(Personal Data / Privacy Notice for Event Participants)
Version: 1.0
Effective Date: [INSERT DATE]
Event Name: [INSERT EVENT NAME]
Organizer (Legal Name): [INSERT LEGAL NAME / INDIVIDUAL NAME]
Organizer Legal Form / Registration: [Corporation / LLC / Sole Proprietor / Other]
Jurisdiction of Organization: [State/Province, Country]
Registered Address: [INSERT ADDRESS]
Privacy Contact Email: [INSERT EMAIL]
Platform: The Event is conducted using the digital platform Vanguard and the navigation module Pathfinder, operated by Vanguard Creative Platforms Inc. (“Vanguard”, “Platform”).
---
This Organizer Event Privacy Policy (the “Policy”) explains how the Organizer collects, uses, shares, stores, and protects personal information / personal data of individuals wh* r*gister for, participate in, or submit materials to the Event (each, a “Participant”).
This Policy applies to personal data processed by the Organizer in connection with the Event, including data that may be provided:
* directly by the Participant; and/or
* through the Vanguard Platform, where the Participant submits information and materials via the Platform.
This Policy does not replace Vanguard’s platform-level privacy notice(s). Vanguard remains responsible for the processing it performs as the operator of the Platform.
---
The Platform (Vanguard/Pathfinder) helps run the Event.
But the Organizer decides why and how Participant data is used for the Event (judging, results, prizes, recruiting, etc.).
That means the Organizer is responsible for the Organizer’s part of the data handling.
---
For personal data processed for the purposes of conducting the Event, the Organizer acts as an independent data controller (or equivalent role under applicable law), meaning the Organizer determines the purposes and means of processing Participant personal data for the Event.
Vanguard Creative Platforms Inc. operates the Vanguard Platform and Pathfinder module and processes personal data for platform functionality (account management, security, infrastructure logs, service operations, and related platform features) in accordance with Vanguard’s own terms and privacy disclosures.
Where the Platform provides the Organizer access to Participant data (for example, registration details, submissions, scoring interfaces, or communications tools), such access and disclosure occurs as part of the Participant’s participation and instructions (e.g., submitting a registration or work for the Event).
The Platform may record technical evidence of acceptance and submission actions (e.g., timestamp, account identifier, policy version), which helps demonstrate consent/acceptance where required.
---
This Policy is intended to align with applicable privacy and data protection laws depending on the Participant’s location and the Event’s scope, including where applicable:
* Canada: PIPEDA and applicable provincial privacy laws
* European Union / EEA: GDPR
* United Kingdom: UK GDPR and Data Protection Act 2018
* United States: applicable federal and state privacy laws, including (where applicable) California consumer privacy requirements
Where GDPR/UK GDPR applies, the Organizer processes personal data on one or more lawful bases, such as:
* consent (e.g., optional promo usage, optional data fields);
* performance of a contract (running the Event under the Event Terms);
* legitimate interests (e.g., fraud prevention, maintaining Event integrity); and/or
* legal obligations (e.g., tax/prize reporting where required).
The exact lawful basis depends on the specific Event format and the data element involved.
---
Participant personal data may be obtained by the Organizer:
* directly from the Participant through Event forms or communications;
* from the Vanguard Platform as part of Event registration/submission workflows;
* from additional information the Participant provides during Event stages (e.g., portfolio links, team details, prize delivery information);
* other sources (if applicable): [DESCRIBE]
Any access to data through the Platform is limited to what is reasonably necessary for operating the Event as configured.
---
The Organizer processes personal data in line with the following principles:
* fairness, transparency, and lawfulness;
* purpose limitation (only for stated Event purposes);
* data minimization;
* accuracy and updates where necessary;
* storage limitation (retain only as long as needed);
* confidentiality and security safeguards.
The Organizer does not intentionally request “sensitive” data (special category data) unless explicitly required by the Event rules and allowed by applicable law.
---
(Personal Data / Privacy Notice for Event Participants)
Page 2
---
The Organizer may process personal data relating to:
* Event Participants (individuals wh* r*gister, apply, submit, or take part in the Event);
* Team Representatives / Captains (where team participation is allowed);
* Winners / Finalists (where prize fulfillment or verification is required);
* Judges / Experts (to administer judging access and integrity), if applicable.
---
The Organizer processes personal data only for purposes related to the Event, including as applicable:
* Event administration (registration, eligibility checks, participant management);
* Submissions handling (receiving, storing, organizing, displaying submissions to judges);
* Judging and results (scoring, rankings, final decisions per Event Terms);
* Communications (Event updates, deadlines, clarifications, prize coordination);
* Prize delivery & verification (shipping, digital delivery, tax/eligibility checks where required);
* Recruiting / collaboration follow-up (optional module);
* Compliance and legal obligations (recordkeeping, dispute handling, regulatory requests);
* Security and integrity (fraud prevention, abuse detection, enforcing rules).
The Organizer does not use Participant data for unrelated purposes (e.g., unrelated marketing) unless the Participant separately opts in or the law otherwise allows.
---
Depending on the Event configuration, the Organizer may process:
* name (or stage name / handle);
* email address;
* phone number (if required for prizes/verification);
* country/region, time zone (if provided).
* biography, experience, skills, questionnaire answers;
* portfolio links, socials (if provided);
* team details (if team format).
* files and materials submitted (audio/video/images/text/code/etc.);
* metadata (upload time, format, size);
* statements provided with the submission (credits, tool usage, disclosures).
* scores, rankings, judge comments (where enabled);
* status across stages (accepted / rejected / finalist / winner);
* prize eligibility confirmations.
* confirmation that payment was made;
* transaction reference/ID (as provided by payment provider).
The Organizer typically does not receive or store full card details; payment providers process those as independent controllers/operators.
* access logs within Organizer-facing dashboards (where available);
* anti-fraud signals and integrity flags (where available via Platform tools).
---
The Organizer may share personal data only as necessary for the Event, including:
* judges / experts (access to submissions and relevant participant info needed to evaluate);
* Organizer staff and authorized representatives (admin and support);
* service providers acting on Organizer instructions (e.g., email delivery, prize shipping, event ops tooling), under confidentiality and data protection terms;
* legal/authority requests where required by law.
No sale of personal data. The Organizer does not sell Participant personal data.
---
The Organizer may process and store personal data in:
* [COUNTRY/REGION] (Organizer’s base), and/or
* other jurisdictions where Organizer vendors operate (if any).
Where cross-border transfers occur, the Organizer will use appropriate safeguards required by applicable law (e.g., contractual protections).
Note: If a Participant uses third-party services (e.g., social platforms or messengers) to interact with the Event, those services process data under their own policies.
---
The Organizer retains personal data for:
* the duration of the Event, and for an additional period as needed for:
* prize fulfillment and verification;
* audit and dispute resolution;
* legal/tax obligations (if applicable);
* Event archive integrity (if Event Terms allow/require).
Default retention (select one for the template):
* ☐ 12 months after Event end
* ☐ 36 months after Event end
* ☐ 60 months after Event end
* ☐ other: [INSERT]
After the retention period, the Organizer will delete or de-identify data, except where retention is legally required.
---
Participants may request (subject to applicable law):
* access to their personal data;
* correction of inaccurate data;
* deletion of data;
* restriction or objection (where applicable);
* data portability (where applicable).
Requests can be submitted to: [INSERT PRIVACY EMAIL]
Organizer may request reasonable information to verify identity before responding.
Response timeframe: typically within 30 days, unless law requires a different timeframe.
---
If the California Consumer Privacy Act (CCPA/CPRA) applies, Participants who are California residents may have rights such as:
* to know categories of personal information collected and disclosed;
* to request access and deletion (subject to exceptions);
* to correct inaccurate information;
* to opt out of “sale” or “sharing” (if applicable — Organizer states it does not sell; sharing for cross-context behavioral advertising is typically not used for Event operations).
Notice at Collection: The categories and purposes listed in Sections 7–8 serve as the Organizer’s notice of collection for the Event.
To exercise California rights: contact [INSERT PRIVACY EMAIL].
---
The Organizer uses reasonable administrative, technical, and organizational safeguards appropriate to the nature of the data, such as:
* access control and least-privilege;
* confidentiality obligations for personnel/vendors;
* secure storage and operational security practices;
* incident response procedures.
The Organizer does not publish detailed security architecture for safety reasons, but can provide confirmations where legally required.
---
The Organizer may update this Policy. The updated version becomes effective when posted on the Event page, unless stated otherwise.
---
This Event is conducted using Vanguard and Pathfinder, operated by Vanguard Creative Platforms Inc.
Vanguard is responsible for platform-level processing it performs as the platform operator under its own privacy notice(s).
