Esta página solo está disponible en inglés.
Summary of the Privacy Notice
NINOR Kft. (“NINOR”, “we”, “us”, “our”) is committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Hungarian data protection law. This summary is intended for everyone who visits our website www.gymnastics.tv (the “Platform”), or registers an account to watch the 2026 Artistic Gymnastics World Championships. The detailed notice below explains how we collect and use your personal data and with whom we share it.
Data controller
NINOR Kft., 1022 Budapest, Bimbó út 15., Hungary, is responsible for the processing of your personal data on the Platform. You can reach us at hello@worldgymnastics.org.
Why we process your data
- Account management and operation of the Platform: to create and run your account and keep the Platform secure (contract; legitimate interest).
- Providing access to the streams: to give registered users access to the live streams and other content (contract).
- Geo-location and protection of broadcasting rights: to determine from your IP address which country you are in, so that content is shown only where we are licensed to show it, and to detect VPNs, account sharing and illegal re-streaming (legal obligation; legitimate interest).
- Customer service and complaints: to answer your questions and handle your complaints (legal obligation; legitimate interest).
- Analytics and marketing cookies: only with your consent, as described in our Cookie Policy (consent).
Who receives your data
We share personal data only with our authorised staff and with carefully selected service providers (hosting, video streaming, email and analytics providers) that process it on our behalf, as well as with authorities where required by law. We do not sell your personal data. We do not share your personal data with World Gymnastics; we may report aggregated, anonymous viewing statistics to it.
Your rights
You have the right to access your personal data, to rectification, to erasure, to restriction of processing and to data portability, and to withdraw your consent at any time (without affecting the lawfulness of prior processing). To exercise your rights, contact us at privacy@gymnastics.tv. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or with the supervisory authority of your country of residence.
RIGHT TO OBJECT: YOU ARE ENTITLED TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS. IN THIS CASE WE WILL NO LONGER PROCESS YOUR PERSONAL DATA FOR SUCH PURPOSES, UNLESS WE DEMONSTRATE COMPELLING LEGITIMATE GROUNDS. YOU MAY OBJECT TO DIRECT MARKETING AT ANY TIME. EXERCISING THIS RIGHT IS FREE OF CHARGE.
For further information, please read the Detailed Privacy Notice below (v.1.0, 14 October 2026).
Detailed Privacy Notice
14 October 2026, v.1.0
This Privacy Notice explains how NINOR processes personal data in connection with the Platform, through which we stream the 2026 Artistic Gymnastics World Championships under a licence from World Gymnastics. It applies to visitors and registered users of the Platform. The Platform is free of charge, and we do not collect any payment data. Capitalised terms not defined here have the meaning given to them in our Terms of Use (www.gymnastics.tv/terms).
1. Data controller: Who is responsible for processing your personal data?
The data controller of your personal data is NINOR Kft. (registered seat: 1022 Budapest, Bimbó út 15., Hungary; company registration number: 13-09-233524 EU VAT number: HU32536595; email: privacy@gymnastics.tv; hereinafter: “NINOR”, “we”, “us” or “our”). We operate the Platform at www.gymnastics.tv and its subdomains.
World Gymnastics is the owner of the media rights in the Championships and licenses the official feed to us. World Gymnastics is not a controller of the personal data that we process on the Platform, and we do not transfer your personal data to it.
2. Purposes of processing: Why do we process personal data about you?
We process personal data for the following purposes:
- Operation of the Platform and account management: to create and maintain your Account, authenticate you when you log in, provide the features of the Platform and keep the Platform secure.
- Providing access to the Content: to identify you as a registered user, give you access to the Live Streams and other Content, manage simultaneous streams and devices, and send you service messages (for example registration confirmation and information about schedule changes).
- Geo-location and protection of broadcasting rights: to determine, on the basis of your IP address, the country or territory in which you are located when you use the Platform, so that we can show you only the Content that may be shown in your location under our licence from World Gymnastics (geo-blocking); and to detect and prevent the circumvention of geo-blocking (for example through VPN or proxy services), account sharing, fraud and the unauthorised recording or re-streaming of the Content.
- Customer service and complaint handling: to answer your questions, deal with technical issues, handle complaints, and keep the records required by consumer protection law.
- Analytics and website measurement: to understand how visitors use the Platform and how the streams perform (for example buffering and playback quality), so that we can improve our services. Non-essential cookies are used only with your consent (see our Cookie Policy).
- Marketing cookies: with your consent, to measure the effectiveness of our advertising campaigns and to show you relevant advertisements on other websites (see our Cookie Policy).
- Establishment, exercise or defence of legal claims: to protect our rights and those of our licensor in the event of a dispute or infringement.
We do not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you. The automated geo-location check described above only determines which Content is available in your current location.
We do not knowingly process special categories of personal data (such as health data) through the Platform.
3. Source and categories of personal data: What personal data do we process about you?
We collect personal data directly from you (when you register or contact us), automatically from your Device (when you use the Platform), and from our service providers (for example your name and email address from Google if you use Google login).
We process the following categories of personal data:
- Account data: name, email address, password (stored in encrypted/hashed form), language preference, country, Account settings, and, in case of Google login, the profile data received from Google (name, email address, user ID, language preference).
- Location data: your IP address and the country, region and city derived from it, and the result of the VPN/proxy check. We do not collect precise (GPS) location data.
- Device and technical data: device type, operating system, browser type and version, device identifiers, session identifiers, login timestamps, number of simultaneous streams and server log files.
- Viewing and analytical data: which streams you watch and for how long, playback quality and errors, interactions with the Platform, and the data collected by cookies as described in the Cookie Policy.
- Communication data: the content of your messages and complaints, and our replies.
Unless you are told otherwise, providing personal data is necessary for the purposes described above. If you do not provide the requested data (for example, if you do not allow us to determine your location), we may not be able to create your Account or provide the Content.
Children. The Platform is not directed at children under the age of 16. Persons under 16 may register only with the consent of their parent or legal guardian.
4. Legal basis of processing: What is the legal justification for processing your personal data?
We rely on the following legal bases when processing your personal data:
- your consent, pursuant to Article 6(1)(a) GDPR;
- the performance of a contract with you (the Terms of Use), or steps taken at your request before entering into a contract, pursuant to Article 6(1)(b) GDPR;
- compliance with our legal obligations, pursuant to Article 6(1)(c) GDPR, in particular under Hungarian Act CLV of 1997 on Consumer Protection; and
- our legitimate interests or those of a third party (in particular our licensor, World Gymnastics), pursuant to Article 6(1)(f) GDPR.
The table below summarises the purposes of processing, the categories of data, the legal bases and the retention periods:
| Purpose of processing | Categories of personal data | Legal basis | How long do we keep your data? |
|---|---|---|---|
| Operation of the Platform and account management | Account data Device and technical data | Contract (Art. 6(1)(b)) Legitimate interest in the security of the Platform (Art. 6(1)(f)) | Until you delete your Account; inactive Accounts are deleted two years after your last login. Server logs: 90 days. |
| Providing access to the Content | Account data Location data Device and technical data Viewing data | Contract (Art. 6(1)(b)) | Account data: until you close your Account. Viewing logs: 90 days. |
| Geo-location and protection of broadcasting rights (geo-blocking, VPN/proxy detection, account-sharing and anti-piracy measures) | Location data Device and technical data Account data Viewing data | Legitimate interest of NINOR and World Gymnastics in complying with the territorial licence and protecting the broadcasting rights (Art. 6(1)(f)) Contract (Art. 6(1)(b)) | Real-time location check: not stored beyond the session. Logs of access attempts and detected circumvention: 90 days in case of a breach, until the related claims are settled. |
| Customer service and complaint handling | Communication data Account data | Legal obligation for complaints (Art. 6(1)(c); Section 17/A of the Consumer Protection Act) Legitimate interest for other enquiries (Art. 6(1)(f)) | Complaints and our replies: 3 years. Other enquiries: 1 year after the enquiry is closed. |
| Analytics and website measurement | Analytical data Device and technical data | Consent for non-essential cookies (Art. 6(1)(a)) Legitimate interest for aggregated stream-quality monitoring (Art. 6(1)(f)) | Until consent is withdrawn, but no longer than the cookie lifetimes set out in the Cookie Policy (max. 24 months). |
| Marketing cookies | Device and technical data Analytical data | Consent (Art. 6(1)(a)) | Until consent is withdrawn, but no longer than the cookie lifetimes set out in the Cookie Policy. |
| Establishment, exercise or defence of legal claims | Any of the above, as necessary | Legitimate interest (Art. 6(1)(f)) | Until the end of the limitation period (generally 5 years) or the final conclusion of the proceedings. |
Where we rely on legitimate interests, we have carried out a balancing test to ensure that our interests are not overridden by your interests or fundamental rights and freedoms. You may request more information about these balancing tests by contacting us. As far as the purpose of the processing allows, we process data in pseudonymised or anonymised form.
Where processing is based on your consent, you may withdraw your consent at any time, for example via the cookie settings on the Platform, the unsubscribe link in our emails, or by writing to privacy@gymnastics.tv. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
5. Duration of storage: For how long do we retain personal data about you?
The retention periods are set out in the last column of the table in Section 4. We store personal data only for as long as necessary to achieve the purposes for which it was collected. In general:
- where processing is necessary for the establishment, exercise or defence of legal claims, we retain the data until the end of the general limitation period under the Hungarian Civil Code (5 years);
- where we rely on your consent, we process your data until you withdraw your consent or until the purpose ceases to exist; and
- where we rely on legitimate interests, we process your data for as long as the legitimate interest exists.
When the retention period expires, we delete or irreversibly anonymise the data.
6. Service providers and recipients: Who has access to your data?
Within NINOR, your personal data may be accessed only by authorised personnel on a need-to-know basis. We share personal data with the following categories of recipients:
- Our service providers (data processors), who process personal data on our behalf and under our instructions, on the basis of data processing agreements that comply with Article 28 GDPR:
- hosting and cloud infrastructure providers: Colocation America Corporation, USA (server), Cloudfare Inc., USA (DNS security, content delivery);
- video streaming, content delivery network (CDN) and video player providers: Mux Inc., USA (live streaming, video delivery and Mux player); jsDelivr / Prospect One, Poland (serves the player script); Google LLC, USA (chromecast casting only);
- geo-location and VPN/proxy detection provider: Cloudfare Inc., USA (country from IP address); no separate VPN/Proxy detection service is used;
- email delivery provider: [name, company];
- World Gymnastics: we do not share your personal data with World Gymnastics. We may provide World Gymnastics with aggregated, anonymous statistics (for example the number of viewers per country), as required by our licence. If we detect the illegal re-streaming of the Content, we may share the information necessary to stop the infringement with World Gymnastics, based on our and its legitimate interests.
- Professional advisers: lawyers, accountants and auditors, to the extent necessary.
- Authorities: courts, the tax authority, law enforcement and other public authorities, where required by law or necessary to protect our legal interests.
- Acquirers: in the event of a merger, acquisition or sale of all or part of our business, the acquirer, subject to appropriate confidentiality safeguards.
We do not sell your personal data.
7. International data transfers: Where are the recipients located?
Some of our service providers may be located, or may process data, outside the European Economic Area (“EEA”). Where the European Commission has issued an adequacy decision for the country concerned (for example, for transfers to US companies certified under the EU-US Data Privacy Framework), the transfer is based on Article 45 GDPR.
In all other cases, we transfer personal data only on the basis of appropriate safeguards, in particular the standard contractual clauses adopted by the European Commission (Article 46(2)(c) GDPR), supplemented where necessary by additional technical and organisational measures. You may request a copy of the relevant safeguards by contacting us.
If, exceptionally, neither an adequacy decision nor appropriate safeguards are available, we will transfer data only on the basis of a derogation under Article 49 GDPR, such as your explicit consent after having been informed of the possible risks.
8. Data security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, including encrypted connections (HTTPS), encrypted storage of passwords, access controls and regular backups. We require our service providers to apply equivalent measures.
9. Your rights: What rights do you have and how can you exercise them?
Where processing is based on your consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
You have the following rights in relation to our processing:
(a) Right of access: you may obtain confirmation of whether we process your personal data and, if so, access to the data and a copy of it.
(b) Right to rectification: you may request the correction of inaccurate data and the completion of incomplete data.
(c) Right to erasure (“right to be forgotten”): you may request the erasure of your personal data, unless we are required to keep it (for example, to handle a complaint) or need it for the establishment, exercise or defence of legal claims.
(d) Right to restriction of processing: you may request that we restrict the processing of your data, for example while we verify its accuracy.
(e) Right to data portability: you may receive the personal data you provided to us, based on consent or contract, in a structured, commonly used and machine-readable format, and transmit it to another controller.
(f) RIGHT TO OBJECT: YOU ARE ENTITLED TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON OUR LEGITIMATE INTERESTS. IN THIS CASE WE WILL NO LONGER PROCESS YOUR DATA FOR SUCH PURPOSES, UNLESS WE DEMONSTRATE COMPELLING LEGITIMATE GROUNDS OR THE PROCESSING IS NECESSARY FOR LEGAL CLAIMS. YOU MAY OBJECT TO DIRECT MARKETING AT ANY TIME. EXERCISING THIS RIGHT IS FREE OF CHARGE.
To exercise your rights, contact us at privacy@gymnastics.tv. We will respond without undue delay and in any event within one month of receiving your request; this period may be extended by two further months where necessary. We may ask you to verify your identity.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement. In Hungary, the competent authority is:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH): Hungarian National Authority for Data Protection and Freedom of Information
Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary; postal address: 1363 Budapest, Pf. 9.
Email: ugyfelszolgalat@naih.hu; website: www.naih.hu
You may also bring proceedings before the competent court. In Hungary, the regional court (törvényszék) has jurisdiction; at your choice, you may bring the action before the regional court of your place of residence or stay.
10. Contact
If you have any questions about this Privacy Notice or our processing of your personal data, please contact us at hello@worldgymnastics.org or by post at NINOR Kft., 1022 Budapest, Bimbó út 15., Hungary.
11. Updates to this notice
We regularly review this Privacy Notice and may update it to reflect changes in our practices, our services or legal requirements. If we make material changes, we will notify you by email or by a notice on the Platform before the changes take effect.
*