Privacy Policy

1. Introduction

The National AI Olympiad ("we", "our") respects user privacy and is committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Romanian legislation.

This Privacy Policy explains what data we collect, how we use it, how we protect it, and what your rights are regarding this data.

2. Data Controller

The personal data controller is:

• Name: National AI Olympiad
• Email: contact@olimpiada-ai.ro
• Website: https://olimpiada-ai.ro

3. Personal Data Collected

3.1 Registration Data

When creating an account, we collect:

• First and last name
• Email address
• Educational institution (high school/university)
• County/City
• Grade/Year of study
• Registration date

3.2 Activity Data

During platform use, we collect:

• Submitted solutions to problems
• Evaluation results
• Scores and rankings
• Posted comments and questions
• Activity history (accessed problems, time spent)

3.3 Technical Data

We automatically collect:

• IP address
• Browser type and version
• Operating system
• Device used
• Date and time of access
• Pages visited
• Cookies and similar technologies

4. Purpose of Data Processing

We use your personal data for:

4.1 Service Provision

• Creating and managing your account
• Evaluating submitted solutions
• Calculating and displaying leaderboards
• Facilitating communication between users

4.2 Competition Organization

• Participant registration
• Progress monitoring
• Eligibility verification
• Awarding prizes and diplomas

4.3 Platform Improvement

• Statistical analysis and reports
• Identifying and resolving technical issues
• Developing new features
• Optimizing user experience

4.4 Communication

• Notifications about competitions and events
• Responses to questions and technical support
• Platform updates
• Educational newsletter (with consent)

5. Legal Basis

We process your data based on the following legal grounds:

• Contract performance: for providing platform services
• Legitimate interest: for platform improvement and security
• Consent: for marketing communications and newsletter
• Legal obligation: for compliance with legal requirements

6. Data Sharing

6.1 Public Data

The following data is public on the platform:

• Username
• Educational institution
• Scores and leaderboard position
• Solved problems
• Public comments and questions

6.2 Third-Party Sharing

We may share data with:

• Service providers: hosting, email, analytics (with confidentiality agreements)
• Educational institutions: for membership validation (with consent)
• Authorities: when legally required or for fraud prevention

6.3 International Transfer

Data may be transferred outside the EU to cloud service providers. We ensure adequate protection through:

• Standard contractual clauses
• Privacy certifications
• Additional security measures

7. Data Security

We implement technical and organizational measures for data protection:

• SSL/TLS encryption for data transmission
• Secure authentication (OAuth 2.0)
• Regular backups
• Monitoring and logging for incident detection
• Restricted access to personal data
• Regular security testing

8. Data Retention

We retain your data for:

• Account data: while the account is active + 1 year after closure
• Solutions and results: 5 years for archival and statistical purposes
• Technical data: 12 months
• Communications: 3 years

After retention periods expire, data is deleted or anonymized.

9. Your Rights

In accordance with GDPR, you have the following rights:

9.1 Right of Access

You can request a copy of the personal data we hold about you.

9.2 Right to Rectification

You can correct inaccurate or incomplete data in your account.

9.3 Right to Erasure

You can request deletion of your data, except where we have legal retention obligations.

9.4 Right to Restriction

You can request restriction of data processing in certain circumstances.

9.5 Right to Portability

You can receive your data in a structured format and request transfer to another controller.

9.6 Right to Object

You can object to data processing based on legitimate interest or for direct marketing.

9.7 Withdrawal of Consent

You can withdraw consent for consent-based processing, without affecting the lawfulness of previous processing.

To exercise your rights, contact us at contact@olimpiada-ai.ro. We will respond within 30 days.

10. Cookies and Similar Technologies

10.1 Types of Cookies

We use the following types of cookies:

• Essential cookies: necessary for platform functionality (authentication, session)
• Performance cookies: for analysis and improvement (Google Analytics)
• Functional cookies: for user preferences (language, theme)

10.2 Cookie Management

You can manage cookies through browser settings. Disabling essential cookies may affect platform functionality.

11. Minors

The platform may be used by minors aged 13 and over. For users under 18, we recommend parental/guardian involvement in the registration and usage process.

Parents/guardians can request access, rectification, or deletion of their children's data by contacting our team.

12. Policy Changes

We reserve the right to update this Privacy Policy. Significant changes will be communicated through:

• Platform notification
• Email to registered users
• Updating the "Last updated" date

13. Complaints

If you believe your rights have been violated, you can file a complaint with:

• National Supervisory Authority for Personal Data Processing (ANSPDCP)
• B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest
• Website: www.dataprotection.ro

14. Contact

For questions about this Privacy Policy or your data processing, contact us:

• General email: contact@olimpiada-ai.ro
• Data protection email: contact@olimpiada-ai.ro
• Website: https://olimpiada-ai.ro