Privacy Notice

Privacy Notice

Last updated: 16 March 2026

World Triathlon is committed to protecting the privacy and personal data of athletes, National Federations, Event participants, partners and visitors who interact with our digital platforms.

This Privacy Notice explains how World Triathlon collects, uses, stores and protects personal data when you interact with our websites, services and digital platforms. While processing your personal data, World Triathlon commits to store and process that data in a fair, lawful, secure and transparent way. Throughout this Notice, the term “Personal data” means information relating to an identified or identifiable individual, e.g., name, address, telephone number etc.

1. Data Controller

World Triathlon acts as the data controller for personal data processed through its digital services unless otherwise stated.

World Triathlon
Maison du Sport International
Av. de Rhodanie 54
1007 Lausanne
Switzerland

Questions regarding this Privacy Notice may be sent to: webmaster@triathlon.org

2. Scope of This Privacy Notice

This Privacy Notice applies to personal data processed through digital services operated by World Triathlon, including:

  • triathlon.org
  • accounts.triathlon.org
  • education.triathlon.org
  • TriathlonLive
  • federation administration services
  • other digital platforms operated by World Triathlon

Some services may publish additional privacy information where service-specific data processing activities occur that differ from those described in this notice.

3. Information We Collect

World Triathlon may collect personal information when users interact with our digital services, create user accounts, participate in event or education programmes, or communicate with us.

The personal data collected may include:

Identity Information

  • name
  • email address
  • nationality
  • athlete identification information

Contact Information

  • phone number
  • federation affiliation
  • organisational role

Account Information

  • login credentials
  • authentication identifiers
  • account identifiers

Usage Information

  • IP address
  • device information
  • browser information
  • service usage data

Communications Data

  • communication preferences
  • email engagement data
  • survey responses
  • newsletter subscription

Participation Information

  • competition entries
  • education or certification records
  • licensing or compliance records

Payment & Subscription (TriathlonLive)

  • subscription status
  • billing records

4. How Personal Data is Collected

Personal data is collected directly from individuals when they create user accounts, register for events or services, complete surveys, subscribe to communications or contact World Triathlon.

In the context of sport governance, personal data may also be provided by national federations or event organisers responsible for registering athletes, officials or participants in competitions and education programmes.

Certain technical data is collected automatically when individuals access our digital platform through cookies and similar technologies. These technologies help maintain secure sessions, analyse usage patterns, and improve the functionality of our website.

5. How World Triathlon Looks After Your Data

When dealing with your data, World Triathlon processes it lawfully, fairly and transparently.

We keep all personal data confidential and protected.

World Triathlon processes personal data only where there is a valid legal basis for doing so. We determine the legal grounds based on the purpose for which we have collected and used your personal data. In every case, the legal basis will be one of the following:

  • Performance of a Contract: where personal data is required to deliver services such as competition entry, digital platforms or education services. For example, where you have purchased a subscription from us and we need to use your contact details and payment information in order to process your order and deliver your subscription.
  • Legitimate Interests: where it is necessary to operate and improve World Triathlon’s digital services and communications.
  • Consent: for example, where you have provided your consent to receive marketing communication from us. You can withdraw your consent at any time.
  • Legal Obligations: where World Triathlon may need to comply with regulatory, governance or sporting requirements.

7. Use of Personal Data

World Triathlon may process personal data for the following purposes:

Sport Governance and Administration

  • managing athlete and federation records
  • administering competitions and licensing
  • supporting federation governance

Service Delivery

  • operating digital platforms
  • providing access to educational services
  • managing user accounts

Communications & Marketing

  • sending operational communications to athletes and National Federations
  • responding to enquiries
  • newsletters, event promotions and other engagement activities

Platform Security

  • detecting misuse or security incidents
  • protecting the integrity of digital services

Service Improvement

  • analysing engagement and usage patterns
  • improving digital services and platforms

8. Email Communications

World Triathlon sends different types of email communications.

Operational Communications

Certain communications relating to governance, federation administration, competitions or compliance may be sent regardless of marketing preferences.

Marketing Communications

Marketing communications may include newsletters, updates and promotional material.

These communications are sent where individuals have provided consent or where permitted by applicable law.

Marketing emails include an unsubscribe option.

9. World Triathlon Account System (Single Sign-On)

World Triathlon operates a unified authentication system through accounts.triathlon.org.

This system allows users to access multiple services using a single account, including:

  • triathlon.org services
  • the World Triathlon Education Hub
  • TriathlonLive
  • federation services

Authentication infrastructure is powered by secure identity services.

Login methods may include:

  • email authentication
  • Google sign-in
  • Apple sign-in

Secure authentication protocols and encryption are used to protect login processes.

10. Sharing Personal Data

World Triathlon may share personal data with trusted third-party service providers supporting the operation of its services.

These may include providers responsible for:

  • cloud hosting infrastructure
  • identity and authentication systems
  • customer relationship management platforms
  • communications platforms
  • analytics services
  • payment processing services
  • video streaming and content delivery services

Examples of platforms used by World Triathlon include infrastructure services, Zoho communications systems, Google Analytics and Zoho Analytics tools, Stripe payment services and video delivery platforms.

In certain circumstances, personal data may also be shared with National Federations, event organisers, or partners where this is necessary to administer competition, manage participation in events, or support sport governance activities.

These providers process personal data only on behalf of World Triathlon and are required to do so in accordance with contractual safeguards and applicable data protection laws.

11. International Data Transfers

World Triathlon operates globally, so personal data may be processed in countries outside an individual’s country of residence.

Where such transfers occur, World Triathlon ensures that appropriate safeguards are in place to protect personal data. These safeguards may include contractual data protection clauses or other legally recognised mechanisms designed to ensure an adequate level of protection.

12. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes described in this Privacy Notice.

Retention periods may depend on:

  • active user accounts
  • competition administration requirements
  • maintaining historical sport records
  • legal or regulatory obligations

Please note that data may be retained for longer periods solely for statistical purposes, and World Triathlon shall use anonymous data wherever possible.

When information is no longer required, it will be securely deleted or anonymised.

13. Children and Youth Athletes

Some World Triathlon services involve youth athletes and minors.

Personal data relating to minors may be provided by parents, guardians or National Federations responsible for athlete registration. Where required by applicable laws, parental consent may be required for certain digital services.

World Triathlon takes particular care when processing personal data relating to minors.

14. Cookies and Tracking Technologies

World Triathlon websites use cookies and similar technologies to:

  • maintain secure login sessions
  • analyse website usage
  • improve website performance
  • enhance user experience

Analytics tools may include Google Analytics, Zoho Analytics and analytics tools used within the World Triathlon digital platform.

Users may manage cookie preferences through their browser settings.

Further information is available in the World Triathlon Cookie Policy.

15. Security

World Triathlon implements technical and organisational measures designed to protect personal data from unauthorised access, misuse or loss.

These measures may include secure authentication systems, restricted access to personal data, monitoring digital infrastructure, and other security practices designed to safeguard information.

Despite these measures, no system can guarantee absolute security.

Security concerns may be reported to:

webmaster@triathlon.org

16. Your Rights

As a data subject, World Triathlon processes personal data in accordance with the legal bases described in this Privacy Notice. You have the following rights under the GDPR and other applicable data protection laws. Users may have the right to:

  • access personal data: request a copy of your personal data
  • rectification: correct inaccurate information
  • deletion: request deletion of personal data
  • restriction: limit certain processing activities
  • objection: object to certain uses of personal data
  • data portability: request transfer of data
  • withdraw consent: withdraw consent at any time

Where processing is based on consent, individuals have the right to withdraw that consent at any time. Individuals also have the right to lodge a complaint with a competent data protection authority if they believe their personal data has been processed unlawfully.

If you want to access one of your rights, submit a request to: webmaster@triathlon.org

World Triathlon websites may contain links to external services such as social media services or partner websites. These services operate independently and have their own privacy notices.

World Triathlon is not responsible for the privacy practices of external websites.

18. Changes to This Privacy Notice

World Triathlon may update this Privacy Notice from time to time.

The latest version will always be published on the World Triathlon website.