Hackazon Privacy statement

Hi!

We are Deloitte Netherlands and we offer you the Hackazon services. This webpage describes how we deal with your personal data when you are using Hackazon.

Introduction and scope

The protection of your personal data is of the utmost important to us and we want to be transparent about the way we use it. As such, this statement will cover:

What personal data we collect from you
For what purpose do we use it
The processors we use to process your personal data
The third parties we share your data with
Who is responsible for for processing your personal data
The basis we use to process the personal data
Cookies and similar technologies
How do we protect your personal data
Your rights as the data subject
How long we keep your data
Privacy of children
Changes to this statement

This privacy statement applies to the Deloitte Hackazon website. This statement was last updated on December 2, 2020 and will be reviewed and updated on a regular basis.

Throughout this document we use a number of terms that you may be less familiar with. Please find below their meaning:

Personal data - Any information relating to an identified or identifiable person.
Data subject - Person to whom the personal data relates to.
Processing - Any act concerning personal data, such as collecting, recording, organizing, structuring, storing, altering, retrieving, consulting, using, disclosing, disseminating, aligning, combining, restricting, erasing or destructing the personal data.
Controller - The entity that, alone or jointly with others, determines the purposes and means of the processing of personal data.
Processor - Entity which processes personal pata on behalf of the controller.
Third party - Any entity other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or the processor, are authorized to process the data.

Information collection and use

Type of data collected

In order to access and use the Deloitte Hackazon platform, we collect the following information from you:

Username, (hashed) password and email address
The IP address used to visit the website
Time and date when users login
Challenges viewed and solved by the user
User's progress in a course
Exam answers and scores for exams hosted using our service
Whether you are interested in job offers
Your country of origin

Purposes

We collect and use your personal data for the purpose of delivering the Hackazon service to you, for understanding how our service is used and, if you have allowed us to do so, for recruitment purposes.

Processors

We may employ companies and individuals outside Deloitte due to the following reasons:

To facilitate our service
To provide the service on our behalf
To perform service-related services
To assist us in analyzing how our service is used

These processors will have access to your personal data, in order to enable them to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose than to assist the Deloitte team in providing the service.

Third parties

This service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us and, therefore, we strongly advise you to review the privacy statements of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We do not share personal data with any third parties.

Who is responsible for processing our personal data?

The controller responsible for processing your personal data will change depending on the context you are accessing the platform:

If you access the platform as a private individual, the controller of your personal data will be Deloitte Nederland
If you are using our services in the context of your employment, the controller of your personal data will be your employer (in which case Deloitte Nederland will be the Processor)

Lawful basis for processing

The personal data we collect and process about you when you create an account and use this service is the performance of a contract.

If you are using the service available in our platform as a private individual we will ask you whether we can use your personal data for recruitment purposes, so then our legal basis for processing is consent. If you want to withdraw your consent for this purpose, please contact us via this webform.

Security

We value your trust and we care about protecting the availability, integrity and confidentiality of your personal data. Thus we have technological and operational security of a reasonable commercial standard to protect all the information provided by visitors via this website against disclosure to, or inspection, change or destruction by unauthorised parties.

Cookies and similar technologies

Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory.

We use only first-party cookies for remembering your settings and authentication.

We use a Twitter Feed plugin to display social media content on our website. As a result, our website makes requests to Twitter’s servers in order to display images and videos. These requests make your IP address visible to Twitter, who may use it in accordance with their data privacy policy: https://twitter.com/en/privacy#update We use a YouTube video plugin to display YouTube video content on our website. As a result, our website makes requests to YouTube’s servers in order to display videos. These requests make your IP address visible to YouTube, who may use it in accordance with their data privacy policy: https://www.youtube.com/static?template=terms

Rights of data subjects

Where we process your personal data, you have the right to exercise the following rights:

The right to be informed about all personal data collected in this service, for what purposes it was collected and how this data is used and stored
The right to access your personal data to see what kind of information about you is being processed
The right to rectification if your information is incorrect or out of date to make sure the personal data we have about you is accurate and up to date
The right to erasure of your personal data in certain cases such as when your personal data is no longer needed or the personal data is not being processed lawfully
Right to restriction of processing where you can ask for personal data not to be processed anymore, without deleting the data
Right to object to the processing of your personal data at any time if the processing is based on legitimate interest
Right to data portability you can ask for your personal data to be transferred to another company in a structured, commonly used and machine-readable format
Right to lodge a complaint directly with the supervisory authority about how we process your personal data.

If you would like to exercise one of your data subject rights, please contact the Deloitte Privacy office via this link.

Data Retention

We will keep your personal data for as long as it is necessary to enable you to use our service. After that period your personal data will be deleted.

Children's Privacy

These services do not address anyone under the age of 13. We do not knowingly collect any personal data from children under 13. In the case we discover that a child under 13 has provided us with personal information, we will immediately delete this from our servers.

If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.

Changes to this privacy statement

We may update our privacy statement from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new privacy statement on this page. These changes are effective immediately after they are posted on this page.

We hope that this privacy statement has informed you sufficiently. That being said, please do not hesitate to reach out to our Data Protection Officer if you have any other questions or concerns regarding the processing of your personal data, via this webform.

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee ("DTTL"), its network of member firms, and their related entities. DTTL and each of its member firms are legally separate and independent entities. DTTL (also referred to as "Deloitte Global") does not provide services to clients. Please see About Deloitte for a detailed description of the legal structure of Deloitte Touche Tohmatsu Limited and its member firms.

In The Netherlands the services are provided by independent subsidiaries or affiliates of Deloitte Holding B.V., an entity which is registered with the trade register in The Netherlands under number 40346342