HACKSQUAD PRIVACY POLICY

This Privacy Policy explains how KREATIVDISTRIKT SRL, an Italian corporation with its registered office at Via F. Petrarca 22, 20123 Milano, Italy, registered under VAT and Fiscal Code (P.IVA / C.F.): 09829520965 (hereinafter referred to as the "Company", "we", "us", or "our"), collects, uses, shares, and protects the personal data of users who access or use the HackSquad platform (the "Platform" or "Service").

We act as both a Data Controller (for your general platform account and usage metrics) and a Data Processor (on behalf of independent Event Organisers who collect your data to manage specific hackathons hosted on our Platform).

By using the Platform, you acknowledge that you have read and understood this Privacy Policy.

1. INFORMATION WE COLLECT

We collect information about you in three ways: information you provide directly to us, information collected automatically, and information from third-party sources.

A. Information You Provide Directly:

• Account Registration: full name, email address, username, password, profile picture, and optional developer details (bio, skills, country).
• Platform Role Information: Participants may provide team affiliations, project submissions, source code repository URLs, video links, and project descriptions. Judges and Mentors provide professional background, expertise, and evaluation scores/feedback.
• Customer Support: Contact info and details provided when contacting support@hacksquad.io.

B. Information Collected Automatically:

• Log Data: IP address, browser type, operating system, referring URLs, device identifiers, pages viewed, links clicked, and timestamps.
• Cookies and Tracking Technologies: Cookies, web beacons, and similar technologies for session management, performance analysis, and platform optimization.

C. Information from Third-Party Sources:

• OAuth Integrations: If you log in via GitHub, Google, or Discord, we receive authorized profile information (user ID, avatar, email) per their authorization protocols.

2. HOW WE USE YOUR INFORMATION

• To Provide and Maintain the Service: Account management, team matchmaking, project uploads, and event administration.
• To Coordinate with Event Organisers: When you join a specific hackathon, we share your registration details, team status, and project submissions with that event's Organiser for judging and prize allocation.
• To Protect Our Service: Detecting, preventing, and mitigating fraudulent activities, unauthorized login attempts, and security breaches.
• To Communicate with You: System notifications (password resets, submission receipts, team invitations), policy updates, and optional newsletters.
• For Compliance and Disputes: Fulfilling legal obligations under Italian and EU law, enforcing our Terms of Service, and resolving disputes.

3. LEGAL BASIS FOR PROCESSING (GDPR COMPLIANCE)

• Performance of a Contract: Processing is necessary to perform our obligations under the Terms of Service you accepted when registering.
• Legitimate Interests: Network security, platform improvement, abuse prevention, and essential communications.
• Consent: Where you have explicitly given consent (e.g., promotional newsletters, third-party OAuth connections). You may withdraw consent at any time.
• Legal Obligation: Processing required to comply with statutory, accounting, tax, or regulatory obligations within Italy and the EU.

4. HOW AND WITH WHOM WE SHARE YOUR DATA

We do not sell your personal data. We only share it under these conditions:

• With Event Organisers: When you register for a hackathon, your profile and submissions are shared with the event's designated Organiser (who acts as an independent Data Controller).
• With Third-Party Service Providers: Verified subprocessors (cloud hosting, databases, email delivery, payment processors) bound by Data Processing Agreements (DPAs).
• For Corporate Transactions: In mergers, acquisitions, or asset sales, data may transfer to the successor entity.
• For Legal Compliance: If required by subpoena, court order, or official request from law enforcement.

5. INTERNATIONAL DATA TRANSFERS

The Company is located in Milan, Italy. Technical infrastructure and third-party providers may store data in other jurisdictions (including the United States). For transfers from the EEA/UK to non-adequate jurisdictions, we use Standard Contractual Clauses (SCCs) approved by the European Commission, along with appropriate technical safeguards.

6. DATA RETENTION POLICY

• Active Accounts: Retained for as long as your account is active.
• Inactive Accounts: Accounts with no login or active session for twenty-four (24) consecutive months may be flagged as inactive and archived, anonymised, or securely deleted.
• Project Submissions: Screenshots, documentation, and metadata may be retained indefinitely for portfolio and promotional purposes unless a formal deletion request is submitted.

7. YOUR PRIVACY RIGHTS (GDPR & CCPA/CPRA)

• Right of Access & Portability: Request a copy of all personal data we hold in a structured, machine-readable format.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your account and personal data, subject to legal retention obligations.
• Right to Restrict or Object: Object to or request restriction of processing under specific conditions.
• Right to Lodge a Complaint: File a complaint with the Garante per la protezione dei dati personali (GPDP) if you believe we have violated privacy regulations.

To exercise these rights, email support@hacksquad.io. We will respond within thirty (30) days.

8. SECURITY MEASURES

KREATIVDISTRIKT SRL implements robust administrative, physical, and technical security controls, including: mandatory HTTPS encryption in transit, hashed password storage, regular security patch deployments, and limited internal access privileges to critical databases. No digital storage or internet transmission can be guaranteed 100% secure. You are responsible for keeping your account password confidential.

9. COOKIES AND PREFERENCES

We use functional cookies for session management and UI preferences, and analytical cookies to understand user paths. You can modify your browser settings to refuse cookies. Disabling essential session cookies may prevent certain Platform features from functioning correctly.

10. CONTACT INFORMATION

For questions, legal notices, or data requests concerning this Privacy Policy, contact: