PRIVACY NOTICE

1. About us

This site is operated by Young Scientist & Technology Exhibition CLG, a company incorporated under the laws of Ireland under company number 370330 and having its registered address at No.2 Grand Canal Plaza, Grand Canal Street Upper, Dublin 4, D04 V586 (“we”, “our” or “us”).

1. Who does this notice apply to?

This notice applies to individuals (who may be children, parents, teachers or members of the general public) who access, browse and use our site and create accounts on our website to enter the Stripe Young Scientist and Technology Exhibition (the “Exhibition”) and/or to view the content we provide on our website. The aim of this notice is to give you information on how we collect and process your personal data through your use of the website. The Exhibition is an event for second level students and therefore our website is targeted towards children and we may collect and obtain personal data relating to both children and adults.

1. Types of personal data we collect and use

‘Personal data’ means information about you from which you can be identified.  The personal data we collect about you depends on how you use our website. We may collect different types of personal data if you register with us as a student, teacher/parent or use our website to purchase tickets for the exhibition. We can only use your personal data if we have a legal reason to do so and the legal reasons we rely on are detailed in Section 5 below.

• Students

When you sign up to enter the Exhibition we will collect certain information about you to create your profile as an entrant or participant.

• Identity and Contact Data
  • Your first and last name
  • How old you are and when you were born
  • Whether you are a boy, a girl or if you prefer not to say
  • Your address and home or mobile phone number
  • The name of your school and the county it is in
• Account Data

• • Where you register to enter the Exhibition you / your parent or guardian will create an account for you to access your details. This account information includes a username and password and that is your personal data.

• Image Data

• • We may post videos of the Exhibition on our website which can include videos showing you attending and/or participating at the Exhibition as part of our highlights library. This is your personal data.
• Technical Data
  • The internet protocol (IP) address of the device you are on when you visit our website
  • Information about the search engine you use to find our website, details of the location information and time zone on your computer, tablet or phone when you visit our website. This is your personal data.
• Usage Data
  • Information about how you use our website such as what you search for on the website, page response times, download errors, length of visits and page interaction information (such as scrolling, clicks and mouse-overs) is your personal data.

• Teachers, Parents/Guardians and Website Users over 18 years

• Identity and Contact Data includes your name, postal address, email address, gender, details of where you teach and any personal data provided when communicating with us.
• Account Data includes your user account details.
• Transaction Data includes bank account, debit and/or credit card details about payments made by you to purchase tickets.
• Technical Data may include internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access our website.
• Usage Data includes information about how you use the website such as the services you view or search for, page response times, download errors, length of visits and page interaction information (such as scrolling, clicks and mouse-overs).
• Image Data includes your personal data on videos and photographs taken of you at the Exhibition and posted on our website.
• Marketing Data including your Identity and Contact Data, Profile Data, your interests and preferences in receiving electronic marketing communications from us and your communication preferences.
• Communications Data including your interactions with us.

1. How we receive your personal data

We may receive your personal data through various sources including:

• Direct interactions: Such as your Identity and Contact Data, Account Data, Transaction Data (where you are over 18), and Communications Data by creating and managing your user account, purchasing tickets for the Exhibition and selecting how you prefer to communicate with us by phone, email  or other means.
• Automated technologies or interactions: As you interact with our website, we collect Technical Data and Usage Data. We collect this information by using cookies and other similar technologies.
• Third-party sources: We may receive personal data about you from third parties, such as:
  • Identity and Contact Data via your school, teacher or parents / guardians where you are a student creating an account for the Exhibition or via your student(s) who are entering the Exhibition where you are a teacher; and
  • Identity and Contact Data and Transaction Data from any payments you make via our website.

1. The legal reasons why we use your personal data

When we use any of your personal data we need to have a legal reason for using it. There are a number of legal reasons available to use your personal data which are listed below. The table in this section of the notice also identifies the specific legal reason we rely on for using your personal data for specific purposes.

• Where you (or your parent / guardian on your behalf) have told us that you agree to our collecting and using your personal data (Consent).
• Where using your personal data is necessary for our or a third party’s legitimate interests such as managing and administering the Exhibition (Legitimate Interests).
• Where if you are over 18 years old we need to use your personal data to carry out a contract with you such as authorising the payment of any tickets you purchase from us via our website (Contractual Necessity).
• Where collecting and using your personal data is necessary for compliance with other legal obligations that we are required to comply with (Legal Obligation).

We have set out below a description of the ways we typically process your personal data and the legal reasons we rely on to do so.

Purpose / Activity	Type of Data	Legal Grounds
To allow you to register for the Exhibition	Identity and Contact Data Accounts Data Technical Data Usage Data Communications Data	Necessary for our legitimate interests of properly administering registration for the Exhibition.
Where you are over 18 to facilitate your purchase of tickets for the Exhibition, to acknowledge payments from you, provide refunds and to keep a record of payments and transactions with us.	Identity and Contact Data Transaction Data	Necessary for the performance of a contract with you. Necessary for our legitimate interests of running our business and keeping records.
To administer and protect the website and data hosted on or made available through the website including implementing and monitoring security measures, data and usage analysis, hosting of data.	Identity and Contact Data Account  Data Transaction Data Technical Data Usage Data Communications Data	Necessary for the performance of a contract with you. Necessary to comply with a legal obligation. Necessary for our legitimate interests for running the Exhibition website effectively and to protect our network security.
To use information obtained through our use of cookies and similar technologies that monitor usage and measure performance and optimise our online assets. We do this in order to improve our website services, improve user interactions, relationships and experiences.	Technical Data Usage Data	Necessary for our legitimate interests to keep our website updated and relevant to the Exhibition.
To promote the Exhibition on the website and show highlights from our events	Identity and Contact Data Image Data	Necessary for our legitimate interests to promote the Exhibition on the website, our partners’ websites, press coverage and social media.
[To allow you to register for our mailing lists; send you news; manage your preferences in receiving these; deliver relevant content and ads to you on our website and third party websites and to measure and understand the effectiveness of this.	Identity and Contact Data Marketing Data	Your Consent Necessary for our legitimate interests to develop and improve our services, to grow our business, to inform our marketing and business strategy and output and to conduct direct marketing and advertising.]

1. Who we share your personal data with

We may share your personal data with our partners involved in the Exhibition including our title sponsor, Stripe Technology Company Limited for the purposes of managing communications connected with the Exhibition. We may also share your personal data with the Exhibition’s other sponsors, judges and partners that provide products and services for the Exhibition.

We require all our parties to whom we disclose personal data to respect the security of personal data and to treat it in accordance with the law. If we engage a service provider as a processor, they are not permitted to use it for their own purposes (including their own marketing purposes).

1. Transfers of your personal data to other countries

If it becomes necessary for us to process or transfer your personal data outside of the European Economic Area (EEA) and the UK for the purposes described in this privacy notice we will comply with applicable data protection law when doing so, such as by ensuring that the country or territory where your personal data will be processed is deemed by the European Commission to have an adequate level of protection for personal data (which includes the UK). If we need to transfer your personal data to a third country that does not have an adequacy decision by the European Commission, which means the country or territory is not deemed to provide an adequate level of protection for your personal data, we will do so in accordance with data protection laws and ensure there are appropriate security measures in place.

1. Keeping your personal data secure

We have appropriate security measures in place intended to prevent personal data from being accidentally lost or used or accessed in an unauthorised way. We limit access to your personal data to those who have a need to access it, including our personnel and the persons we have identified in section 6 above. They are required to use your personal data in a secure manner and we have appropriate confidentiality processes in place. Those processing your personal data on our behalf will do so only in an authorised manner and are subject to obligations of confidentiality. You recognise that no entity can keep data fully secure. If you have reason to believe that any of your personal data is no longer secure, please tell us immediately by contacting us using the information provided in the Contact us section below.

1. How long we keep your personal data for

• If you are a Student / Teacher with an unsuccessful application, we will keep your personal data for a six month period following the official closing date of entries for the Exhibition each year to allow for any queries.
• If you are a Student / Teacher that is an exhibitor or finalists, we may keep your personal data for up to ten years as part of our alumni. You may at any time request that we delete your personal data by contacting us at the Contact Details at section 14 of this notice.
• If you are a website user and /or purchase tickets to the Exhibition via our website we retain your personal data for the period permitted by law for the purposes of your communications and/or transactions with us.

1. Your legal rights

You have the following legal rights in relation to how we use your personal data.

• Access. You, or your parents/ guardians where you are under 18 years old, have the right to request a copy of the personal data we hold about you.
• Correction. You, or your parents/guardians where you are under 18 years old can request us to correct any incomplete or inaccurate personal data we hold about you.   
• Erasure. This enables you, or your parents/guardians where you are under 18 years old, to ask us to delete or remove personal data where there is no good reason for us continuing to have it. You and your parents also have the right to ask us to delete or your personal data where you have exercised your right to object to processing (see below). We may not always be able to comply with your request of erasure for specific legal reasons. We will inform you of these if they arise in relation to an erasure request you submit to us.
• Object. You, or your parents/guardians where you are under 18 years old may object to our use of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation that you consider this impacts on your fundamental rights and freedoms. In some cases, we may demonstrate that we have compelling legitimate grounds to process your personal data which override your rights and freedoms.
• Restriction. You, or your parents/legal guardians where you are under 18 years old can ask us to suspend the processing of your personal data in the following scenarios: (i) if you want us to establish its accuracy; (ii) where you consider our use of the personal data is unlawful but you do not want us to erase it; (iii) where you need us to hold the personal data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (iv) you have objected to our use of your personal data but we need to verify whether we have overriding legitimate grounds to use it.
• Data portability. You, or your parents/legal guardians where you are under 18 years old can ask us to provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. This right only applies to automated information which you initially provided consent for us to process or where we processed the personal data to perform a contract with you.
• Withdraw consent. If you provided your consent to the processing of your personal data for a specific purpose, you, or your parents/legal guardians where you are under 18 years old, have the right to withdraw your consent for that specific processing at any time. Once we have received notification that consent is withdrawn, we will take steps to ensure we no longer process your personal data for the purpose(s) originally agreed to, unless we have another legitimate basis for doing so in law. Withdrawal of consent will not affect the lawfulness of processing based on consent before withdrawal.

Exercising your rights: In order to exercise one or more of your rights in respect of your personal data, please contact us in writing using the Contact us details below.

Complaints: You or your parents have the right to make a complaint at any time to the supervisory authority in your country, which in Ireland is the Data Protection Commission (DPC) (https://dataprotection.ie/).  We would appreciate the chance to deal with your concerns before you contact the DPC and ask that you contact us in the first instance.

1. Updating your personal data

It is important that the personal data we hold about you is accurate and current. Please keep us informed, using your user account settings page, if any of your personal data changes during your relationship with us. You can also contact us using the Contact us details below to update your personal data.

1. Changes to this Notice

We will change this privacy notice from time to time and any changes will be contained in a revised privacy notice posted on our website.

1. Third party links

The website may include links to third party websites and applications. Clicking on those links or enabling those connections may allow third parties to collect or share information about you. We don’t control these third-party websites and applications, and we are not responsible for their privacy notices. When you leave our website, we encourage you to read the privacy notices of every website and application you visit.

1. Contact us

If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us by email at [●].