Personal data processing policy for contestants in the Tour de App competition
Last updated: 31 August 2026
The controller of your personal data under Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter: "GDPR") is students can grow, z.s., with its registered office at Křenová 89/19, Trnitá, 602 00 Brno; Company ID No. 26678586; e-mail: info@scg.cz (hereinafter the "Association" or the "Controller"). This personal data processing policy describes how we obtain, store, use and / or share (hereinafter: "process") your personal data in connection with your participation in the Tour de App competition and in the in-person events held as part of this competition year.
If a contestant is not legally able to give consent to a particular type of processing, their legal guardian must give consent on their behalf.
Data we process
To keep records of contestants, contact them and run the competition smoothly, we collect the following data on the basis of the Controller's legitimate interest (Article 6(1)(f) GDPR):
- First name and surname
- Telephone number
- E-mail address
We also process your first name and surname on the basis of your explicit consent (Article 6(1)(a) GDPR) in order to publish the competition results on our website.
We also process your e-mail on the basis of consent for direct marketing and to inform you about the Association's activities. You can withdraw your consent to receiving these e-mails through the link in the e-mail footer or by sending an e-mail to info+nesouhlas@scg.cz.
Register of MUNI applicants
If a participant gives consent, we may pass their first name and surname to Masaryk University (Žerotínovo nám. 617/9, 601 77 Brno, Company ID No. 00216224, data box ID: 9tmj9e4.) in order to verify whether that person is listed in the register of applicants for admission to study. Once the data has been passed on, Masaryk University processes it as a separate controller and is responsible for any further processing.
Candidate directory
To keep a directory of potential candidates and to pass it on to partners who want to fill a matching job vacancy, we collect the following data
- First name and surname
- Telephone number
- Curriculum vitae (CV)
We collect this data on the basis of consent (Article 6(1)(a) GDPR). We pass the data to competition partners who are looking for a candidate for a particular job position, so that they can assess the candidate and contact them if appropriate.
Photographs and video recordings
During the in-person rounds of the competition and related events, photographs and / or video recordings may be taken for the purpose of
- documenting the course of the competition,
- presenting and promoting the competition (for example on our website, on social media or in printed materials),
- providing material to the media for reporting on the competition.
Where a person is deliberately captured (portrait shots, award ceremonies and similar), the legal basis is the participant's explicit consent (Article 6(1)(a) GDPR).
For general shots from an event (for example group photographs or illustrative shots), the legal basis is the Controller's legitimate interest (Article 6(1)(f) GDPR) in documenting and archiving the course of the competition.
Other processors of your data
- For promotional purposes we publish photographs from events on the social networks Instagram, Facebook and TikTok, whose processing policies may differ from this one
- Because we also use service providers that may operate outside the European Union and the European Economic Area to organise the competition, personal data may be transferred to those countries. In such cases we always make sure that your data is protected to the greatest possible extent in line with the requirements of the GDPR.
How long we process your data
- We process the data we collect for record-keeping and for organising the competition for as long as necessary to complete the competition year and to meet our legal obligations; the data is deleted no later than 10 years after the end of the competition year you entered.
- We process the data we obtained from you on the basis of consent for as long as the consent is valid.
Your rights
Under the GDPR you have the right
- to request access from us to the personal data concerning you (Article 15 GDPR), including in a machine-readable format (Article 20 GDPR)
- to have your personal data corrected (Article 16 GDPR)
- to have all of your personal data erased (Article 17 GDPR)
- to restrict the processing of your personal data (Article 18 GDPR)
- to object to processing based on legitimate interest (Article 21 GDPR)
- to withdraw consent to processing that is based on consent (Article 13 GDPR)
- to lodge a complaint with the Office for Personal Data Protection (Article 13 GDPR)
- If you want to exercise any of these rights, contact us at info@scg.cz.
Changes to this policy
We will inform you of any changes to the policy without delay by e-mail, at the address you gave us when registering, at least 30 days before the new policy takes effect. The date of the most recent change to this policy is always shown at the top of this page.