Competition Privacy Notice

DATA CONTROLLER

[Odlums full legal name, address, company number]

DATA PROTECTION CONTACT

[privacy@odlums.ie or DPO name and contact]

SUPERVISORY AUTHORITY

Data Protection Commission (DPC), Ireland – dataprotection.ie

LAST UPDATED

[Insert date]

What data we collect

When you register for this competition, we collect: the Parent’s name, email address, and phone number (if provided); the child’s first name and age; and your IP address and browser type (collected automatically). When you upload a bake entry, we also collect the submitted photograph or video file. If you give marketing consent, we retain your email address for that purpose.

Why we collect it – purposes and lawful basis

1. Administering the competition (processing registration, sending a confirmation email, and issuing a participation certificate) – Lawful basis: Consent (GDPR Article 6(1)(a)).
2. Judging entries and notifying winners – Lawful basis: Consent (given at registration).
3. Displaying photos/videos and announcing winners publicly – Lawful basis: Consent (separate, optional consent collected at registration and/or upload).
4. Sending marketing communications – Lawful basis: Consent (separate, optional consent).
5. Compliance with legal obligations (e.g. responding to DPC requests) – Lawful basis: Legal obligation (Article 6(1)(c)).

How long we keep your data

1. Competition entry data (names, age, email, uploaded content): retained for [6 months] after the competition closes, then securely deleted.
2. Where photo/video display consent has been given and content is published: retained for [12 months] from the date of publication, unless consent is withdrawn earlier.
3. Marketing consent and associated email address: retained until consent is withdrawn.
4. Technical logs (IP addresses, etc.): retained for [90 days] for security purposes, then automatically deleted.

Who we share your data with

We will not sell or rent your data to any third party. We may share data with trusted processors who help us run this competition, including our email delivery provider ([e.g. Mailchimp / SendGrid]), our website hosting provider ([provider name]), and any prize fulfilment partner. All processors are bound by data processing agreements and may not use your data for their own purposes. Where a winner’s details must be submitted to a prize fulfilment partner, you will be notified at that time.

Your rights

As the Parent registering on behalf of your child, you have the right to: access the personal data we hold; request correction of inaccurate data; request deletion (“right to be forgotten”); withdraw any consent at any time without affecting the lawfulness of prior processing; restrict or object to processing; and lodge a complaint with the Data Protection Commission at dataprotection.ie or by phone on +353 57 868 4800.

To exercise any of these rights, please contact us at [privacy@odlums.ie]. We will respond within 30 days.

Data transfers outside the EEA

We aim to keep all data within the European Economic Area. If any service provider transfers data outside the EEA, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses.