ADAMS Privacy Policy

Effective 1 January 2015; modified 1 June 2018

Summary of changes as of 1 JUNE 2018:

The updated ADAMS Privacy Policy specifies users’ rights while using ADAMS and its modules, states the legal basis for WADA’s processing of data in ADAMS, and clarifies other information collected while using the ADAMS mobile application.

ADAMS Privacy Policy

This ADAMS Privacy Policy sets out how, as a consequence of your participation in organized sport, some data relating to you will be retained in and processed on “ADAMS.”

As explained in the ADAMS Legal Statement, ADAMS may be used by Anti-Doping Organizations (ADO) for scheduling in and out-of-competition doping tests and managing related information, including Therapeutic Use Exemptions (TUE), information related to athlete whereabouts, information about the results of anti-doping tests including the athlete biological passport, and sanctions-related information relevant to athletes and other participants. Through ADAMS, ADOs can better coordinate and render more effective their anti-doping programs mandated by the World Anti-Doping Code (Code). ADAMs is hosted and maintained by the World Anti-Doping Agency (WADA).

If you are an athlete, the ADO that created your profile in ADAMS may use the system for one or more of the above purposes, depending on its particular needs and requirements.  For other persons (e.g., trainers, coaches, athlete representatives), your data may appear in ADAMS by virtue of your affiliation with an athlete or athletes appearing on ADAMS.  In either case, the ADO that entered your data onto ADAMS shall serve as your ADAMS “Custodian Organization.”  WADA relies upon data available in ADAMS to fulfill its own responsibilities under the Code.

Please note that collection and processing of your data by your Custodian Organization, WADA and other ADOs must comply with WADA’s International Standard for the Protection of Privacy and Personal Information. You understand that your provision of certain information, such as whereabouts information, is required under the Code and that failure to provide such information or providing inaccurate information may constitute an anti-doping violation.

For more information on ADAMS, please consult the WADA website at www.wada-ama.org. To the extent that you have any concerns about the processing of your data, you may consult with the relevant organization, such as your Custodian Organization and/or WADA as appropriate, each of whom is required to appoint an individual to ensure their respective compliance with the International Standard for the Protection of Privacy and Personal Information.  Such individual, in WADA’s case, can be contacted at: privacy@wada-ama.org.

Additional information about ADAMS and the handling of your data is provided below, which you should read and understand before proceeding:

Information for Athletes  

Categories of Data Concerned

ADAMS contains the following categories of data:

§     Your unique ADAMS profile consisting of data relating to your identity (name, nationality, date of birth, gender, sport and discipline you compete in, organizations and/or sports federations to which you belong, and indication whether you compete at an international or national level).

In addition, and depending on how your Custodian Organization uses ADAMS, notably the particular ADAMS modules, the database may also contain:

§     Data relating to your whereabouts (e.g., training, competitions, travel, periods spent at home, on vacation, or other regular or exceptional activities), including, when you elect to use location-based services on the ADAMS app, information relating to your mobile device’s operating system, and  the IP address associated with your mobile device;

§     Data relating to test distribution planning (for the testing pools in which you participate);

§     Data relating to your Therapeutic Use Exemptions, if any;

§    Data relating to doping controls (test distribution planning, sample collection and handling, laboratory analysis, results management, hearings and appeals); and

§     Data relating to the Athlete Biological Passport.

Some of the above data may constitute protected personal data and sensitive personal data under national data protection or privacy laws where you reside.

Legal basis

WADA processes your personal data relying on different legal bases, depending on the particular context in which it is processed.  This includes processing in circumstances where it is permitted or required to do so under applicable anti-doping statutes, including Swiss anti-doping and sports laws; where the processing is necessary to meet the substantial public interests served by eliminating doping in sport; where the processing is based on your consent, which may subsequently be withdrawn; and where necessary to meet its legitimate interests. The ADO that created your profile in ADAMS may be relying on these or alternative legal bases, including applicable anti-doping laws.

Responsibility

Your Custodian Organization has created your unique ADAMS profile and is responsible for your information appearing in ADAMS. You can identify your Custodian Organization by viewing the “Security” tab of your athlete profile. In addition, WADA will access and process certain of your data in ADAMS (i.e., TUE data, laboratory results, doping control forms, athlete biological passport, sanctions and whereabouts data) to fulfill its responsibilities under the Code. Your Custodian Organization and WADA are responsible for protecting your information in accordance with applicable laws and WADA’s International Standard for the Protection of Privacy and Personal Information. WADA, moreover, has implemented strict contractual controls governing the use of ADAMS by ADOs and others.  Any parties accessing data residing on ADAMS are required, as well, to abide by the International Standard for the Protection of Privacy and Personal Information.

We ask that you ensure that all information that you enter into the system or that is entered on your behalf by other parties, such as your agent or coach, is accurate and free of errors. Where your Custodian Organization uses the ADAMS whereabouts module, you will be responsible for ensuring that the information you provide relating to your whereabouts is accurate and up to date. Please note that failure to provide accurate whereabouts information is likely to constitute an anti-doping rule violation, whether the failure is intentional or negligent.

You will be provided with a confidential password in order to enter your own data onto ADAMS and you will be responsible for keeping this password confidential at all times. Should you inadvertently disclose or misplace your password, you should contact your Custodian Organization immediately and a new password will be assigned to you.  ADAMS offers a two factor authentication (2FA) configuration to ensure that you are the only person who can access your account.

Disclosures

Part of your ADAMS profile, created by your Custodian Organization, may be shown to other ADOs using ADAMS to ensure that only a single athlete profile for you is created.

The Custodian Organization and WADA, where appropriate, may enable other ADOs and service providers to access certain of your information appearing in ADAMS to enable them to administer their own Code compliant anti-doping programs. Where this occurs, such ADOs and service providers also must abide by strict contractual controls and will be responsible for protecting your information in accordance with applicable laws and WADA’s International Standard for the Protection of Privacy and Personal Information.

These other ADOs may include, as relevant or appropriate: national Olympic committees, national paralympic committees, major event organizations such as the International Olympic Committee and International Paralympic Committee, international federations and national federations, and national anti-doping organizations. They should only be granted access on a need-to-know basis in accordance with the Code and the International Standard for the Protection of Privacy and Personal Information. By viewing the “Security” tab on your ADAMS profile, you can learn which organizations have access to elements of your data.

WADA and the organizations listed above will not disclose any of your data in ADAMS other than to authorized persons within their organizations and relevant law enforcement and/or Interpol, for instance where criminal activity is suspected, on a need-to-know basis; each of the organizations accessing and using ADAMS may only do so in order to fulfill their responsibilities and obligations arising under the Code, which primarily involves the administration of their anti-doping programs and ensuring appropriate information sharing as provided for under the Code.

International Transfers

Your data may be made available through ADAMS to persons or parties located outside the country where you reside. For example, your information will be shared with WADA, which is established in Switzerland and Canada, and may be shared with ADOs in countries where you may train or participate in sporting events, as those ADOs may be required to subject you to doping controls. The data protection and privacy laws of these countries may not always be equivalent to those in your own country. In all cases, these ADOs have to comply with WADA’s International Standard for the Protection of Privacy and Personal Information. Such transfers are a necessary consequence of your participation in organized sport and facilitate the strong public interests served by eliminating doping in sport.  In WADA’s case, the transfers are made to two countries, Canada and Switzerland, that have been deemed to provide adequate protection by a number of regional and national data protection agencies, as well as the European Commission.

Rights

Subject to limitation in applicable law and WADA’s International Standard for the Protection of Privacy and Personal Information, you may have certain rights in respect of your information, including rights to access, rectification, restriction, opposition, portability and deletion, and remedies with respect to any unlawful processing of your data. You also may have a right to lodge a complaint with a national regulator responsible for data protection in your country. 

Security

ADAMS is hosted in data centers located in Canada. Strong technological, organizational and other security measures have been applied to ADAMS to maintain the security of the data entered onto ADAMS. In addition, WADA and ADOs have put in place internal and contractual guarantees to ensure that your data remain confidential and secure pursuant to their commitments under the International Standard for the Protection of Privacy and Personal Information.

Data Retention

It may be necessary to retain your data in ADAMS for a minimum period of ten years. For instance, if your Custodian Organization uses ADAMS for TUEs and you are granted a TUE, the TUE approval forms will be stored electronically in ADAMS for a maximum period of ten years. The period of ten years represents the time period during which an action may be commenced for an anti-doping violation under the Code. If you are part of the Athlete Biological Passport program, the ten-year retention period also applies to your whereabouts information. For more information, please consult the Annex to WADA’s International Standard for the Protection of Privacy and Personal Information.

Right to Object

You understand that if you object to the processing of your data or withdraw your consent, it still may be necessary for your Custodian Organization and WADA to continue to process (including retain) certain parts of your data to fulfill obligations and responsibilities arising under the Code, notwithstanding your request.

You understand that preventing the processing, including disclosure, of your data may prevent you, your Custodian Organization, WADA or other ADOs from complying with the Code and relevant WADA International Standards, which could have consequences for you, such as an anti-doping rule violation, under the Code.

Information for Other Individuals

Categories of Data Concerned

ADAMS contains data relating to your identity (e.g., name) and basic contact details as well as your affiliation with an athlete or athletes with an ADAMS profile. This data may constitute protected personal data under national data protection or privacy laws where you reside.

Legal basis

WADA’s legal basis for processing your personal data includes processing that is necessary for WADA’s legitimate interests, including for the purposes described above.

Responsibility

The ADO that registered your athlete or athletes in ADAMS (the “Custodian Organization”) is responsible for your information appearing in ADAMS. In addition, WADA will access and process certain of your data in ADAMS in order to fulfill its responsibilities under the Code. Your Custodian Organization and WADA are responsible for protecting your information in accordance with applicable laws and WADA’s International Standard for the Protection of Privacy and Personal Information. WADA, moreover, has implemented strict contractual controls governing the use of ADAMS.

In cases where you are asked to provide that data yourself, directly into the system, you are responsible for making sure that this information is accurate. You may be provided with a confidential password in order to enter your own data onto ADAMS and you will be responsible for keeping this password confidential at all times. Should you inadvertently disclose your password, you should contact the Custodian Organization immediately and a new password will be assigned to you. ADAMS offers a two factor authentication (2FA) configuration to ensure that you are the only person who can access your account.

Disclosures

Part of your profile or data included in the ADAMS profile of your athlete or athletes may be shown to other organizations, notably ADOs, using ADAMS to ensure that only a single profile is created for you.

The Custodian Organization and WADA, where appropriate, may enable other ADOs and service providers to access certain of your information appearing in ADAMS to enable them to administer their anti-doping programs. Where this occurs, such ADOs will be responsible for protecting your information in accordance with their local laws and regulations, the WADA International Standard for the Protection of Privacy and Personal Information, as well as contractual controls that WADA has put in place governing the use of ADAMS.

These other ADOs may include, as relevant: national Olympic committees, national paralympic committees, major event organizations such as the International Olympic Committee and International Paralympic Committee, international federations and national federations, and national anti-doping organizations. They should only be granted access on a need-to-know basis in accordance with the Code.

WADA and the organizations listed above will not disclose any of your data other than to authorized persons within their organizations on a need-to-know basis; each of the organizations accessing and using ADAMS may only do so in order to fulfill their responsibilities and obligations arising under the Code, which primarily involves the establishment of anti-doping programs and ensuring appropriate information sharing as provided for under the Code.

International Transfers

Your data may be made available through ADAMS to persons or parties located outside the country where you reside. For example, your information will be shared with WADA, established in Switzerland and Canada, and may be shared with ADOs in countries where your athlete trains or participates in sporting events. The data protection and privacy laws of these countries may not always be equivalent to those in your own country. In all cases, these ADOs have to comply with WADA’s International Standard for the Protection of Privacy and Personal Information. Such transfers are a necessary consequence of your participation in organized sport and facilitate the strong public interests served by eliminating doping in sport.  In WADA’s case, the transfers are made to two countries, Canada and Switzerland, that have been deemed to provide adequate protection by a number of regional and national data protection agencies, as well as the European Commission.

Rights

Subject to limitation in applicable law and WADA’s International Standard for the Protection of Privacy and Personal Information, you may have certain rights in respect of your information,  including rights to access, rectification, restriction, opposition, portability and deletion, and remedies with respect to any unlawful processing of your data. You also may have a right to lodge a complaint with a national regulator responsible for data protection in your country. 

Security

ADAMS is hosted in data centers located in Canada. Strong technological, organizational and other security measures have been applied to ADAMS to maintain the security of the data entered onto ADAMS. In addition, WADA and ADOs have put in place internal and contractual guarantees to ensure that your data remain confidential.

Data Retention

It may be necessary to retain your data in ADAMS for a maximum period of ten years. The period of ten years represents the time period during which an action may be commenced for an anti-doping violation under the Code.

Right to Object

You understand that you may have a right to object to the processing of your data, although in that event, and as noted above, it still may be necessary for your Custodian Organization and WADA to continue to process (including retain) certain parts of your data to fulfill obligations and responsibilities arising under the Code.

You understand that preventing the processing, including disclosure, of your data may prevent you, your Custodian Organization, WADA or other ADOs from complying with the Code and relevant WADA International Standards, which could have consequences, such as an anti-doping rule violation, for you under the Code. 

ADAMS is hosted in data centers located in Canada. Strong technological, organizational and other security measures have been applied to ADAMS to maintain the security of the data entered onto ADAMS. In addition, WADA and ADOs have put in place internal and contractual guarantees to ensure that your data remain confidential