Data Collection and Processing
EBU collects personal data for account creation and ticket pre-registration.
Privacy Policy
Eurovision's Privacy Policy Explained
🌐 www.eurovision.com
The Eurovision Song Contest is an annual international song competition organized by the European Broadcasting Union, where participating countries submit original songs to be performed live on television and radio.
75
User Data Protection
Explains collection of basic and technical data, mentions special category data only if voluntarily provided, and outlines security measures. However, lacks explicit safeguards for sensitive data like location or biometrics.
80
Legal Compliance
References GDPR and FADP, lists user rights (access, rectification, erasure, etc.), and provides contact details. Could be stronger on specific legal obligations and cross-border transfer safeguards.
65
Balance & Fairness
Provides user rights and opt-out options, but includes broad legitimate interest grounds and data sharing with partners without detailed recourse. The policy is somewhat one-sided in favor of the controller.
70
Transparency & Readability
Uses clear headings and plain language in many sections, but the text is lengthy and includes legal jargon. The cookie banner and privacy notice are accessible, but overall readability could be improved.
AI Summary
- The URL displayed as "Vienna 2026" suggests data processing may occur for contests that have not yet taken place, which is vague and potentially speculative.
- The privacy notice relies heavily on "Legitimate Interest" as a legal basis for many processing activities, which is broad and may not meet the specific expectations of all users.
- Under "Legitimate Interest," the policy allows for CRM analytics, user engagement analysis, and business intelligence reporting that can link behavioral data back to individual accounts, raising concerns about profiling without explicit consent.
- The policy states that data may be transferred between different IT systems and analytics platforms, introducing complexity and potential risk regarding where and how data is used.
- It mentions sharing Personal Data with the host broadcaster and official ticketing partner, but does not clearly specify how those entities will use the data, and it disclaims responsibility for their processing.
- The policy allows for the use of a shared authentication system across multiple Eurovision digital environments, which may create unanticipated linkages between different uses of your account.
- It notes that people under 18 are not intended to use the service, yet still invites them to contact if parental consent is not given, creating ambiguous responsibility.
- The effective date of the policy is listed as 31 March 2026, which is a future date and may indicate the policy is not current or has been released prematurely.
- Users are told they must check the page periodically for updates, rather than being proactively notified of material changes, which reduces transparency.
- The cookie banner offers only basic choices ("Allow all," "Reject all," or "Preferences"), and the preferences are limited to functional vs. analytics, with no opt-in required for marketing or profiling cookies, which is not fully compliant with GDPR consent standards.
📋 Key Clauses Analyzed
Legal Basis for Processing
Processing based on contract, legitimate interest, or consent for specific purposes.
Data Sharing with Third Parties
Data shared with ticketing partner, host broadcaster, and IT providers.
Data Retention Period
Data retained as long as necessary for purposes or legal obligations.
User Rights and Contact
Users can access, rectify, erase, or restrict data processing anytime.
❓ Questions About This Privacy Policy
AI Enhanced Answers
The policy displays the URL "Vienna 2026," which suggests that data processing may occur for contests that have not yet taken place. This is vague and potentially speculative, as it implies future data handling without clear details. Users should be aware that the policy may be forward-looking and not necessarily reflect current practices.
The policy heavily uses "Legitimate Interest" as a legal basis for many processing activities, which is broad and may not align with all users' expectations. Under this basis, it allows for CRM analytics, user engagement analysis, and business intelligence reporting that can link behavioral data back to individual accounts. This raises concerns about profiling without explicit consent, as users may not anticipate such extensive data use.
The policy mentions sharing Personal Data with the host broadcaster and official ticketing partner, but does not clearly specify how those entities will use the data. It also disclaims responsibility for their processing, meaning users have limited recourse if those third parties misuse the data. This lack of clarity and accountability could pose risks to user privacy.
The policy allows for a shared authentication system across multiple Eurovision digital environments, which may create unanticipated linkages between different uses of your account. This means your activity in one area could be connected to another, potentially leading to broader profiling than expected. Users should consider how this interconnectedness affects their privacy.
The effective date is listed as 31 March 2026, a future date, which may indicate the policy is not current or has been released prematurely. This could mean the policy is not yet in force or that it is subject to change before that date. Users should be cautious about relying on it as a reflection of current data practices.
Never blindly click "agree" again
Install the free Termzy AI browser extension and get instant AI-powered analysis of any legal document you encounter online.
Add Termzy AI to the Browser - It's Free