The processing of personal data follows the provisions of Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (hereinafter: “Regulation”). Moonshot will make efforts to treat personal data acquired by Moonshot properly and will comply the Regulation. To this end, Moonshot has established the following privacy statement.
Personal data shall mean any information relating to an identified or identifiable natural person (‘data subject’). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his or her physical, physiological, mental, economic, cultural or social identity.
Personal data processing operations can be any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, storage, adaptation or alteration, retrieval, consultations, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction.
The data controller is Moonshot Platform Inc., a non-profit organization with EIN 87-2598278, located at 201 N. Union Street Suite 110, Alexandria, Virginia, 22314.
Data subjects are natural persons whose personal data are included in the applications and whose data are processed during the evaluation procedure. Therefore, the data subjects in particular are specific staff members of the applicant, such as legal representatives. Also, if the applicant is a minor, his or her parent/guardian consent will be required, thus data subjects may be also such parents/guardians. The data subjects might be also participants of the award event (such as members of Jury, speakers, winners etc).
The purpose of the processing of personal data is to manage the 2022 Moonshot Awards procedure and in particular to:
Moonshot shall use personal information only for the purposes of managing the 2022 Moonshot Awards and shall not use personal information for any other purposes without the written prior consent of the relevant person except as otherwise permitted for by laws or regulations.
The data processing operations include the collection, recording, organisation, storage, consultation, use, disclosure by transmission, erasure and destruction of personal data.
In particular, during the Moonshot Award procedure personal data are received, they may be distributed to Moonshot Award Jury, they are evaluated, stored, implemented and eventually destroyed.
Special data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or sexual orientation may be received only in as much as this data appears spontaneously in the application provided by the data subjects. This data is not processed during the Moonshot Awards procedure, since it is not pertinent.
Personal data is disclosed to:
Exceptionally and if necessary, information may be transferred to external lawyers, IT contractors etc. subject to the GDPR for a specific and limited purposes only.
In general, Moonshot does not transfer any personal data to entities established in third countries not subject to GDPR. However, given the fact that the members of the Jury may come from all around the world and thus exceptionally from countries, not subject to the GDPR.
In all these cases a written contract (an jury contract or a service contract) will be signed between the Moonshot and the relevant person in order to ensure that GDPR rules are respected by the data processor. These written contracts will include a specific article on data protection.
Moonshot shall take necessary and proper measures and shall manage personal information properly in order to prevent leakage, loss or waste of any personal information which Moohshot handles. Moonshot shall also properly supervise its employees in their handling of personal information and, if Moonshot outsources the handling of personal information to any third party, monitor the third party so that the third party properly manages the personal information.
The data subjects have the right for information, the right of access, the right of rectification in case their personal data is not complete or not accurate and the right to erasure (“right to be forgotten”).
The data subjects have the right to obtain the erasure of their personal data and in particular in the cases when the personal data are no longer necessary in relation to the purposes for which they were collected, if the data subject withdraws its consent, or in case of unlawful processing.
Data subjects have also the right to restriction of processing of personal data and the right to object on grounds listed in Article 23 of the Regulation.
Data subjects may, by written request, gain access to their personal data.
The right of rectification of data subjects is limited to objective factual data which is inaccurate of incomplete. The right of rectification may be exercised as long as it does not call into question the designation decision and result in unequal treatment. Any disagreement with the evaluation data relating to the assessment of the proposals submitted by the data subjects may be addressed by means of the available review procedures.
The data subjects have the right of recourse at any time to the Data Protection Officer of the Moonshot for matters relating to the processing of their personal data.
The rights can be only exercised by sending a request in a written form to the following e-mail: firstname.lastname@example.org. As a general rule, the requests for information, access, rectification, erasure restriction are handled without undue delay and in any event within one month of receipt of the request; this period may be extended by further two months where necessary, taking into account the complexity and number of requests. In case the data subject contests the accuracy of the data, upon request, the data is restricted immediately for the period of verification of the accuracy of the data, not exceeding on month. They cannot result in unequal treatment of the data subjects and cannot be exercised in a way that is contrary or harmful to the aim of the evaluation or to its confidentiality.
Restrictions to the rights of data subjects may be applied by the Moonshot explained by this privacy statement, and in accordance with Article 25 of the Data Protection Regulation of the European institutions and this privacy statement.
For example, after the deadline of submitting the application,
All applicants submitting an application and providing information including personal data to the Moonshot by any means (in particular by paper or electronic form) are deemed to have unambiguously given their consent for the subsequent processing operations in application of the Data Protection Regulation.
Moonshot may amend this privacy statement when necessary.