a. The Organizer does not collect personal data other than that which Candidates voluntarily provide on the website (hereafter “the Website”) or in the registration and application form (i.e. name, first name, contact details including email address, phone number, function and organisation, texts, altogether the “Personal Data”), neither when they register for the Contest nor submit their application.

b. Personal Data collected on the Website or Application file will be processed by the Organizer for the following purposes:

· communicate with the Candidate and provide them with the information requested;

· processing of access, rectification and opposition requests, and other rights with respect to Personal Data;

· claims and litigation management;

· contact the Candidates for marketing purposes to provide them with information about similar events organised by the Organizer or one of its partners.

c. The processing of the Candidates’ Personal Data is necessary for the Organizer to provide them with the services they requested, as well as to enable the Organizer to organize the Contest.

d. Candidates’ Personal Data will be processed internally by duly authorized persons, within the limits of their respective attributions.

e. Personal Data may also be communicated to the Organizer’s data processors (including IT service providers) and external services providers such as web developers, marketing solutions providers, to the strictest extent necessary and subject to the existence of contractual guarantees to ensure the security and confidentiality of the data.

f. Candidates’ Personal Data will be processed by the Organizer as a data controller, in compliance with the applicable data protection legislation (i.e. for the time being the Law of 2 August 2002 covering the protection of individuals with regards to the processing of personal data, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, - the GDPR -, which entered into force on 25 May 2018, as well as any other subsequent regulation).

g. The Organizer undertakes to implement technical and organizational security measures to ensure the protection of Candidates’ Personal Data against the risks associated with the use of information systems.

h. The Organizer applies generally accepted security standards to help protect Candidates’ Personal Data. However, no method of transmission over the Internet, or of electronic storage, is 100% secure. Therefore, the Organizer cannot guarantee the absolute security of the Personal Data.

i. Personal Data is kept for a period of three (3) years from collection by the Organizer or the last contact from the Candidate.

j. In accordance with the current data protection legislation, the Candidate or, as the case may be, its beneficiaries who can prove they have a legitimate interest, are entitled to obtain, free of charge:

· access to the personal data concerning the Candidate,

· confirmation that the Candidate’s Personal Data is or is not being processed,

· information concerning at least the purposes of the processing, the categories of data to which the processing relates and the recipients or categories to whom the data is communicated,

· communication, in an intelligible form, of the data being processed, as well as any available information on the origin of the data.

k. The Candidate (or, as the case may be, his beneficiaries) also has the right to rectify its personal data and a right to object to the collection and processing of such data, on the basis of compelling legitimate grounds.

l. These rights may be exercised by an email addressed to the following address: team@farvest.com. As of 25 May 2018, the Candidate is entitled to request the erasure of all or part of the data or a restriction of the processing, object to the processing or make use of its right to data portability, within the limits provided by the applicable rules. In the event of a breach of the data protection rules, the Candidate may also lodge a complaint before a supervisory authority such as the National Commission for Data Protection (CNPD).

m. The documents and information submitted with the Application will only be submitted to the Juries solely in the context of the Contest and will be treated by them as confidential information.

Making the Most of the Vendor Selection Process in Healthcare