Privacy Policy

A   Who are we?

www.bebras.uk (referred to as “this site”) is operated by the Raspberry Pi Foundation (RPF). RPF is a charitable foundation based in the United Kingdom with the mission to enable young people to realise their full potential through the power of computing and digital technologies. We collect your data to help us advance our mission, and we are committed to protecting the privacy and security of your personal information (“personal data”).

B What is this page for?

We think it is important to keep your personal data safe. Personal data means any information that may be used to identify you, like your name and or date of birth.

This page explains why we do this. It also tells you what we do with your information and who we share it with.

C   Glossary

Where we refer to your “personal data” in this Policy, we mean any recorded information that is about you and from which you can be identified. It does not include data where your identity has been removed (anonymous data).

Where we refer to the “processing “ of your personal data, we mean anything that we do with that information, including collection, use, storage, disclosure or retention.

D   Types of data we collect

The challenge website www.bebras.uk will require teachers who wish to register as a coordinator to give their names, contact information, and the name of their school. If a teacher is designated as a coordinator they will also be able to submit the names and (optionally) the gender of each competing student (“student data”).  The coordinators should only share student data with us where they are acting as Data Controllers, and acknowledge that they are responsible for obtaining and documenting valid consent (or any other lawful basis for processing) to do so from the students or their legal guardians as may be appropriate.

When you visit our site we may also automatically collect technical information about your visit from your computer, for example, the type of device (and its unique device identifier) you use to access our site, the Internet protocol (IP) address used to connect your device to the Internet, your login information, browser type and version, time zone setting, browser plug-in types and versions, operating system, mobile network information and platform.

E   How we use your data

We process your data for one or more of the following reasons - only as necessary for us to meet our obligations to you or because it is necessary for our legitimate interest, these being known as our legal bases for processing:

• to administer the Bebras Challenge and the Oxford University Coding Challenge (OUCC), including, but not limited to, scoring the competitions.
• to ask you to participate in surveys relating to the Challenges.
• for research purposes.
• to operate this website and to ensure that we understand how our site is used and to improve our website and ensure it is secure.

Name, contact and school information provided to us will be used only for the purposes of the competition and follow-up activities (e.g. further rounds of the competition, invitations to participate in prize giving or related outreach events).  Relevant invitations will be issued via teachers, and students will never be contacted directly for such purposes.  

Gender information will be used only for anonymised statistical analysis of results.  The latter analysis may involve passing of performance and gender statistics (but not names) to our international partners.

We do not send you marketing communications by email except where you have specifically indicated that you consent to receive such communications. You can withdraw your consent with respect to such marketing at any time by contacting us per the contact details provided below.

We will only use your data for the purposes for which we collected it, unless otherwise required or permitted by law.

F   Sharing your data with third parties

We will never sell your information to any third party.

The information we collect about you and your students will be stored on our IT infrastructure, it will also be shared for operational reasons with Cuttle (account management, document management and storage services) and/or Salesforce (relationship management platform). The servers containing this information are located in the UK / EEA.

We may share personal data with the University of Oxford so that they can invite you and your students to participate in the Oxford University Computing Challenge, and to enable them to administer the Oxford University Computing Challenge if you and your students decide to participate.

In some circumstances, we may share limited personal information about you with other organisations, partners and sponsors with whom we are working on joint schemes, events, or products that you engage with. This is to make sure that the scheme, event or product is working as intended and that we are sticking to our agreements with our partner organisations. Where these third parties are not in the UK or European Economic Area, we make sure that it is safe to share your information with them, for example by including the ICO’s International Data Transfer Agreement or/and the EC’s Standard Contractual Clauses in our agreements with such third parties.

We will share your data if we are required to do so by law. 

G Third-party websites

Our site may contain links to and from various third-party websites.  If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies.  Please check these policies before you submit any personal data to these websites.

H   Retaining your data

Personal data relating to students will remain in the competition database until 31st August after the students’ data has been collected. This is to enable the checking of results by the participants and their teachers. 

Thereafter, we may anonymise personal data such that it will no longer contain any information that can be used to identify an individual. Anonymised data may be used for research, statistical, analysis, and impact evaluation. 

Contact information for teachers may be retained to facilitate communication about future competitions.

We will only otherwise retain your data for as long as we need it to fulfil our purposes, including any relating to legal, accounting, or reporting requirements. 

Requests to have student or teacher data removed at any point should be communicated to dataprotection@raspberrypi.org.

I   Cookies

Our site uses cookies to distinguish you from other users of our site. Cookies are small text files that are placed on your device by websites that you visit. Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse the site, and allows us to improve our site.   

The site only uses cookies that are strictly necessary for the operation of the service, e.g. to keep track of user sessions.  By using this website you agree that we can place these types of cookies on your device.

J   Changes to this policy

Any changes we may make to our privacy policy in the future will be posted on this page.  Please check back frequently to see any updates or changes to our privacy policy.

K   Your rights

Under certain circumstances, you have the right to:

• Right to be informed — you have the right to be informed about the collection and use of your personal data. In general we will do this no later than a month after the processing activity begins unless doing so is impossible, would involve disproportionate effort or render impossible or seriously impair the achievement of the objectives of that processing.
• Right of access — you have a right to ask us to confirm whether we are processing information about you, and to request access to this information.
• Right to rectification — you may ask us to rectify information you think is inaccurate, and you may also ask us to remove information which is inaccurate or incomplete. If you inform us that your personal data is inaccurate, we will inform relevant third parties with whom we have shared your data so that they may update their own records.
• Right of portability — you have a right to obtain your personal data from us and reuse it for your own purposes.
• Right to restricted processing — you have the right to request the restriction or suppression of your personal data. This is not an absolute right and only applies in certain circumstances. When processing is restricted, we are permitted to store the personal data, but not use it.
• Right to be forgotten — you have a right to seek the erasure of your data, for example where it is no longer necessary for us to continue holding or processing your personal data. This right is not absolute, as we may need to continue processing this information to comply with a legal obligation.

Right to restriction

You have a right to ask us to restrict our processing of your information if:

• You contest its accuracy and we need to verify whether it is accurate.
• You ask us to restrict use of it instead of deleting it.
• We no longer need the information for the purpose of processing, but you need it to establish or defend legal claims.
• You have objected to the processing of your information being necessary for the purposes of our legitimate interests.

 The restriction would apply while we carry out a balancing act between your rights and our legitimate interests. If you exercise your right to restrict processing, we would still need to process your information for the purpose of exercising or defending legal claims, for the purpose of protecting the rights of another person, or for public interest reasons.

L   Contact

If you want to exercise any of the rights described above or wish to raise any queries or concerns in relation to our processing of your personal data, please contact either or both of the following:

Data Protection

Raspberry Pi Foundation

37 Hills Road

Cambridge, CB2 1NT

United Kingdom

 

Email:  dataprotection@raspberrypi.org.

Policy last amended: 1 August 2024