voting Platform uses other cookies that are not qualified as necessary and require Your consent. Please refer to the table below for all relevant information on these cookies used by the Voting Platform.
| Domain that places the cookie | First-party or third- party cookie | Information processed | Legal base for processing | Possibility for third parties to have access |
| company.com | Third party cookie | IP Address | Consent | Other Company |
Sharing on social networks
We may offer content sharing functionality to third party platforms. When redirecting to these platforms, cookies may be set on your device when visiting their websites or apps. Please refer to the respective privacy policies of these platforms to learn more.
What are your rights?
You have the right to review Your personal data, and to request that they are corrected in the event of inaccuracy or deleted in the event that they are no longer necessary in relation to the purposes for which they were collected and processed.
In some cases, You have the right to ask for a restriction of processing, for data portability or to object to processing. Any consent You give to the processing of Your personal data by us may be withdrawn at any time. Please note that the withdrawal of consent will only apply for the future. Processing which took place before the withdrawal of consent will not be affected by it.
If You believe that the processing of Your personal data constitutes a violation of the data protection law(s), you have the right to file a complaint with a supervisory authority, in particular in the Member State of the European Union of Your usual place of residence, Your place of work or the place where the violation occurred.
How can you contact our Data Protection Officers?
If You have any questions or concerns about this Privacy Notice You may contact:
Effective date and Changes
This Privacy Notice is effective from 19 April 2024.
We reserve the right, at our complete discretion, to change, modify, add, or remove portions of this Privacy Notice at any time.
List of Participating Broadcasters in the ESC 2024
Radiotelevisioni Shqiptar, Rruga Ismail Qemali 11 1008 Tirana ALBANIA
Public Television Company of Armenia CJSC 26 G. Hovsepyan Str. 0047 Yerevan ARMENIA
Special Broadcasting Service 14 Herbert Street NSW 2064 Artarmon AUSTRALIA
Oesterreichischer Rundfunk Hugo-Portisch-Gasse 1 1136 Vienna AUSTRIA
Ictimai 241 Sharifzadeh 1012 Baku AZERBAIJAN
Radio-Télévision Belge de la Communauté française 52 Boulevard Auguste
Reyers 1044 Brussels BELGIUM
Hrvatska Radiotelevizija Prisavlje 3 10000 Zagreb CROATIA
Cyprus Broadcasting Corporation Rik Avenue 2120 Aglantzia 1397 Nicosia CYPRUS
Ceska Televize Kavci Hory 14070 Praha 4 CZECHIA
DR DR Byen, Emil Holms Kanal 20 0999 Copenhagen DENMARK
Eesti Rahvusringhaaling - Estonian Public Broadcasting Gonsiori 27 15029 Tallinn ESTONIA
Oy Yleisradio Ab Radiokatu 5 24 Helsinki FINLAND
France Télévisions 7, Esplanade Henri de France 75015 Paris Cedex 15 FRANCE
Georgian Public Broadcaster 68, M. Kostava Street 0171 Tbilisi GEORGIA
Norddeutscher Rundfunk Rothenbaumchaussee 132-134 20149 Hamburg GERMANY
Hellenic Broadcasting Corporation 432 Messogheion Avenue 15342 Agia Paraskevi, Athens GREECE
Rikisutvarpid (Icelandic National Broadcasting services Efstaleiti 1 150 Reykjavik ICELAND
Raidio Telefis Eireann Donnybrook Dublin 4 IRELAND
Israeli Public Broadcasting Corporation Kremenetsky 6 6789906 Tel Aviv ISRAEL
RAI Radiotelevisione Italiana S.p.A. Viale Mazzini 14 00195 Rome ITALY
Latvijas Televizija Zakusalas Krastmala 3 1509 Riga LATVIA
Lietuvos Radijas Ir Televizija S. Konarskio st. 49 03123 Vilnius LITHUANIA
RTL 3, boulevard Pierre Frieden L-1543 Kirchberg LUXEMBOURG
Public Broadcasting Services Ltd. 75 St Luke's Road PTA 1022 G'mangia MALTA
Teleradio-Moldova 1, Miorita Street 2028 Chisinau MOLDOVA
Nederlandse Publieke Omroep Bart de Graaffweg 2 1202 JJ Hilversum NETHERLANDS
Norsk Rikskringkasting AS Areg RM 11 0340 Oslo NORWAY
Telewizja Polska SA Ul. J.P. Woronicza 17 00-999 Warszawa POLAND
Radio e Televisao de Portugal Av Marechal Gomes da Costa 37 1849-030 Lisboa PORTUGAL
San Marino RTV Viale J. F. Kennedy 13 47890 San Marino SAN MARINO
Radiotelevizija Srbije Takovska 10 11000 Belgrade SERBIA
Radiotelevizija Slovenija Kolodvorska, 2 1550 Ljubljana SLOVENIA
Radiotelevision Espanola Despacho 3/138. 3 Planta, Avenida
Radiotelevision 4 28223 Pozuelo De Alarcon (Madrid) SPAIN
Sveriges Television Ab Oxenstiernsgatan 2634 10510 Stockholm SWEDEN
SRF Schweizer Radio und Fernsehen Fernsehstrasse 1-4 8052 Zurich SWITZERLAND
Joint Stock Company “Public Broadcasting Company of Ukraine” 42, Yuriia Illienka str. 04119 Kiyv UKRAINE
BBC - British Broadcasting Corporation Room 103, 16 Langham Street W1A 1AA London UNITED KINGDOM
