1. Controller

The data controller for the personal data collected in relation to the SIDUS AI Online Hackathon (the "Hackathon") is SIDUS AI ("we," "us," "our," or the "Organizer").

2. Data We Collect and Why (Purpose and Legal Basis)

2.1. We collect and process minimal personal data solely for the purpose of administering the Hackathon. The table below summarizes this information.

2.2. We do not collect any other personal data such as your real name, address, or payment details unless you are selected as a winner, at which point we will collect only the data strictly necessary for prize fulfillment (e.g., for tax forms) with your explicit consent.

3. How We Use Your Data

3.1. Your personal data will be used exclusively for:

• Registering you for the Hackathon.
• Sending you communications related to the Hackathon (general announcements via Telegram, specific notifications via email).
• Judging submissions and selecting winners.
• Verifying eligibility and contacting potential winners. Fulfilling prizes.

3.2. We explicitly state that we will not use your personal data for marketing purposes unrelated to this Hackathon, and we will not commercialize, sell, or rent your data to any third parties.

4. Data Sharing and International Transfers

4.1. Sharing: We will not share your personal data with third parties, except as necessary for the Hackathon's operation. This includes:

4.2. Judges and Administrators: Key team members involved in judging and administration will have access to submission information, which may be linked to your Telegram username.

4.3. Service Providers: We may use secure third-party services for communication (Telegram) and email delivery. These providers are obligated to handle your data securely and in accordance with this policy.

4.4. Legal Obligations: We may disclose your data if required by law or to protect our rights.

4.5. International Transfers: As an online hackathon with global participants, your data may be processed outside your country of residence, including in countries that may not have the same data protection laws. We will ensure that appropriate safeguards are in place, such as relying on the European Commission's adequacy decisions or using standard contractual clauses, to protect your data.

5. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Specifically:

• We will delete Telegram usernames and email addresses of non-winners shortly after the Hackathon concludes and all prizes have been successfully awarded.
• Data from winners may be retained for a longer period as necessary for prize fulfillment, tax reporting, and legal compliance, but no longer than required by law.

6. Your Data Subject Rights (Under GDPR)

6.1. As a data subject under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request that we correct any inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): You can request that we delete your personal data.
• Right to Restriction of Processing: You can request that we temporarily or permanently stop processing all or some of your personal data.
• Right to Data Portability: You can request a structured, machine-readable copy of your data you provided.
• Right to Object: You can object to our processing of your personal data.

6.2. To exercise any of these rights, please contact us using the details in Section 11. We will respond to your request within one month.

7. Withdrawal of Consent

Where processing is based on your consent (e.g., for marketing, which we do not do for this Hackathon), you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

8. Data Security

We implement appropriate technical and organisational measures to protect the security of your personal data and prevent unauthorized access, disclosure, alteration, or destruction.

9. Indemnification

You agree to indemnify, defend, and hold harmless SIDUS AI, its affiliates, and their respective directors, officers, employees, and agents from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising from or related to:

• your breach of this Privacy Policy;
• your violation of any applicable data protection laws or third-party rights in relation to your participation in the Hackathon; or
• any unauthorised use of the personal data of other participants by you or through your account.

10. Governing Law and Jurisdiction

This Privacy Policy and any disputes or claims arising out of or in connection with it shall be governed by and construed in accordance with the laws of Queensland, Australia.

You agree that the courts of Queensland, Australia, shall have exclusive jurisdiction to settle any such dispute or claim.

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or wish to lodge a complaint, please contact us via the official Hackathon Telegram channel.

By participating in the SIDUS AI Hackathon, you acknowledge that you have read and understood this Privacy Policy.