PRIVACY

Privacy policy

This policy explains how EMC · Educational Mastar Central processes your data when you use the SHIRAA 2026 website and join the waiting list. We comply with the General Data Protection Regulation (GDPR) and the Dutch implementation act (UAVG).

Last updated

1. Data controller

The controller for your data is EMC · Educational Mastar Central, a non-profit registered in the Netherlands. For privacy matters contact info@edumc.nl.

2. The data we collect

When you join the waiting list we collect only what you enter in the form:

  • Full name, email address, phone number and country.
  • University or employer (optional), field of study, skills, and preferred track (optional).
  • For teams: the team name and an idea summary (optional).
  • Consent timestamp, email-confirmation timestamp, and the visit source (UTM) if present.
  • A hashed fingerprint of your IP address for abuse prevention (we never store the address itself).

3. Lawful basis and purpose

We process your data on the basis of your consent (GDPR art. 6(1)(a)), given when you tick the consent box in the form. Purpose: managing the waiting list, sending initiative emails (welcome, prep kit, registration-open notice, reminders), and producing aggregate statistics that do not identify you.

You may withdraw consent at any time via the unsubscribe link in any email or by writing to us, without affecting the lawfulness of earlier processing.

4. Who has access to your data

We never sell your data or share it with marketers. We rely on processors bound by data-processing agreements:

  • Website and database hosting inside the EU (Frankfurt).
  • Resend for sending our emails (the welcome, confirmation and initiative emails described in section 3).
  • Cloudflare Turnstile to block automated submissions (sets no tracking cookies).
  • Plausible for cookieless, identifier-free visit statistics.
  • Sentry (EU region) for technical error monitoring: it receives error reports without IP addresses or cookies, and link tokens are redacted before anything is sent.
  • The partner university you select may receive a report on its students' participation. You are informed of this when registration opens.

5. Retention

We keep waiting-list data for 24 months from your last interaction with us (signup, email confirmation, an email we sent you or a link you clicked in it, or participating), then delete it automatically. If you unsubscribe, every other field is erased immediately and only the email address stays on a suppression list, so we never write to you again.

5a. Minors

The site is aimed at university students, graduates and professionals. If you are under 16, join the waiting list only with your guardian's consent; we ask for confirmation of that consent at official registration. If we learn we have collected a minor's data without it, we delete it.

6. Your rights

Under the GDPR you have the right to:

  • Access your data and obtain a copy.
  • Rectify inaccurate data.
  • Erasure (“the right to be forgotten”).
  • Data portability in a machine-readable format.
  • Object to or restrict processing.
  • Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. How to exercise your rights

Send your request to info@edumc.nl from the address you registered with. We respond within 30 days at most and may ask to verify your identity before acting.

8. Cookies and local storage

The site uses no tracking cookies and needs no consent banner. Your browser stores a draft of the form locally on your device only (localStorage) until you submit; the draft never leaves your device.

9. Changes to this policy

We may update this policy as the service evolves. The last-updated date is shown above, and registrants are emailed about any material change.

Register your interest now: you hear first when registration opens.