NOTICE OF COLLECTION OF INFORMATION

The information we collect about you depends on how you interact with us. In this section, we describe the categories of information we collect and the sources of this information.

The types of personal information we collect and process about you include:

• Identifiers: such as your name, email address, postal and/or mailing address, phone number, IP address, account username and password, account identification number, third party platform identifiers and information (when you sign into your Arc Institute account via a third party, like Google or Facebook), and team names.
• Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): such as your name, photos, and, in the event you win a financial award as part of the Challenge, your postal and/or mailing address, social security number or other government ID number, bank account or other financial account information (for direct deposits and tax reporting,), and any other information you choose to provide.
• Internet or Other Electronic Network Activity Information: We use tracking technologies, such as cookies and pixels to collect information about your interactions with the Challenge Website and our marketing communications. These technologies help us improve our Challenge Website and marketing communications, personalize your experience, and analyze your interactions with us, including to see which areas and features of our Challenge Website are popular and count visits. For more information about the cookies and similar tracking technologies we use, and the choices available to you, see the Your Choices section below.
• Professional or Employment-related information: such as your employer or affiliated company or university, if you provide it.
• Research and Scores: such as any research or scoring that can be linkable to you, or any other information you submit as part of your participation in the Challenge or other event, that is considered personal information under applicable data protection laws.
• Device, Usage, and Activity Information: We collect information about how you access our Challenge Website, including data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, browser type, and unique device identifiers. We also collect information the route by which you access our Challenge Website, access dates and times, and your activity on our Challenge Website, such as pages viewed, and links clicked.

We collect information you provide directly to us. For example, we collect information directly from you when you fill out a form, participate in the Challenge or create a Challenge account, attend an event, request support, send us an email, or otherwise communicate with us. We also collect some of the above information automatically when you use our services, namely the Internet or Other Electronic Network Activity Information, the Device, Usage, and Activity Information, and certain Identifiers like IP address.

We obtain information from other sources. For example, we may collect information from identity verification services and data analytics providers. This information includes Internet or Other Electronic Network Activity Information. Additionally, if you create or log into your Challenge account, through a third-party platform (such as Facebook or Google), we will have access to certain Identifiers from that platform, such as your name, birthday, profile picture, username, and any other information the third-party platform discloses about you, in accordance with the authorization procedures determined by such platform.

You are not required to provide all personal information identified in this VCC Privacy Policy to participate in our Challenge, to use our Challenge Website, or to interact with us, but certain functionality will not be available if you do not provide certain personal information. For example, if you do not provide certain personal information, we may not be able to respond to your requests, review your Challenge submission, or award you with a Challenge prize.

USE OF INFORMATION

The information we collect about you depends on how you interact with us. In this section, we describe the categories of information we collect and the sources of this information.

The types of personal information we collect and process about you include:

• Identifiers: such as your name, email address, postal and/or mailing address, phone number, IP address, account username and password, account identification number, third party platform identifiers and information (when you sign into your Arc Institute account via a third party, like Google or Facebook), and team names.
• Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): such as your name, photos, and, in the event you win a financial award as part of the Challenge, your postal and/or mailing address, social security number or other government ID number, bank account or other financial account information (for direct deposits and tax reporting,), and any other information you choose to provide.
• Internet or Other Electronic Network Activity Information: We use tracking technologies, such as cookies and pixels to collect information about your interactions with the Challenge Website and our marketing communications. These technologies help us improve our Challenge Website and marketing communications, personalize your experience, and analyze your interactions with us, including to see which areas and features of our Challenge Website are popular and count visits. For more information about the cookies and similar tracking technologies we use, and the choices available to you, see the Your Choices section below.
• Professional or Employment-related information: such as your employer or affiliated company or university, if you provide it.
• Research and Scores: such as any research or scoring that can be linkable to you, or any other information you submit as part of your participation in the Challenge or other event, that is considered personal information under applicable data protection laws.
• Device, Usage, and Activity Information: We collect information about how you access our Challenge Website, including data about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, browser type, and unique device identifiers. We also collect information the route by which you access our Challenge Website, access dates and times, and your activity on our Challenge Website, such as pages viewed, and links clicked.

We collect information you provide directly to us. For example, we collect information directly from you when you fill out a form, participate in the Challenge or create a Challenge account, attend an event, request support, send us an email, or otherwise communicate with us. We also collect some of the above information automatically when you use our services, namely the Internet or Other Electronic Network Activity Information, the Device, Usage, and Activity Information, and certain Identifiers like IP address.

We obtain information from other sources. For example, we may collect information from identity verification services and data analytics providers. This information includes Internet or Other Electronic Network Activity Information. Additionally, if you create or log into your Challenge account, through a third-party platform (such as Facebook or Google), we will have access to certain Identifiers from that platform, such as your name, birthday, profile picture, username, and any other information the third-party platform discloses about you, in accordance with the authorization procedures determined by such platform.

You are not required to provide all personal information identified in this VCC Privacy Policy to participate in our Challenge, to use our Challenge Website, or to interact with us, but certain functionality will not be available if you do not provide certain personal information. For example, if you do not provide certain personal information, we may not be able to respond to your requests, review your Challenge submission, or award you with a Challenge prize.

DISCLOSURE OF INFORMATION

We disclose information about you as described in this VCC Privacy Policy and in the following scenarios:

• Vendors and Service Providers. We make personal information available to our vendors, service providers, contractors and consultants who perform services on our behalf, such as companies that assist us with web hosting, payment processing, fraud prevention, support services, analytics, and marketing.
• Your Organization or Academic Institution. If you enter on behalf of an organization or academic institution, we will notify that organization or institution if you are a finalist or winner. If you do not enter on behalf of any organization or institution, you can consent or direct us to notify an organization or third party to whom we can disclose your personal information if you are a finalist or winner.
• The Public. If you are a winner or a finalist in our Challenge, we may post your name and photo, as well as accolades on our websites. If you enter as a participant in our Challenge, your name, team name, scores, and other information related to the Challenge (not including any proprietary data) may be posted on a leaderboard or other website accessible by the public.
• Law Enforcement Authorities and Individuals Involved in Legal Proceedings. We disclose personal information in response to a request for information if we believe that disclosure is in accordance with, or required by, any applicable law, regulation, or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.
• To Protect the Rights of Arc Institute and Others. We may disclose personal information if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Arc Institute, our users, the public, or others.
• Professional Advisors. We disclose personal information to our legal, financial, insurance, and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
• Institutional Transactions. We disclose personal information in connection with, or during negotiations of, certain institutional transactions, including a merger, sale of assets, financing, or acquisition of all or a portion of our business by another company.
• With Your Consent or at Your Direction. We make personal information available to third parties when we have your consent or you intentionally direct us to do so.

ANALYTICS

We engage others to provide analytics services across the web and in mobile apps. These entities may use cookies, web beacons, device identifiers, and other technologies to collect information about your use of our services and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in mobile apps, links clicked, and conversion information. This information may be used by us and others to, among other things, analyze and track data, determine the popularity of certain content, and better understand your online activity.

How We Use Google Analytics

We use Google Analytics to recognize you and link the devices you use when you visit our Challenge Website on your browser or mobile device, log in to your account on our Challenge Website, or otherwise engage with us. Google Analytics allows us to better understand how our users interact with our service and to tailor our content to you. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, go to the Google Analytics Privacy Policy or to Google Opt-Outs to learn about Google Analytics' currently available opt-outs.

YOUR CHOICES

Account Information

You can access, correct, and delete certain information stored within your Challenge account at any time on the Challenge website.

Cookies and Similar Tracking Technologies

The Arc Institute uses cookies and similar tracking technologies, as described above. You can usually adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect some of the functionality of our Challenge Website, such as remembering your username and password.

Communications Preferences

You may opt out of receiving promotional emails from Arc Institute by following the instructions in those communications. If you opt out, we may still send you non-promotional emails, such as those about your submissions or account.

DATA RETENTION

We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this VCC Privacy Policy.

ADDITIONAL INFORMATION FOR SPECIFIC JURISDICTIONS

We store personal information for as long as necessary to carry out the purposes for which we originally collected it and for other business purposes explained in this VCC Privacy Policy.

Individuals in California

The California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”) grants California residents certain rights and requires specific disclosures. If you reside in California, this section applies to you. This section also serves as our California notice at collection.

Our VCC Privacy Policy explains how we collect, use, and disclose information about you. As required by the CCPA, we use the tables below to further explain how we have disclosed your personal information over the past 12 months.

Disclosure of Personal Information for Business Purposes