AI BUILDER HACKATHON - PRIVACY POLICY
LAST UPDATED: 10.07.2026
1. INTRODUCTION
1.1. The company Victoria VR Group, a.s., ID No. 21924945, with registered office at Vaclavske namesti 796/42, Nove Mesto, 110 00 Prague 1, Czech Republic, registered in the Commercial Register maintained by the Municipal Court in Prague, file No. B 29030, under Czech law ("Controller", "Organizer", "Victoria VR", "Company", "we" or "us") organizes the AI Builder Hackathon ("Hackathon").1.2. This Privacy Policy explains how we process personal data of individuals who register for, access, participate in, submit a project to, communicate with us about, or otherwise take part in the Hackathon ("Participant" or "you").
1.3. Participation in the Hackathon is governed by the AI Builder Hackathon Terms and Conditions ("Terms").
1.4. The Hackathon is organized online and may use third-party platforms and tools, including registration platforms, Discord, GitHub, YouTube, hosting services, analytics tools, social media, payment providers and other online services.
2. PROCESSING OF PERSONAL DATA
2.1. If you register for or participate in the Hackathon, we become the controller of your personal data within the meaning of Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR").2.2. We process personal data in accordance with GDPR, Czech Act No. 110/2019 Coll., on personal data processing, and other applicable privacy laws.
2.3. We process personal data only where we have a valid legal basis, in particular performance of a contract, compliance with legal obligations, our legitimate interests, or consent where required.
2.4. Some third-party platforms used in connection with the Hackathon may process your personal data as independent controllers under their own privacy policies and terms.
3. DATA WE COLLECT - REGISTRATION AND IDENTITY DATA
3.1. We may process your name, surname, email address, country, age confirmation, date of birth if required, GitHub profile, Discord handle, username, team name, company or organization if provided, selected category, registration timestamp and confirmation of acceptance of the Terms.3.2. Purposes: registration, eligibility verification, age verification, communication, Hackathon administration and compliance.
3.3. Legal basis:
3.3.1. Art. 6(1)(b) GDPR - performance of a contract or steps prior to entering into a contract, in particular for processing data necessary to register you for the Hackathon, administer your participation, communicate with you and record your acceptance of the Terms (name, surname, email address, GitHub profile, Discord handle, username, team name, selected category, registration timestamp, confirmation of acceptance of the Terms).
3.3.2. Art. 6(1)(c) GDPR - compliance with legal obligations, where applicable, in particular where we are required to verify eligibility, age or compliance with applicable legal requirements (country, age confirmation, date of birth if required, and related verification information).
3.3.3. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular protecting the integrity, security and proper administration of the Hackathon, preventing fraud or misuse, handling compliance issues and maintaining records necessary to defend the Organizer's rights and legitimate interests (country, company or organization if provided, registration timestamp, confirmation of acceptance of the Terms, technical or communication records related to participation, and other data necessary for these purposes).
3.3.2. Art. 6(1)(c) GDPR - compliance with legal obligations, where applicable, in particular where we are required to verify eligibility, age or compliance with applicable legal requirements (country, age confirmation, date of birth if required, and related verification information).
3.3.3. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular protecting the integrity, security and proper administration of the Hackathon, preventing fraud or misuse, handling compliance issues and maintaining records necessary to defend the Organizer's rights and legitimate interests (country, company or organization if provided, registration timestamp, confirmation of acceptance of the Terms, technical or communication records related to participation, and other data necessary for these purposes).
4. DATA WE COLLECT - TEAM AND COMMUNICATION DATA
4.1. We may process team membership, team representative details, team confirmations, authority confirmations, team communications, emails, support messages, Discord messages and other Hackathon-related communications.4.2. Purposes: team administration, support, communication, dispute handling, verification of authority and Hackathon management.
4.3. Legal basis:
4.3.1. Art. 6(1)(b) GDPR - performance of a contract, in particular for processing data necessary to administer team participation, communicate with team members, verify the team representative's authority and manage Hackathon-related support (team membership, team representative details, team confirmations, authority confirmations, team communications, emails, support messages and other Hackathon-related communications).
4.3.2. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular ensuring proper Hackathon management, preventing misuse, documenting communications, verifying authority to submit projects or receive prizes, and protecting the Organizer's rights and legitimate interests (team membership, team representative details, authority confirmations, team communications, emails, support messages, Discord messages and other Hackathon-related communications).
4.3.2. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular ensuring proper Hackathon management, preventing misuse, documenting communications, verifying authority to submit projects or receive prizes, and protecting the Organizer's rights and legitimate interests (team membership, team representative details, authority confirmations, team communications, emails, support messages, Discord messages and other Hackathon-related communications).
5. DATA WE COLLECT - SUBMISSION AND PROJECT DATA
5.1. We may process project name, project description, public repository link, hosted demo link, demo video, screenshots, code references, technical documentation, selected focus category, submitted materials, metadata and other information included in or related to your submission.5.2. Purposes: receiving, reviewing, testing, judging, evaluating, documenting, publishing and promoting submissions, as well as technical, security and compliance review.
5.3. Legal basis:
5.3.1. Art. 6(1)(b) GDPR - performance of a contract, in particular for processing data necessary to receive, review, test, judge and evaluate your submission and administer your participation in the Hackathon (project name, project description, public repository link, hosted demo link, demo video, technical documentation, selected focus category, submitted materials and submission metadata).
5.3.2. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular documenting the Hackathon, protecting the integrity and security of the Hackathon, conducting technical, security and compliance review, preventing fraud or misuse, defending the Organizer's rights and promoting the Hackathon and related activities in a reasonable manner (project name, project description, repository link, hosted demo link, screenshots, code references, technical documentation, submitted materials, metadata and other information related to the submission).
5.3.3. Art. 6(1)(a) GDPR - consent, where required for specific publicity, marketing, testimonial, interview, image, voice, video or personality-rights uses that go beyond what is necessary for participation in the Hackathon or the Organizer's legitimate interests (demo video, screenshots, interviews, testimonials, statements, image, voice, likeness and other publicity materials, where applicable).
5.3.2. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular documenting the Hackathon, protecting the integrity and security of the Hackathon, conducting technical, security and compliance review, preventing fraud or misuse, defending the Organizer's rights and promoting the Hackathon and related activities in a reasonable manner (project name, project description, repository link, hosted demo link, screenshots, code references, technical documentation, submitted materials, metadata and other information related to the submission).
5.3.3. Art. 6(1)(a) GDPR - consent, where required for specific publicity, marketing, testimonial, interview, image, voice, video or personality-rights uses that go beyond what is necessary for participation in the Hackathon or the Organizer's legitimate interests (demo video, screenshots, interviews, testimonials, statements, image, voice, likeness and other publicity materials, where applicable).
6. DATA WE COLLECT - JUDGING, COMPLIANCE AND SECURITY DATA
6.1. We may process judges' notes, scores, rankings, comments, technical review, security review, compliance review, plagiarism checks, licence checks, repository history, evidence of ownership, authorship, licence, consent or attribution, misconduct reports, IP claims, dispute records, disqualification records, security logs and investigation materials.6.2. Purposes: judging, fraud prevention, security, misconduct investigation, IP claim handling, legal defence, protection of the Organizer and integrity of the Hackathon.
6.3. Legal basis:
6.3.1. Art. 6(1)(b) GDPR - performance of a contract, in particular for processing data necessary to judge, evaluate and administer submissions and determine winners under the Hackathon Terms (judges' notes, scores, rankings, comments, technical review, repository history and submission-related evaluation materials).
6.3.2. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular protecting the integrity, fairness and security of the Hackathon, preventing fraud, cheating and plagiarism, investigating misconduct, handling IP claims and disputes, verifying rights and licences, documenting decisions and defending the Organizer's rights and legitimate interests (technical review, security review, compliance review, plagiarism checks, licence checks, repository history, evidence of ownership, authorship, licence, consent or attribution, misconduct reports, IP claims, dispute records, disqualification records, security logs and investigation materials).
6.3.3. Art. 6(1)(c) GDPR - compliance with legal obligations, where applicable, in particular where processing is necessary to comply with applicable legal, regulatory, tax, accounting, security, reporting or dispute-related obligations (compliance review, IP claims, dispute records, disqualification records, security logs, investigation materials and related evidence, where legally required).
6.3.2. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular protecting the integrity, fairness and security of the Hackathon, preventing fraud, cheating and plagiarism, investigating misconduct, handling IP claims and disputes, verifying rights and licences, documenting decisions and defending the Organizer's rights and legitimate interests (technical review, security review, compliance review, plagiarism checks, licence checks, repository history, evidence of ownership, authorship, licence, consent or attribution, misconduct reports, IP claims, dispute records, disqualification records, security logs and investigation materials).
6.3.3. Art. 6(1)(c) GDPR - compliance with legal obligations, where applicable, in particular where processing is necessary to comply with applicable legal, regulatory, tax, accounting, security, reporting or dispute-related obligations (compliance review, IP claims, dispute records, disqualification records, security logs, investigation materials and related evidence, where legally required).
7. DATA WE COLLECT - WINNER, PRIZE, PAYMENT AND TAX DATA
7.1. If you are selected as a winner or potential winner, or if you are a member of a winning team entitled to receive a share of a prize, we may process your full legal name, date of birth or age confirmation, residential address, country of tax residence, tax identification number, tax residency certificate if requested, bank account or other payment details, preferred payment currency where relevant, identity verification document if requested, sanctions, export-control, payment or compliance information where required, prize amount, gross prize amount, withholding tax amount, net prize amount, exchange rate information where relevant, prize payment records, confirmation of prize payment or withholding tax, team prize allocation information and related communications.7.2. Purposes: winner verification, team prize allocation, prize payment, withholding tax administration, issuance of prize payment or withholding tax confirmation, tax, accounting, legal compliance, payment compliance, sanctions or export-control checks where required, and dispute handling.
7.3. Legal basis:
7.3.1. Art. 6(1)(b) GDPR - performance of a contract, in particular for processing data necessary to verify your winner status, communicate with you, arrange prize payment and administer prize-related obligations under the Hackathon Terms (full legal name, date of birth or age confirmation, residential address, bank account or other payment details, prize payment records and related communications).
7.3.2. Art. 6(1)(c) GDPR - compliance with legal obligations, in particular where processing is necessary for tax, accounting, payment, reporting, withholding tax, sanctions, export-control or other statutory compliance obligations applicable to the Organizer (full legal name, residential address, country of tax residence, tax identification number, tax residency certificate if requested, bank account or other payment details, identity verification document if requested, sanctions, export-control, payment or compliance information, prize amount, gross prize amount, withholding tax amount, net prize amount, exchange rate information, prize payment records, confirmation of prize payment or withholding tax and related communications).
7.3.3. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular verifying eligibility, preventing fraud or misuse, protecting the Organizer against payment, tax, sanctions, compliance or prize disputes, documenting prize decisions and defending the Organizer's rights and legitimate interests (date of birth or age confirmation, identity verification document if requested, sanctions or compliance information, prize payment records, winner verification records and related communications).
7.3.2. Art. 6(1)(c) GDPR - compliance with legal obligations, in particular where processing is necessary for tax, accounting, payment, reporting, withholding tax, sanctions, export-control or other statutory compliance obligations applicable to the Organizer (full legal name, residential address, country of tax residence, tax identification number, tax residency certificate if requested, bank account or other payment details, identity verification document if requested, sanctions, export-control, payment or compliance information, prize amount, gross prize amount, withholding tax amount, net prize amount, exchange rate information, prize payment records, confirmation of prize payment or withholding tax and related communications).
7.3.3. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular verifying eligibility, preventing fraud or misuse, protecting the Organizer against payment, tax, sanctions, compliance or prize disputes, documenting prize decisions and defending the Organizer's rights and legitimate interests (date of birth or age confirmation, identity verification document if requested, sanctions or compliance information, prize payment records, winner verification records and related communications).
8. DATA WE COLLECT - PUBLICITY, MARKETING AND COOPERATION DATA
8.1. We may process your name, username, GitHub profile, Discord handle, team name, project name, project description, repository link, demo link, demo video, screenshots, interviews, testimonials, statements, photos, videos and other submitted or Hackathon-related materials. We may also process contact details, project details, professional profile, GitHub profile, Discord handle, communication history and evaluation notes to contact you after the Hackathon about possible future cooperation.8.2. Purposes: publication of results, Hackathon documentation, marketing, promotion of the Hackathon, Victoria VR, AI Builder and related products or services, investor or business presentations, and contacting selected Participants about possible interviews, feedback, contractor relationships, employment opportunities, licensing, product integration, commercial cooperation, partnership discussions, investment discussions, acquisition discussions or other possible future engagement.
8.3. Legal basis:
8.3.1. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular documenting and promoting the Hackathon, publishing results, presenting selected submissions, promoting Victoria VR, AI Builder and related products or services, preparing investor or business presentations, identifying promising projects or Participants, and contacting selected Participants after the Hackathon about possible future cooperation or engagement (name, username, GitHub profile, Discord handle, team name, project name, project description, repository link, demo link, demo video, screenshots, submitted or Hackathon-related materials, contact details, project details, professional profile, communication history and evaluation notes).
8.3.2. Art. 6(1)(b) GDPR - performance of a contract or steps prior to entering into a contract, where a specific Participant requests, agrees to discuss, or enters into concrete negotiations regarding future cooperation, contractor relationship, employment opportunity, licensing, product integration, commercial cooperation, partnership, investment, acquisition or other engagement (contact details, professional profile, GitHub profile, Discord handle, communication history, evaluation notes, project details and information necessary for the relevant negotiations or proposed cooperation).
8.3.3. Art. 6(1)(a) GDPR - consent, where required by applicable law for specific publicity, marketing, image, voice, video, testimonial, interview, likeness, personality-rights or direct marketing uses that cannot be based on contract or legitimate interests (photos, videos, interviews, testimonials, statements, image, voice, likeness, demo video, screenshots and other publicity materials, where applicable).
8.3.2. Art. 6(1)(b) GDPR - performance of a contract or steps prior to entering into a contract, where a specific Participant requests, agrees to discuss, or enters into concrete negotiations regarding future cooperation, contractor relationship, employment opportunity, licensing, product integration, commercial cooperation, partnership, investment, acquisition or other engagement (contact details, professional profile, GitHub profile, Discord handle, communication history, evaluation notes, project details and information necessary for the relevant negotiations or proposed cooperation).
8.3.3. Art. 6(1)(a) GDPR - consent, where required by applicable law for specific publicity, marketing, image, voice, video, testimonial, interview, likeness, personality-rights or direct marketing uses that cannot be based on contract or legitimate interests (photos, videos, interviews, testimonials, statements, image, voice, likeness, demo video, screenshots and other publicity materials, where applicable).
9. DATA WE COLLECT - TECHNICAL, COOKIE AND ANALYTICS DATA
9.1. We may process IP address, device data, browser data, log data, cookies, analytics identifiers, referral sources, usage data, security logs, platform interaction data and similar technical information.9.2. Purposes: operation of the Hackathon website or platform, security, fraud prevention, technical support, analytics, service improvement, campaign measurement and marketing where applicable.
9.3. Legal basis:
9.3.1. Art. 6(1)(b) GDPR - performance of a contract, where processing is necessary to provide the Hackathon website, registration platform, submission tools or other online functionality requested by you and to enable your participation in the Hackathon (IP address, device data, browser data, log data, platform interaction data and similar technical information necessary for platform functionality).
9.3.2. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular ensuring website and platform security, preventing fraud, misuse or unauthorized access, troubleshooting technical issues, improving the Hackathon website, platform and user experience, measuring general campaign performance and protecting the Organizer's rights and legitimate interests (IP address, device data, browser data, log data, referral sources, usage data, security logs, platform interaction data, aggregated analytics data and similar technical information).
9.3.3. Art. 6(1)(a) GDPR - consent, where required for non-essential cookies, analytics cookies, advertising pixels, tracking technologies, remarketing, campaign measurement tools or similar technologies that are not strictly necessary for the operation of the Hackathon website or platform (cookies, analytics identifiers, advertising identifiers, referral sources, usage data, campaign measurement data and similar online tracking information, where applicable).
9.3.2. Art. 6(1)(f) GDPR - legitimate interests pursued by the Organizer, in particular ensuring website and platform security, preventing fraud, misuse or unauthorized access, troubleshooting technical issues, improving the Hackathon website, platform and user experience, measuring general campaign performance and protecting the Organizer's rights and legitimate interests (IP address, device data, browser data, log data, referral sources, usage data, security logs, platform interaction data, aggregated analytics data and similar technical information).
9.3.3. Art. 6(1)(a) GDPR - consent, where required for non-essential cookies, analytics cookies, advertising pixels, tracking technologies, remarketing, campaign measurement tools or similar technologies that are not strictly necessary for the operation of the Hackathon website or platform (cookies, analytics identifiers, advertising identifiers, referral sources, usage data, campaign measurement data and similar online tracking information, where applicable).
10. STORAGE TIME
10.1. We retain personal data only for as long as necessary for the purposes for which it was collected or for as long as required or permitted by applicable law.10.2. We retain personal data as follows:
10.2.1. Personal data processed for registration, participation, submission, judging, communication and Hackathon administration may be retained for the duration of the Hackathon and up to 4 years after its end for claims, disputes, support, audit and legal defence purposes, unless a longer period is justified.
10.2.2. Personal data processed for tax, accounting, prize payment, withholding tax, prize payment confirmations and legal compliance purposes is retained for the period required by applicable tax, accounting and legal regulations.
10.2.3. Publicity materials, published results and Hackathon documentation may be retained for as long as reasonably necessary for documentation, archival, legal, promotional, business and historical purposes, unless a shorter period is required by applicable law or unless a valid objection or withdrawal applies.
10.2.4. Personal data processed for security, fraud prevention, misconduct investigations, IP claims, legal claims or disputes may be retained for the duration of the relevant matter and applicable limitation periods.
10.2.5. Personal data processed for future cooperation may be retained for up to 3 years after the Hackathon or after the last meaningful interaction, unless you object earlier or a longer period is justified by ongoing discussions, negotiations, cooperation or legal requirements.
10.2.6. Personal data processed on the basis of consent is retained until consent is withdrawn or until the relevant purpose is fulfilled.
10.2.7. Cookie and analytics data is retained according to the relevant cookie settings, provider settings and applicable law.
10.2.2. Personal data processed for tax, accounting, prize payment, withholding tax, prize payment confirmations and legal compliance purposes is retained for the period required by applicable tax, accounting and legal regulations.
10.2.3. Publicity materials, published results and Hackathon documentation may be retained for as long as reasonably necessary for documentation, archival, legal, promotional, business and historical purposes, unless a shorter period is required by applicable law or unless a valid objection or withdrawal applies.
10.2.4. Personal data processed for security, fraud prevention, misconduct investigations, IP claims, legal claims or disputes may be retained for the duration of the relevant matter and applicable limitation periods.
10.2.5. Personal data processed for future cooperation may be retained for up to 3 years after the Hackathon or after the last meaningful interaction, unless you object earlier or a longer period is justified by ongoing discussions, negotiations, cooperation or legal requirements.
10.2.6. Personal data processed on the basis of consent is retained until consent is withdrawn or until the relevant purpose is fulfilled.
10.2.7. Cookie and analytics data is retained according to the relevant cookie settings, provider settings and applicable law.
11. PROCESSORS, INTERNATIONAL DATA TRANSFERS AND INFORMATION SHARING
11.1. We may engage third-party service providers to process personal data on our behalf in accordance with Article 28 GDPR and subject to appropriate contractual safeguards.11.2. Such providers may include hosting and cloud providers, registration platforms, email and communication providers, analytics providers, marketing providers, advertising providers, IT and cybersecurity providers, payment providers, tax and accounting providers, legal and compliance advisors, customer support tools and other technical or operational service providers.
11.3. We may share personal data with our affiliates, officers, employees, contractors, judges, advisors, mentors, reviewers, legal advisors, tax advisors, accounting advisors, marketing agencies, PR providers, payment providers, banks and other recipients where necessary for the purposes described in this Privacy Policy.
11.4. We may share personal data with GitHub, Discord, YouTube, social media platforms, hackathon platforms, hosting providers, payment providers and other third-party platforms used in connection with the Hackathon.
11.5. We may disclose personal data publicly where Hackathon results, submissions, project materials, interviews, testimonials, statements or publicity materials are published in accordance with the Terms and this Privacy Policy.
11.6. We may share personal data with public authorities, courts, regulators, law enforcement authorities or affected third parties where required by law or where reasonably necessary to protect our rights, security, legal position, reputation, Participants, third parties or the integrity of the Hackathon.
11.7. The Hackathon is international. Personal data may be transferred outside the European Union or European Economic Area, including to the United States.
11.8. Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards where required by GDPR, including adequacy decisions, Standard Contractual Clauses approved by the European Commission, the EU-U.S. Data Privacy Framework for certified U.S. recipients where applicable, or other lawful transfer mechanisms.
11.9. Certain third-party platforms may act as independent controllers and process personal data under their own privacy policies and terms.
12. AUTOMATED DECISION-MAKING
12.1. We may use automated tools to support technical review, security checks, fraud prevention, plagiarism checks, IP checks, analytics, platform administration or operational efficiency.12.2. We do not intend to make decisions based solely on automated processing that would produce legal or similarly significant effects within the meaning of Article 22 GDPR.
12.3. Judging and winner selection are not intended to be carried out solely by automated systems and may involve judges and/or Organizer representatives.
13. YOUR RIGHTS
13.1. In particular, you have the following rights in relation to your personal data:
13.1.1. Right of access - you may ask us whether we process your personal data and request information about such processing.
13.1.2. Right to rectification - you may ask us to correct inaccurate or incomplete personal data.
13.1.3. Right to erasure - you may ask us to delete your personal data in cases provided by GDPR.
13.1.4. Right to restriction of processing - you may ask us to restrict processing in cases provided by GDPR.
13.1.5. Right to data portability - you may ask us to provide or transfer certain personal data in a structured, commonly used and machine-readable format.
13.1.6. Right to withdraw consent - where processing is based on consent, you may withdraw consent at any time.
13.1.7. Right to object - where processing is based on legitimate interest, you may object to such processing at any time.
13.1.8. Right to object to direct marketing - you may object to direct marketing at any time.
13.1.9. Right to lodge a complaint - you may lodge a complaint with the Office for Personal Data Protection of the Czech Republic, Urad pro ochranu osobnich udaju, or another competent supervisory authority.
13.1.2. Right to rectification - you may ask us to correct inaccurate or incomplete personal data.
13.1.3. Right to erasure - you may ask us to delete your personal data in cases provided by GDPR.
13.1.4. Right to restriction of processing - you may ask us to restrict processing in cases provided by GDPR.
13.1.5. Right to data portability - you may ask us to provide or transfer certain personal data in a structured, commonly used and machine-readable format.
13.1.6. Right to withdraw consent - where processing is based on consent, you may withdraw consent at any time.
13.1.7. Right to object - where processing is based on legitimate interest, you may object to such processing at any time.
13.1.8. Right to object to direct marketing - you may object to direct marketing at any time.
13.1.9. Right to lodge a complaint - you may lodge a complaint with the Office for Personal Data Protection of the Czech Republic, Urad pro ochranu osobnich udaju, or another competent supervisory authority.
14. CONTACT
14.1. If you want to contact us regarding the processing of personal data or exercise your privacy rights, you may use the following contact details:14.2. Victoria VR Group, a.s.
14.3. Email:
14.4. Address: Vaclavske namesti 796/42, Nove Mesto, 110 00 Prague 1, Czech Republic
15. OTHER AND FINAL PROVISIONS
15.1. If you refuse to provide personal data necessary for registration, eligibility verification, submission, judging, communication, prize administration, tax, payment or compliance purposes, we may not be able to register you, allow your participation, judge your submission, communicate with you or pay a prize.15.2. The Hackathon is open only to individuals who are at least 18 years old. We do not knowingly collect personal data from minors for Hackathon participation. If we determine or reasonably suspect that a Participant is under 18, we may refuse registration, delete relevant data, disqualify the Participant or take other appropriate measures, subject to applicable law.
15.3. Third-party platforms used in connection with the Hackathon may have their own privacy policies and data practices. We encourage you to review those policies before using such platforms.
15.4. We may update this Privacy Policy from time to time, including for legal, technical, operational, security, business or compliance reasons.
15.5. Updated versions will be made available through the Official Hackathon Page, registration platform or other official Hackathon communication channels.
16. U.S. PRIVACY ADDENDUM
16.1. This section applies to Participants located in the United States where applicable under U.S. federal or state privacy laws.16.2. We collect and use personal information as described in Section 3 for the purposes set out in Sections 3 to 5, including Hackathon registration, participation, communication, submission review, judging, publicity, marketing, prize administration, payment, tax, compliance, security, fraud prevention, dispute handling and possible future cooperation.
16.3. Depending on your interaction with the Hackathon, we may collect identifiers, contact information, internet or electronic network activity information, professional or cooperation-related information, commercial or transaction information, audio, visual or similar information, inferences and sensitive personal information where applicable.
16.4. Sensitive personal information may include tax identification numbers, payment details, identity verification documents or similar information where required for winner verification, payment, tax, accounting, compliance or legal purposes.
16.5. We do not use or disclose sensitive personal information to infer characteristics about you.
16.6. We do not sell your personal information for monetary consideration. If we use advertising or analytics tools that may constitute "sharing" of personal information, targeted advertising or cross-context behavioral advertising under applicable U.S. state privacy laws, we will provide the required notice and opt-out or consent mechanism where required.
16.7. Depending on your state of residence, you may have the right to request access to or a copy of your personal information, request deletion, request correction of inaccurate personal information, opt out of sale, sharing or targeted advertising where applicable, request information about how we collect, use and disclose personal information, and not be discriminated against for exercising your privacy rights.
16.8. The Hackathon is limited to Participants aged 18 or older and is not directed to children under 13. We do not knowingly collect personal information online from children under 13. If we become aware that we have collected such information, we will take appropriate steps to delete it, subject to applicable legal obligations.
16.9. If we send commercial emails to U.S. recipients, you may opt out of future marketing emails by using the unsubscribe mechanism in the email or by contacting us. You may still receive operational, legal, security, prize, payment, compliance or Hackathon-related messages where necessary.
16.10. To exercise applicable U.S. privacy rights, contact us at: