University Challenge - Privacy Policy

In accordance with applicable legislation on personal data protection, participants in the "EDPR University Challenge 2022" (hereinafter, the "EDPR UC 2022" or the "Contest") are informed that the personal data of the data subjects in relation to the Rules and Regulations 2022 (hereinafter, the "Rules") will be jointly processed by:

• EDP RENOVÁVEIS, S.A. with NIF A74219304, registered office at C/ Serrano Galvache 56 - Parque Empresarial Parque Norte - 28033 MADRID and email address of the DPO complianceofficer@edpr.com (hereinafter, “EDPR”).
• EIT Inno Energy represented by the Institute of Sustainable Energy Foundation (ISE Foundation) with Chamber of Commerce 68743432, registered office at Kennispoort, 6th floor, John F Kennedylaan 2, 5612 AB Eindhoven – The Netherlands, (hereinafter “EIT Inno Energy”), and
• PremiValor Consulting with NIF 504836773, registered office at Avenida 5 de Outubro nº75 7ºpiso 1050-049 Lisboa – PORTUGAL (hereinafter, “PremiValor Consulting”).

The above-mentioned entities will be jointly referred as "Joint Data Controllers" and, as such, the Joint Data Controllers have agreed on the joint processing of personal data in a lawful, fair and transparent manner for the purposes indicated as follows. As a consequence, the data subject is informed of the essential aspects of the joint controllership agreement which involve the following activities:

1. The administrative management by EDPR, InnoEnergy and PremiValor Consulting of the application for participation in the Contest as the subject matter of the Rules.
2. The management of the selection process of the participants and the corresponding verification of the fulfilment of the requirements requested in the Rules by EDPR, InnoEnergy and PremiValor Consulting.
3. The analysis of the participants' projects by the Attribution Jury, for evaluation purposes, which shall involve the processing of personal data by EDPR, PremiValor Consulting and InnoEnergy, which form part of the Attribution Jury.
4. The management of a possible candidacy of the participant in the Contest within the framework of future recruitment processes carried out by EDPR, or the possibility of pursuing a master's degree with EIT InnoEnergy.
5. The organization, where appropriate, of an awards event as part of the "Local Awards Ceremony".
6. Compliance with the obligations to which the Joint Data Controller are subject as a consequence of this initiative.

Additionally, the participant may authorize the processing of his personal data for:

7. The publication on the website of EDPR, as well as its own internal communication media, of personal data of the participants who are finalists and/or winners of the contest, for the purpose of disseminating this initiative.
8. The publication of participants' data, including images, in press releases and/or filming footage, in the local and/or regional media, for the purpose of publicizing this initiative.

The lawful basis for the processing of personal data derived from the purposes a) to e) is the need to process such data for the performance of the contractual relationship between the Joint Data Controllers and the participant given that, without such processing, it would not be possible to achieve the referred purposes. The lawful basis for the processing of the participant's personal data for the purpose f) derives from the obligation of the Joint Data Controllers to comply with the applicable legal provisions.

Finally, the lawful basis for the purposes g) and h) is the consent of the participant, expressed through the corresponding acceptance of the relevant authorization provided to the winner in due course.

The personal data provided by the participant shall not be communicated to third parties, except when such communication is required by law.

Likewise, the Joint Data Controllers inform that the personal data provided by the participant will be kept for as long as the contractual relationship is in force (or, where appropriate, until the participant withdraws his/her consent), and once this relationship is terminated, if applicable, the data will be stored, duly blocked, exclusively for the time required by the applicable legislation until any liabilities arising from it expire.

The participant is informed that he/she has the right to withdraw, where appropriate, the consent given for the processing of his/her personal data at any time, without prejudice to the lawfulness of the processing carried out until then.  Likewise, the participant may exercise his/her rights of access, rectification, deletion, objection, limitation, as well as the right to data portability, by contacting the DPO of EDPR at complianceofficer@edpr.com with the reference of “data protection” or by sending a communication to EDPR - Compliance Department, at C/ Serrano Galvache, 56 - Parque Empresarial Parque Norte - 28033 MADRID, under the terms established in the regulations in force, providing proof of his/her identity. Nevertheless, the data subject has the right to exercise such rights in respect of and against each of the Joint Data Controllers. Additionally, when the participant considers that the rights recognized by the applicable data protection regulations have been violated, he/she may file a complaint before the competent Supervisory Authority.