TESSERACT HACKATHON PRIVACY NOTICE Last updated: Dec 5, 2025 Who We Are Pasteur Labs, Inc. ("we", "us", "Host") is hosting a hackathon ("Hackathon") and takes your privacy seriously. This notice explains how we collect and use your personal information in connection with the Hackathon. Data Controller: Pasteur Labs, Inc. Address: Pasteur Labs, 19 Morris Avenue, Brooklyn, New York 11205, USA Contact: oss@simulation.science What Information We Collect During registration, we collect: Name - to identify you as a participant Email address - to communicate with you about the Hackathon Team member email addresses (if applicable) - to identify your team and communicate with all participants T-shirt size - to send you a commemorative t-shirt After registration, we will contact you and each of your team members (if applicable) individually to collect: Mailing address - to ship your t-shirt If you register a team, the primary contact provides email addresses for team members. By providing team member information, you confirm that you have their permission to share their contact details with us. Why We Collect This Information (Legal Basis) We process your personal data based on: Contractual necessity: Your registration creates an agreement to participate in the Hackathon, and we need this information to fulfill our obligations (such as sending you a t-shirt) Legitimate interest: We have a legitimate interest in running the Hackathon and communicating with participants How We Use Your Information We use your information to: Manage your participation in the Hackathon Send you important updates about the Hackathon Ship your commemorative t-shirt Comply with any legal obligations We will not use your information for marketing purposes without your separate consent. Who Has Access to Your Information Tally.so: We collect your registration information using Tally.so, a form service that acts as our data processor. Tally.so processes your data in accordance with their privacy policy, which you can read at https://tally.so/help/privacy-policy. Tally stores data on secure servers within the European Union. Shipping providers: We will share your name and mailing address with our shipping provider solely for the purpose of delivering your t-shirt. If you are located outside the EU, your address information will be transferred internationally for shipping purposes. Host: Only authorized members of our team who need access to manage the Hackathon will see your information. We will never sell your personal information to third parties. How Long We Keep Your Information We will retain your information for: Registration data (name, email): 60 days after the Hackathon ends Shipping information (address, t-shirt size): Collected after registration and retained for 30 days after shirts are delivered, then securely deleted After these periods, we will securely delete your information unless we are legally required to keep it longer. International Transfers If your mailing address is outside the European Union, we will transfer your address to our shipping provider for delivery. We ensure appropriate safeguards are in place for such transfers. Your Rights Under GDPR You have the following rights regarding your personal data: Access: Request a copy of the personal data we hold about you Rectification: Ask us to correct inaccurate information Erasure: Request deletion of your personal data (subject to legal obligations) Restriction: Ask us to limit how we use your data Objection: Object to our processing of your data Data portability: Receive your data in a structured, machine-readable format Withdraw consent: If processing is based on consent, you can withdraw it at any time To exercise these rights, contact us at oss@simulation.science. We will respond within 30 days. Your Right to Complain If you have concerns about how we handle your data, you can file a complaint with the Datatilsynet (Danish Data Protection Authority): Datatilsynet Borgergade 28, 5 1300 Copenhagen K Tel. +45 33 1932 00 Fax +45 33 19 32 18 e-mail: dt@datatilsynet.dk Website: http://www.datatilsynet.dk/ If you are from an EU member state other than Denmark, you may also contact the data protection authority in your own EU country: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm. Security We take reasonable technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse. However, no internet transmission is completely secure, and we cannot guarantee absolute security. Changes to This Notice We may update this privacy notice from time to time. Any changes will be posted at https://pasteurlabs.ai/tesseract-hackathon-2025/privacy_policy.txt, and we will notify registered participants of material changes by email. Questions? If you have any questions about this privacy notice or how we handle your data, please contact us at oss@simulation.science.