Virtual Cell Challenge Privacy Policy
Last Updated: June 23, 2025
This Virtual Cell Challenge Privacy Policy (the “VCC Privacy Policy”) describes how Arc Research Institute (“Arc Institute,” “we,” or “us”) collects, uses, discloses, and otherwise processes information about yousuch as your name, email address, cookie data, device usage information or any other information that can directly or indirectly identify you (“Personal Information"), as part of your interaction with or participation in our Virtual Cell Challenge (the “Challenge”), including any access to or use of ourChallenge website (virtualcellchallenge.org) and related online services that link to this VCC Privacy Policy (collectively, the “Challenge Website”), and when you otherwise interact with us about the Challenge, such as at events, or through our support channels. We may provide different or additional notices of our privacy practices for certain offerings, in which case those notices will supplement or replace the information in this VCC Privacy Policy.
We may change this VCC Privacy Policy from time to time. If we make changes, we will revise the date at the top of this VCC Privacy Policy. If we make material changes, we will provide you with additional notice (such as by adding a statement to the Challenge Website or sending you a notification). We encourage you to review this VCC Privacy Policy regularly to stay informed about our information practices and the choices available to you. On the Challenge Website, you will always be presented with the most up-to-date information.
COLLECTION OF INFORMATION
The Personal Information we collect about you depends on how you interact with us. In this section, we describe the categories of Personal Information we collect and the sources of this Personal Information.
The categories of Personal Information we collect and process about you include:
- Identifiers: such as your name, email address, postal and/or mailing address, phone number, IP address, account username and password, account identification number, third party platform identifiers and information (when you sign into your Arc Institute account via a third party, like Google or Facebook), and team names.
- Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)): such as your name, photos, and, in the event you win a financial award as part of the Challenge, your postal and/or mailing address, social security number or other government ID number, bank account or other financial account information (for direct deposits and tax reporting,), and any other information you choose to provide.
- Internet or Other Electronic Network Activity Information: We use tracking technologies, such as cookies, to collect Personal Information related to your interactions with the Challenge Website. These technologies help us improve our Challenge Website performance. For more information about the cookies and similar tracking technologies we use, and the choices available to you, see the YOUR CHOICES section below.
- Professional or Employment-related information: such as your employer or affiliated company or university, if you provide it.
- Research and Scores: such as any research or competition scores that can be linkable to you, or any other information you submit as part of your participation in the Challenge or other event, that is considered Personal Information under applicable data protection laws.
- Device, Usage, and Activity Information: We collect Personal Information related to your access to our Challenge Website, including information about the device and network you use, such as your hardware model, operating system version, mobile network, IP address, browser type, and unique device identifiers. We also collect information regarding the route by which you access our Challenge Website, access dates and times, and your activity on our Challenge Website, such as pages viewed, and links clicked.
We collect Personal Information you provide directly to us. For example, we collect Personal Information directly from you when you fill out a form, participate in the Challenge or create a Challenge account, attend an event, request support, send us an email, or otherwise communicate with us. We also collect some of the above information automatically when you use our services, namely the Internet or Other Electronic Network Activity Information, the Device, Usage, and Activity Information, and certain Identifiers like IP address.
We obtain information from other sources and third parties. For example, we may collect information from identity verification services and data analytics providers. This information includes Internet or Other Electronic Network Activity Information. Additionally, if you create or log into your Challenge account, through a third-party platform (such as Google), we will have access to certain Identifiers from that platform, such as your name, birthday, profile picture, username, and any other information the third-party platform discloses about you, in accordance with the authorization procedures determined by such platform.
There is no statutory or contractual obligation requiring you to provide all of the Personal Information identified in this VCC Privacy Policy to participate in our Challenge, to use our Challenge Website, or to interact with us. The provision of your Personal Information may be voluntary, but certain functionalities will not be available if you do not provide certain Personal Information. For example, if you do not provide your contact details, we may not be able to respond to your requests, review your Challenge submission, or award you a Challenge prize.
USE OF INFORMATION
We use the Personal Information we collect to facilitate and administer the Challenge, as well as process and deliver entries and awards. We also use the information we collect to:
- Provide, maintain and improve the Challenge Website;
- Promote the Challenge and other Arc Institute activities;
- Develop new research tools and services;
- Personalize your experience with us;
- Send you technical notices, security alerts, support messages, and other transactional or relationship messages;
- Send you newsletters or other communications about our research, services, or events that might interest you (see the Your Choices section below for information about how to opt out of these communications at any time);
- Evaluate potential recruitment opportunities and send you communication about potential opportunities to work at or with Arc that may interest you;
- Monitor and analyze trends, usage, and activities in connection with our Challenge Website;
- Detect, investigate, respond to, prosecute, and help protect against security incidents and other malicious, deceptive, fraudulent, or illegal activity, and help protect the rights and property of Arc Institute and others;
- Comply with our legal and financial obligations;
- Create de-identified and aggregate data that cannot reasonably be linked to you; and
- As described to you when collecting your Personal Information or as otherwise set forth in an applicable notice or subsequently agreed to by you.
DISCLOSURE OF INFORMATION
The Personal Information we collect may be shared with and processed by the following categories of recipients, as necessary for the purposes identified above in Use of Information. In particular, we disclose your Personal Information in the following scenarios:
Vendors and Service Providers. We make Personal Information available to our vendors, service providers, contractors and consultants who perform services on our behalf, such as companies that assist us with web hosting, IT support and maintenance, prize payment processing, fraud prevention, support services, analytics, and marketing.
Your Organization or Academic Institution. If you enter on behalf of an organization or academic institution, we will notify that organization or institution if you are a finalist or winner. If you do not enter on behalf of any organization or institution, you can consent or direct us to notify an organization or third party to whom we can disclose your Personal Information, if you are a finalist or winner.
The Public. If you are a winner or a finalist in our Challenge, we may post your name and photo, as well as accolades on our websites, in accordance with applicable law. If you enter as a participant in our Challenge, your name, team name, scores, and other information related to the Challenge (not including any proprietary data) may be posted on a leaderboard or other website accessible by the public.
Law Enforcement Authorities and Individuals Involved in Legal Proceedings. We disclose Personal Information in response to a request for information if we believe that disclosure is in accordance with, or required by, any applicable law, regulation, or legal process, including lawful requests by public authorities to meet national security or law enforcement requirements.
To Protect the Rights of Arc Institute and Others. We may disclose Personal Information to law enforcement, professional advisors, or other relevant parties (e.g., involved in legal proceedings) if we believe that your actions are inconsistent with our user agreements or policies, if we believe that you have violated the law, or if we believe it is necessary to protect the rights, property, and safety of Arc Institute, our users, the public, or others.
Professional Advisors. We disclose Personal Information to our legal, financial, insurance, and other professional advisors where necessary to obtain advice or otherwise protect and manage our business interests.
With Your Consent or at Your Direction. We make Personal Information available to third parties when we have your consent or you intentionally direct us to do so.
DATA RETENTION
We store Personal Information for as long as necessary to carry out the purposes for which we originally collected it, for other business purposes explained in this VCC Privacy Policy, and to the extent permitted by applicable law. When we no longer need to use your Personal Information, we take steps to remove it from our systems and records and/or take steps to anonymize it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject)
ANALYTICS
We may engage others to provide analytics services across the web and in mobile apps. These entities may use cookies, web beacons, device identifiers, and other technologies to collect information about your use of our services and other websites and applications, including your IP address, web browser, mobile network information, pages viewed, time spent on pages or in mobile apps, links clicked, and conversion information. This information may be used by us and others to, among other things, analyze and track data, determine the popularity of certain content, and better understand your online activity.
How We May Use Google Analytics
We may use Google Analytics to recognize you and link the devices you use when you visit our Challenge Website on your browser or mobile device, log in to your account on our Challenge Website, or otherwise engage with us. Google Analytics allows us to better understand how our users interact with our service and to tailor our content to you. For information on how Google Analytics collects and processes data, as well as how you can control information sent to Google, go to the Google Analytics Privacy Policy or to Google Opt-Outs to learn about Google Analytics' currently available opt-outs.
YOUR CHOICES
Account Information
You can access, correct, and delete certain information stored within your Arc Institute account at any time by contacting help@virtualcellchallenge.org.
Cookies and Similar Tracking Technologies
Arc Institute uses cookies and similar tracking technologies, as described above. You can usually adjust your browser settings to remove or reject browser cookies. Please note that removing or rejecting cookies could affect some of the functionality of our Challenge Website, such as remembering your username and password.
Communications Preferences
You can opt out anytime of receiving promotional emails from Arc Institute by following the instructions in those communications. If you opt out, we may still send you non-promotional emails, such as those about your submissions or account.
ADDITIONAL INFORMATION FOR SPECIFIC JURISDICTIONS
California
The California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”) grants California residents certain rights and requires specific disclosures. If you reside in California, this section applies to you. This section also serves as our California notice at collection.
Our VCC Privacy Policy explains how we collect, use, and disclose information about you. As required by the CCPA, we use the tables below to further explain how we have disclosed your Personal Information over the past 12 months.
Disclosure of Personal Information for Business Purposes
| Category of Personal Information | Categories of Recipients | Purpose for Disclosure |
|---|---|---|
| Identifiers |
|
|
|
|
|
| Vendors and Service Providers |
|
As described in the Collection of Information section above, we collect Personal Information from various sources, including directly from you and automatically when you access or use our Challenge Website. We retain Personal Information as described in the Data Retention section above.
We also disclose aggregated or de-identified information that cannot reasonably be used to identify you. We maintain and use this information only in a de-identified fashion and will not attempt to re-identify such information, except as permitted by law.
Sensitive Information
Some of this information is considered “sensitive” under the CCPA but we do not use or disclose sensitive Personal Information for the purpose of inferring characteristics about you.
Sales, Sharing, and Cross-Context Behavioral Advertising Activities
We do not engage in “sales,” “sharing,” or “cross-context behavioral advertising” using Personal Information about consumers, as those terms are defined under the CCPA.
Your Rights
Access, Correction, and Deletion
You have the right to request to know more about and access your Personal Information, including in a portable format, request deletion of your Personal Information, and request correction of inaccurate Personal Information.
To request access, correction, or deletion of your Personal Information, please contact us at privacy@arcinstitute.org or by calling +18554967070. To authenticate your request, we may ask you to verify any information we currently have on record, such as your name, phone number, email, or affiliation.
Nondiscrimination
We will not discriminate against you for exercising your privacy rights.
Authorized Agents
You may also designate an authorized agent to submit an access, deletion, or correction request on your behalf. We may ask authorized agents to submit proof of their authority to make a request, such as a valid power of attorney or proof that they have signed permission from the consumer who is the subject of the request. In some cases, we may contact the individual who is the subject of the request to verify their own identity or confirm the authorized agent has permission to submit the request. If you are an authorized agent seeking to make an access, correction, or deletion request on behalf of a California resident, please contact us at privacy@arcinstitute.org.
Argentina
If you are a resident of Argentina, this section applies to you.
Legal Basis for Processing
Under the Argentine Personal Data Protection Law N° 25,326, the legal basis for processing Personal Information is the data subject’s consent. By submitting Personal Information to Arc Institute, our service providers, or our agents, you consent to the collection, use, disclosure, and transfer of your Personal Information in accordance with this VCC Privacy Policy, and as permitted or required by law.
You may withdraw your consent at any time to the collection, use, disclosure, or transfer of your Personal Information by contacting us at privacy@arcinstitute.org. If you withdraw your consent (or if you decide not to provide certain Personal Information), you acknowledge that Arc Institute may not be able to provide you, or continue to provide you, with our Challenge Website or information that may be of value to you, and you may not be able to participate in our Challenge or accept an award.
Your Rights
To the extent provided by applicable law, you may exercise the following rights:
- Right of Access
- Right to Rectification
- Right to Erasure
To exercise any of these rights, you may contact us via email at privacy@arcinstitute.org.
If you believe your rights are not being upheld under Argentine law, we encourage you to contact us in the first instance. However, if we are not able to resolve it, you may file a complaint with the Agency for Access to Public Information. Contact details for the authority are as follows:
Address: Av. Pte. Gral. Julio A. Roca 710, 2nd floor – Autonomous City of Buenos Aires
Phone: +54 11 3988-3968
Email: datospersonales@aaip.gob.ar
International Transfers
Your Personal Information may be stored, accessed, used and otherwise processed outside of Argentina. In such cases, the Personal Information may be subject to laws that have different standards of protection and may allow for foreign law enforcement and governmental access.
Australia
If you are a resident of Australia, this section applies to you.
International Transfers
Your Personal Information may be stored, accessed, used and otherwise processed by us and/or our service providers located in the United States.
Security of Personal Information
We take reasonable steps to protect the Personal Information you provide to us from misuse, interference and loss, as well as unauthorized access, modification or disclosure. These steps include implementing technical measures (such as access controls) and internal practices, procedures and systems, including employee training and regular security reviews, to maintain the security of your Personal Information.
Your Rights
You have the right to request access to your Personal Information and to request correction of your Personal Information so that it is accurate, complete, relevant, not misleading and up-to-date. To request access to or correction of your Personal Information, please contact us at privacy@arcinstitute.org.
Complaints
If you have a complaint about a suspected breach by us of the Australian Privacy Principles (APP) or an applicable registered APP code, you can contact us at privacy@arcinstitute.org. If you are dissatisfied with how we handle your complaint, you may lodge a complaint with the Australian Information Commissioner at http://www.oaic.gov.au/privacy/privacy-complaints.
Brazil
If you are a resident of Brazil, this section applies to you. In the event of a conflict between the provisions of this section and the rest of this VCC Privacy Policy, this section will supersede and control to the extent of such conflict.
Legal Basis for Processing
When we process your Personal Information as described in this VCC Privacy Policy, we do so in reliance on the following lawful bases:
| Purpose for Processing | Categories of Personal Information | Legal Basis for Processing |
|---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Your Rights
Under the Brazilian Data Protection Law (Law No. 13,853/2019 or “LGPD”) you may have the following rights with respect to your Personal Information:
- Right to confirm the existence of processing of your Personal Information
- Right to access your Personal Information
- Right to rectify incomplete, inaccurate, or outdated Personal Information
- Right to data portability
- Right to the deletion of Personal Information processed with consent
- Right to withdraw consent
- Right to information about the possibility of not providing consent and the consequences of refusal
- Right to information about data sharing and with whom it is shared
- Right to submit a petition regarding the processing of your Personal Information to the Brazilian Data Protection Authority (“ANPD”)
- Right to object to a data processing activity
- Right to obtain additional information about international transfers of your Personal Information and access the contractual provisions that regulate such transfers
Arc Institute will comply with your applicable rights requests in accordance with the LGPD. For example, while you have the right to request that we delete, anonymize, or restrict processing of your Personal Information, we can only process this request if the applicable Personal Information was collected based on your consent or if such information is considered unnecessary, excessive or processed in violation of the LGPD.
Additionally, in certain situations we are not required to delete or anonymize your Personal Information, such as when (i) the information is necessary in order to complete the transaction for which the Personal Information was collected, (ii) to provide a service requested by you, (iii) to comply with a legal obligation, (iv) to secure our website and online services, or to otherwise use your previously anonymized information internally in a lawful manner.
You may exercise your rights by emailing us at privacy@arcinstitute.org.
International Transfers
Your data may be stored outside of Brazil which constitutes an “International Data Transfer” under the LGPD. By agreeing to this VCC Privacy Policy, you also understand and agree to this transfer.
The international transfer of Personal Information may occur to countries or international organizations that the ANPD has recognized as providing adequate personal data protection. However, in the event that other international transfers are necessary, we will take reasonable steps to ensure that the information is processed with an adequate level of security. These steps include but are not limited to standard contractual clauses approved by the ANPD, specific contractual clauses, and global corporate standards.
For further information on how we transfer your Personal Information outside of Brazil, please refer to the table below:
| Form, Duration and Purpose of the International Data Transfer | Form: We will transfer Personal Information by electronic means when you use our servicesDuration: See Data RetentionPurpose: See USE OF INFORMATION |
| Destination Country(ies) of Transferred Data | Destination: United States |
| Data Sharing and Purpose | Data Sharing: See DISCLOSURE OF INFORMATIONPurpose: See USE OF INFORMATION |
Privacy Officer
If you reside in Brazil, you may also contact us by email at privacy@arcinstitute.org.
Canada
If you are a resident of Canada, this section applies to you.
Consent
By submitting Personal Information to Arc Institute, our service providers, or our agents, you consent to the collection, use, disclosure, and transfer of your Personal Information in accordance with this VCC Privacy Policy, and as permitted or required by law.
You may withdraw your consent at any time to the collection, use, disclosure, or transfer of your Personal Information by contacting us at privacy@arcinstitute.org. If you withdraw your consent (or if you decide not to provide certain Personal Information), you acknowledge that Arc Institute may not be able to provide you, or continue to provide you, with our Challenge Website or information that may be of value to you.
Your Rights
You have the right to request to know more about and, subject to certain exceptions provided by law, access your Personal Information (in Quebec, including in a portable format) and request correction of inaccurate Personal Information. To request access to or correction of your Personal Information, please contact us at privacy@arcinstitute.org. Once we receive the request, we will verify your request by asking you to provide information related to your recent interactions with us or information that we may already have on file about you.
International Transfers
Your Personal Information may be stored, accessed, used and otherwise processed inside and outside of Quebec and/or Canada. When Personal Information is located outside Quebec and/or Canada, it may be subject to laws that have different standards of protection and may allow for foreign law enforcement and governmental access.
Canada’s Anti Spam Law (“CASL”)
We will only send you commercial electronic messages (“CEMs”) where we have your express or implied consent to do so. Your consent to receive CEMs is implied where we have an existing business relationship with you, or you have reached out to us and made an inquiry within a certain time frame. You may unsubscribe from receiving CEMs at any time, by clicking the unsubscribe button on an email or following the direction provided in a text message. Consent may not be required for sending certain technical notices, security alerts, support messages, and other transactional or relationship messages that are not of a commercial nature.
China
If you are a resident of the People’s Republic of China (“PRC”, for the purposes of this VCC Privacy Policy, excluding Taiwan, Hong Kong, and Macau), this section applies to you.
Legal Basis for Processing
When we process your Personal Information as described in this VCC Privacy Policy, we do so in reliance on the following lawful bases:
| Purpose for Processing | Categories of Personal Information | Legal Basis for Processing |
|---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Processing of Sensitive Personal Information
We will not process your Sensitive Personal Information unless you are a winner or finalist in the Challenge. If Sensitive Personal Information will be processed, we will notify you about the processing and obtain your separate consent if applicable.
Your Rights
To the extent provided under PRC law, you have the following rights related to our processing of your Personal Information:
- Right to be informed, restrict handling and object to handling: you have the right to be informed, the right to make certain decisions on the processing of your Personal Information, and the right to restrict or refuse the processing of your Personal Information by others.
- Right to access and duplicate: you have the right to access and duplicate your Personal Information.
- Right to rectify: you have the right to request correction or to supplement your data, if you discover that your Personal Information is incorrect or incomplete.
- Right to withdraw consent: you have the right to withdraw consent. The withdrawal of consent shall not affect the validity of processing activities conducted based on consent before such withdrawal.
- Right to delete: you have the right to request the deletion of your Personal Information if we fail to erase the data in any of the following circumstances: (i) the purposes of processing have been achieved or cannot be achieved, or such data is no longer necessary for achieving the purposes of processing, (ii) we cease to provide products or services, or the retention period has expired, (iii) you have withdrawn consent, (iv) our processing of Personal Information is in violation of laws, administrative regulations, or agreements, or (v) other circumstances as provided by laws and administrative regulations.
- Right to require explanations: you have the right to request that we further explain our Personal Information processing procedures.
To exercise any of the foregoing rights, please contact us at privacy@arcinstitute.org. Once we receive a request, we may verify your request by asking you to provide information related to your recent interactions with us or information that we may already have on file about you. We may not always be able to grant your request, in which case, we will explain clearly why we cannot accept your request, the rationale for our decision, and any next steps.
If you have a concern about our processing of your Personal Information, we encourage you to contact us in the first instance. However, if we are not able to resolve your concern, you have the right to lodge a complaint with the Data Protection Authority in China.
International Transfers
Arc Institute is based in the United States, and we and our service providers process and store Personal Information on servers located in the United States. Whenever we make restricted international transfers of Personal Information, we take steps to ensure that your Personal Information receives an adequate level of protection (by putting in place appropriate safeguards, such as contractual clauses) or ensure that we can rely on an appropriate derogation under data protection laws, and such transfers and processing will be made based on the Legal Bases for Processing specified above.
Europe
If you are a resident of the European Economic Area, the United Kingdom, or Switzerland (collectively, the “EEA”), this section applies to you.
Legal Basis for Processing
When we process your Personal Information as described in this VCC Privacy Policy, we do so in reliance on the following lawful bases:
| Purpose for Processing | Categories of Personal Information | Legal Basis for Processing |
|---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Your Rights
To the extent provided under applicable law and subject to certain conditions, you may have the right to:
- obtain confirmation from us as to whether we process Personal Information about you and, potentially access such Personal Information and related information concerning the processing of your Personal Information;
- request correction of inaccurate or completion of incomplete Personal Information;
- request erasure of your Personal Information;
- request that we restrict certain processing; and
- receive a portable copy of your Personal Information, which you have provided to us in a structured, commonly used, and machine-readable format, and you may have the right to transmit your Personal Information to another entity without hindrance.
Under certain circumstances, you may also have a right to object, on grounds relating to your particular situation, at any time to the processing of your Personal Information and if you exercise this right, your Personal Information will no longer be processed for such purposes by us unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. Your right to object is not absolute and may not apply in certain situations, such as when processing is necessary to perform a contract. Your right to object to the processing for direct marketing purposes, however, including profiling, is unconditional and exists at any time.
When consent is the legal basis for our processing of your Personal Information, you may withdraw such consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.
Please note that your rights may vary depending on applicable data protection law. To exercise any of these rights, please contact us at privacy@arcinstitute.org.
If you have a concern about our processing of Personal Information, we encourage you to contact us in the first instance. However, you have the right to lodge a complaint with the Data Protection Authority where you reside. Contact details for your Data Protection Authority can be found using the links below:
- For individuals in the European Union: https://edpb.europa.eu/about-edpb/board/members_en
- For individuals in the UK: https://ico.org.uk/global/contact-us/
- For individuals in Switzerland: https://www.edoeb.admin.ch/edoeb/en/home/the-fdpic/contact.html
International Transfers
Arc Institute is based in the United States, and we and our service providers process and store Personal Information on servers located in the United States.
- Some of the recipients are considered to provide an adequate level of data protection under EEA data protection laws, e.g., those of our service providers that are certified under the EU-US Data Privacy Framework. International Transfers to such third parties, therefore, do not require any additional safeguards under EEA data protection laws.
- Other recipients may not provide an adequate level of data protection under EEA data protection laws, such as recipients in the US that are not certified under the EU-US Data Privacy Framework. Where required by EEA data protection laws, we have implemented or rely on appropriate safeguards, such as EU Standard Contractual Clauses or binding corporate rules of the recipient. Furthermore, where required by law, we implement supplementary safeguards to protect the Personal Information. Please CONTACT US if you require further information on such appropriate safeguards.
Automated decision-making, including profiling
We do not carry out automated decision-making with your Personal Information without human intervention.
Japan
If you are a resident of Japan, this section applies to you.
Consent
By submitting Personal Information to Arc Institute, our service providers, or our agents, you consent to the collection, use, disclosure, and transfer of your Personal Information in accordance with this VCC Privacy Policy, and as permitted or required by law.
Your Rights
You have the right to request to know more about and access your Personal Information, and request correction of inaccurate Personal Information. In certain circumstances, you may also have the right to request that we suspend the use or third party transfer of your Personal Information. To exercise these rights, please contact us at privacy@arcinstitute.org. Once we receive the request, we will verify your request by asking you to provide some information, if necessary.
International Transfers
Your Personal Information may be shared with third parties described in the Disclosure of Information section, which are located outside of Japan. Arc Institute and such third parties are located in the United States and are subject to the Personal Information protection requirements therein. For more details, see this report.
South Korea
If you are a resident of South Korea, this section applies to you.
To provide you with our services, we directly collect and process your Personal Information overseas in the United States.
Legal Basis for Processing
Items of Personal Information processed under a legal basis other than consent:
When we process your Personal Information as described in this VCC Privacy Policy, we do so in reliance on the following lawful bases:
| Purpose for Processing | Categories of Personal Information | Legal Basis for Processing |
|---|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Items of Personal Information processed with your consent:
We process the following Personal Information with your consent in accordance with Article 15(1)(1) and Article 22(1)(7) of PIPA.
| Purpose for Processing | Categories of Personal Information | Legal Basis for Processing |
|---|---|---|
| Promote the Challenge and other Arc Institute promotions |
|
|
| Send you promotional communications |
|
|
Processing of Pseudonymized Information
We also disclose aggregated or de-identified information that cannot reasonably be used to identify you. We maintain and use this information only in a de-identified fashion and will not attempt to re-identify such information, except as permitted by law.
Security of Personal Information
We take the following measures to ensure the security of Personal Information:
- Administrative Measures: Establishment and implementation of internal management infrastructure.
- Technical Measures: Management of access rights to Personal Information processing systems, installation of access control systems and other relevant protection measures, storage and inspection of access records, and installation and updates of security programs.
- Physical Measures: Access control to data storage rooms, safety measures against disasters and emergencies.
Your Rights
With limited exceptions, you have the right to access your Personal Information, request erasure of your Personal Information, and request correction of inaccurate Personal Information. In addition, you have the right to request that we restrict certain processing, or object to certain processing of your information.
If you have a right to object and if you exercise this right, your Personal Information will no longer be processed for such purposes by us unless Arc Institute demonstrates compelling legitimate grounds pursuant to applicable data protection laws. The right to object is not absolute and does not apply in certain situations, such as when processing is necessary to comply with applicable law, or to defend legal claims.
When consent is the legal basis for our processing of your Personal Information, you may withdraw such consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.
Please note that your rights may vary depending on applicable data protection law. To exercise any of these rights, please contact us at privacy@arcinstitute.org.
International Transfers
Arc Institute is based in the United States, and we and our service providers or other third parties process and store Personal Information on servers located in the United States.
Transfers to our service providers: The transfer is carried out for providing and supporting this Challenge based on Article 28-8(1)(3) of PIPA (i.e., entrusting the processing of Personal Information and retaining such Personal Information to conclude and perform a contract with you). We will transfer Personal Information by electronic means when you use our services.
| Category of Personal Information | Transferee (Contact Details) | Country of Transferee | Purpose for Disclosure | Retention Period by Transferee |
|---|---|---|---|---|
|
| United States |
| Duration of the Challenge |
|
| United States |
| Duration of the Challenge |
You may choose to refuse the transfer of your Personal Information. If you decide to decline the transfer of your Personal Information, please contact us at privacy@arcinstitute.org. If you choose to refuse the transfer, you may not receive the full benefit of the tools and services offered by us.
Data Retention
We destroy Personal Information when it is no longer needed, such as upon the expiration of the retention period, such as the duration of the Challenge, or the achievement of the processing purpose. However, we will continue to store your Personal Information for the following statutorily-prescribed periods, where applicable, including, but not limited to the following:
- Records on your visits to our website: 3 months (Article 15-2 of Protection of Communications Secrets Act)
Personal information stored in electronic file formats is destroyed in a manner that makes it unrecoverable via reasonably accessible means.
Privacy Contact
You can use the address below for complaints and inquiries related to Personal Information processing.
privacy@arcinstitute.org
CONTACT US
If you have questions about this VCC Privacy Policy, please contact us at privacy@arcinstitute.org.
Arc Research Institute
3181 Porter Dr
Palo Alto, CA 94304
Virtual Cell Challenge
