In brief. We know that you are busy. Perhaps you are wondering why you are receiving yet another Privacy Notice which, let’s be honest, you might decide not to read. Privacy is very important to us and it is important to you too. This is why we, at The Coca‑Cola Company, want you to take a couple of minutes to read this Privacy Notice and learn about what we are doing with your data, what rights you have and how you can exercise them.  

1. Who are we, and what is this Privacy Notice about?

a. This Privacy Notice is issued by NV Coca‑Cola Services SA (herein referred to as “Coca‑Cola” or “We” or “Organizer”), a company with registered office at Chaussée de Mons 1424, 1070 Brussels, which is the entity responsible for the processing of your data (“controller”). We are committed to respecting your privacy.

b. This Privacy Notice (“Notice”) tells how and why we are using your personal and sensitive data in the context of Milano Cortina - Torch Relay Nomination (“Preselection”), what we are doing to protect it and what you can do to manage your data and exercise your rights. 

c. We are committed to protecting the privacy of anyone whose data we collect and process in the context of this disclosure. This Notice therefore sets forth information regarding the collection, storage and other processing of your personal data in the context of the Preselection. This Notice is offered for information purposes under applicable data privacy laws and regulations only. Nothing in this Notice shall be deemed to confer any right to employment.

2. Why are you receiving this Notice?

You are receiving this Notice because you signed up for the participation to the Preselection. In order to allow you to participate, we would need to collect some personal information and we want to inform you about collection and processing of your personal data.

3. What personal data could we collect about you? 

a. General information about yourself (e.g.  surname, first name, national ID, passport, e-mail address, telephone number, work site, gender, date of birth, place of birth, postal address, uniform size, need for assistance).

b. Sensitive Personal Data (e.g. health and disability information). Sensitive Personal Data are referring to your: racial or ethnic origin; health or medical condition; criminal background; genetic or biometric data; sexual life or orientation. 

We generally do not collect sensitive data, with the exception of information for which you have provided your explicit consent.

4. How do we collect your personal data? 

a. Directly: by the way of having you inserting your information needed directly into the registration form.

b. Indirectly: we do not collect any information indirectly.

c. How do we use your personal data? 

We may use your personal data for the following purposes relying on the following legal bases: 

a. Processing of data based on consent

We may, for example, ask you to complete questionnaires and surveys or use any sensitive personal information only after you provide us with explicit consent. 

b. Processing of data based on our legal obligations

We may process your personal data to comply with legal requirements, legal proceedings or government authorities' orders which can include orders from government authorities outside your country of residence, when we reasonably believe that we are legally required to do so and when disclosing your Personal Data is strictly necessary to comply with said legal obligations, proceedings or government orders.

c. Lawful protection of our interests:

To lawfully enforce our rules and policies, protect our operations or those of any of our affiliates, protect our rights, privacy, safety or property, and/or that of our affiliates, and allow us to pursue available legal remedies or limit the damages that we may sustain.

d. Processing of data based on performance of contract 

To allow you to participate to the Preselection and use any video or footage. The processing of your Personal Data for this purpose is based on performance of the relevant terms and conditions.

5. Who has access to your personal data?

• SA Coca‑Cola Services N.V, its affiliates and bottling partners 
• Fondazione Milano Cortina 2026 - Organizing Committee of the Olympic and Paralympic Games, with its registered office in via della Boscaiola, 26, 20159 Milano (MI) for the validation of the selected applications and the management of the torchbearers. Milano Cortina is acting as independent data controller
• Louder, with its registered office in Corso Brescia 91, 10152 Torino TO as the agency in charge of the preselection of candidates acting as data processor.
• Wiz Team, Av. de Rhodanie 58, 1007 Lausanne, Switzerland, as the agency responsible for providing the platform and infrastructure for the application form, acting as data processor.
• Outside TCCC, the following recipients may have access to all or parts of your personal information, limited and subject to the purpose of the activities for which they are engaged and in order for TCCC in order to meet its obligations under law, or for other, legitimate business purposes as listed below: 
  • Persons who take over our business and assets, or relevant parts of them, if any; 
  • Third parties to whom we or the TCCC group legal entities are required to disclose information by law or regulatory requirement (including litigation counterparties);
  • Competent regulatory and prosecuting authorities, including courts in case of litigation involving us or one of the TCCC group entity. 
  • Service providers, professional advisors and consultants that perform services for us in the context of the purposes described in this Privacy Notice, which may include data hosting, mailing and emailing services, events' organisation, and payments processing

6. What are your rights?

You have the following rights: 

• To the extent that the processing of your data is based on consent, you have the right to withdrawal your consent at any time by contacting the Coca‑Cola Privacy Team or Milano Cortina 2026. 
• The right to obtain confirmation as to whether or not your personal information is being processed and, if so, access to which categories of personal information; 
• The right to rectification of your personal information; 
• The right to request deletion of your personal information (subject to legal requirements, tax purposes, or other overriding interests);  
• The right to object to the processing of your personal information; 
• The right to ask for restrictions regarding the processing of your personal information; and
• The right to lodge a complaint with the relevant supervisory authority.

7. How can you exercise those rights?

To exercise these rights, please contact privacy@coca-cola.com.

In case of privacy requests related to the Milano Cortina 2026 form, please contact privacy@milanocortina2026.org

8. Whom Can You Contact About this Notice?

To see copies of any of the agreements referred to in this notice or address other questions about our processing of your personal information and/or related policies, please contact the Global Privacy Office at privacy@coca-cola.com. 

9. Storing and transferring your personal data

a. Data retention: We do not keep your personal data for any longer than is necessary to fulfil the purpose for which we collected it, or to comply with any legal requirements, or to assert or defend against legal claims. 

b. International transfers of personal data. To achieve the purposes described in this Privacy Notice, we may transfer your personal data internationally to different countries. In that case, our data transfers are subject to appropriate safeguards based on our global data processing agreement, we conclude with our vendors. To obtain any relevant information regarding any transfers of your personal data, please contact us using the contact information provided in section 8. 

10. Applicable law

This Privacy Notice is governed by and shall be construed in accordance with the laws of Belgium and any other mandatory provisions of applicable laws in the European Union.