AVIVA TECH REACH PRIVACY POLICY

1. Introduction

This Privacy Notice applies to students (“you”) who register to participate in the Tech Reach

Competition (the “Competition”). It explains how we use your Personal Information.

This Privacy Notice may also apply to your parents, guardians and/or teachers. Please provide your

parents, guardians and teachers with a copy.

Aviva Central Services UK Ltd (“Aviva”, “we”, “us” or “our”) will be the data controller of any Personal

Information collected during your participation in the Competition.

Aviva has partnered with Startup Sherpas Education Limited (“Startup Sherpas”) who host and

manage the Competition website on our behalf.

2. Personal Information we collect

Personal Information means any data about an individual from which that person can be identified.

We may collect and use the following information about you and your parent / guardian:

• General data – includes your name and your parent / guardian’s name;

• Contact data – includes your e-mail address and your parent / guardian’s e-mail address;

• Appearance data – includes your date of birth, gender and optional video submission to the

Competition; and

• Education or affiliated partner data – includes details of your affiliated partner such as name

and address of your school, college, educational institution or affiliated charity.

The types of Personal Information we collect will depend on how far you progress in the

Competition. If you are selected to participate the final in-personal event (the “Final”), we may also

collect the following information about you and your parent / guardian / teacher:

• Contact data – includes your address, your emergency contact’s details and your parent /

guardian / teacher’s name and email address;

• Appearance and behavioural data – includes your dietary preferences; and

• Financial data – includes bank account details.

3. How we use your Personal Information

The Personal Information we process is provided to us directly by you and will be collected by us

when you register and participate in the Competition.

Aviva may collect and use this information to:

• Register you as a participant in the Competition;

• Communicate with you and your parent / guardian / teacher about the Competition;

• Run the Competition and any associated events, including the Final;

• Assess your submission to the Competition;

• Verify your age with your school, college, educational institution or affiliated charity;

• Reimburse you for travel expenses if you are invited to attend the Final;

• Carry out health and safety requirements; and

• Prevent, detect and investigate fraud and other crime, including by carrying out sanctions

checks.

We process the Personal Information for our legitimate interests in running the Competition.

4. What if I don’t want to provide the information?

The information you provide in the application is voluntarily given however, there is certain

information that we need to run the Competition and communicate with you. Therefore, if you do

not wish to provide the necessary information requested then unfortunately, we will not be able to

progress your application.

If you have any questions about how we process your Personal Information, please contact us using

the details in the Contact Us section below.

5. Who your Personal Information is shared with

Aviva may share your Personal Information with the following parties for the purposes set out in this

Privacy Notice:

• Your school, college, educational institution or affiliated charity;

• A third-party administrator who helps us to arrange events; and

• Third parties that provide sanctions checking services.

When you register for the competition, you will provide your name and email address to Startup

Sherpas. Your submissions to the Competition via the website, including the optional video

submission, will also be collected by Startup Sherpas. This information will be shared with Aviva.

The Personal Information you provide to us during the Competition will only be available to a small

team within Aviva, such as those who manage the Competition, act as a buddy or mentor, run events

and manage health and safety on our sites.

We require all third parties to protect your Personal Information and treat it according to the law. We

do not allow our third-party service providers to use your Personal Information for their own

purposes and only permit them to process it for specified purposes and in line with our instructions.

We may share data if it is required by law, for example if we need to pass on your details to medical

professionals in an emergency.

6. How long will we keep your data?

We only retain your Personal Information for as long as necessary to fulfil the purposes we collected

it for, including for the purposes of satisfying any legal, or reporting requirements.

To find out more, see the Retention section in our Other Parties Privacy Policy.

7. Your data rights

You have legal rights under data protection laws in relation to your Personal Information. These

rights include:

• Your right of access – You have the right to ask us for copies of your Personal Information.

• Your right to rectification – You have the right to ask us to rectify Personal Information you

think is inaccurate. You also have the right to ask us to complete information you think is

incomplete.

• Your right to erasure – You have the right to ask us to erase your Personal Information in

certain circumstances.

• Your right to restriction of processing – You have the right to ask us to restrict the processing

of your Personal Information in certain circumstances.

• Your right to object to processing – You have the right to object to the processing of your

Personal Information in certain circumstances.

• Your right to data portability – You have the right to ask that we transfer the personal

information you gave us to another organisation, or to you, in certain circumstances.

You are not required to pay any charge for exercising your rights.

To find out more, see the Data Rights section in our Other Parties Privacy Policy.

8. Contact Us

If you have any questions about this Privacy Notice or how to exercise your rights, please contact our

Data Protection Officer:

Write to: The Data Protection Team, Aviva, PO Box 7684, Pitheavlis, Perth PH2 1JR

Email us: DATAPRT@aviva.com

If you’d like to submit a data subject access request, please write to us at the above address.

If you’re not happy about how we’re handling your Personal Information, you can raise a complaint

with the Information Commissioner’s Office (www.ico.org.uk). However, we ask that you please try to

resolve any issues directly with us first.