Artwod Challenge

Privacy Policy

Who We Are

Art-Wod BV, a limited company, with registered office in Belgium

What We Collect

  • Account data: email and password for authentication.
  • Profile data: Challenger Name (display name) and your selected social media platform (YouTube, TikTok, Instagram).
  • Submission data: the video URLs you submit, their moderation status (pending/verified/rejected), and view counts associated with each submission.
  • Metrics: totals shown on your dashboard (e.g., total posts, total views) and, where applicable, leaderboard rank/name/views.
  • Device and usage: basic technical information needed to run the service (e.g., request logs). We also store a theme preference in your browser localStorage.

How We Use Your Data (Purposes + Legal Bases)

  • Operate the challenge (performance of a contract): authenticate you, save your profile, accept submissions, and compute progress metrics.
  • Moderation and anti‑fraud (legitimate interests): verify content and views, and prevent manipulation or abuse.
  • Leaderboard and recognition (legitimate interests/consent): display your Challenger Name and aggregate views on public or semi‑public boards where applicable.
  • Support and communication (legitimate interests/contract): notify you about submission status, rewards, or important changes.
  • Legal/Compliance (legal obligation): comply with applicable laws and valid requests.

Leaderboard & Public Display

If you opt into public recognition features, we may display your Challenger Name and aggregated metrics (e.g., views) on public or semi‑public boards. You can opt out at any time by contacting support; opting out won’t affect your ability to participate in the challenge.

Admin Panel Access

Authorized Artwod staff can view user profiles and submissions to update moderation status and, where needed, correct view counts. Access is gated by server‑side permissions.

Sharing and Processors

  • We do not sell personal data.
  • We use service providers acting under our instructions, including Supabase (authentication and database), email and communications providers, and hosting/CDN/analytics providers needed to run the site and challenge. We disclose the minimum necessary to each provider.
  • We may share data if required by law or to investigate fraud/abuse.

International Transfers

Your data may be processed outside the EEA by our processors. Where this occurs, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses) to protect your information.

Retention

  • Account and profile: retained while your account remains active. If you request deletion, we will erase or de‑identify your data unless we must retain it for legal reasons.
  • Submissions and metrics: retained for the duration of the challenge and up to 24 months afterwards for audit, fraud prevention, and program reporting, then deleted or anonymized.

When deletion is requested or retention expires, we delete or irreversibly anonymize data from active systems and logs within 30 days and from backups within 90 days.

Your GDPR Rights

  • Access, rectification, erasure, restriction, and portability of your personal data.
  • Object to processing based on legitimate interests, and withdraw consent where applicable.
  • Lodge a complaint with your local authority or the Belgian Data Protection Authority (APD/GBA).

To exercise your rights, contact support@artwod.com. We may need to verify your identity before acting on a request.

Security

We apply technical and organizational measures, including access controls and encryption in transit, and rely on platform‑level safeguards from our processors. No method of transmission or storage is 100% secure, but we work to protect your data.

Children

The challenge is intended for participants aged 16+ (program eligibility rule). Where we rely on consent to process a child’s data for information‑society services, we will seek parental consent where required by law. In Belgium, the statutory age for a child’s own consent is 13; other EEA countries vary between 13–16. If you believe a minor has provided data without appropriate consent, contact us.