Cyber Race Privacy Notice

Who we are

The data controller for this Cyber Race activation is Evaluris Solutions Group, represented by Evaluris Solutions OÜ (Estonia).

What we collect

• First name, last name, and email address when you register.
• Your quiz answers, tier timings, and scores (to run the competition and build your awareness report).
• Confirmation that you are 16 or older (required to participate).
• If you donate: donation amount, currency, and Stripe payment metadata. Payment card details are handled entirely by Stripe and never touch Evaluris servers.

Why we collect it

• To run the Cyber Race competition and prevent duplicate entries.
• To display a first-name-only public leaderboard during and after the event.
• If you donate: to process and record scholarship donations.

Legal basis

Consent under Article 6(1)(a) GDPR. You can withdraw consent at any time by contacting us (withdrawal does not affect processing already carried out lawfully).

Age requirement

Participation requires confirmation that you are 16 years of age or older. We do not knowingly process Cyber Race registration data for children under 16.

How long we keep it

Race and leaderboard personal data are retained for 12 months after the event date, then deleted or anonymized. Donation records needed for accounting may be retained longer where required by law.

Your rights

You have the right to access, rectify, erase, restrict, and object to processing of your personal data, and to withdraw consent. To exercise these rights, email [email protected].

Processors

• Supabase: database hosting for registration, quiz, and leaderboard data.
• Stripe: payment processing for scholarship donations.
• Cloudflare Turnstile: bot protection on registration (challenge token only; no quiz answers).

Public leaderboard

The leaderboard shows first name, score, and time only. Last names and email addresses are never shown publicly.