Privacy Policy

TAIKAI

Last update: April 28, 2026 — Compliant with GDPR (EU 2016/679) and LGPD (Law No. 13,709/2018, Brazil)

1. Scope and Identification of the Controller

TAIKAI S.A. is a public limited company registered with the Portuguese Companies Registry under no. 515012718, having its registered office at Via do Castelo do Queijo 395, Piso 2, Loja 22 e 23, 4100-429 Porto, Portugal (hereinafter "TAIKAI", "we" or "us").

TAIKAI acts as the Controller of the personal data processed within the open-innovation hackathon platform accessible at https://taikai.network and its subdomains (the "Website"), within the meaning of Article 4(7) GDPR.

Applicable legal frameworks. This Privacy Notice applies cumulatively to:

  • Data subjects located in the European Economic Area (EEA) — under Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and Portuguese Law No. 58/2019.
  • Data subjects located in Brazil — under Brazilian Law No. 13,709/2018 (Lei Geral de Proteção de Dados Pessoais, "LGPD"), regardless of the data subject's nationality or the location of data processing, whenever: (i) the processing operation is carried out in Brazilian territory; (ii) the processing activity has the purpose of offering or supplying goods or services to individuals located in Brazil; or (iii) the personal data being processed has been collected in Brazilian territory, pursuant to Article 3 LGPD.
  • Data subjects in other jurisdictions — where applicable, under local data-protection legislation, without prejudice to the GDPR standard which constitutes the baseline applied by TAIKAI to all processing activities.

For the purposes of this Notice, "personal data" means any information that identifies or could reasonably be used to identify a living individual, either on its own or together with other information.

This Privacy Notice should be read in conjunction with our Terms and Conditions and our Cookie Policy (Section 14 of this document).

2. Data Protection Officer (DPO)

In accordance with Article 37 GDPR and Article 41 LGPD, TAIKAI has appointed a Data Protection Officer (DPO), who can be contacted regarding any matter related to the processing of your personal data and the exercise of your rights:

Data Protection Officer:

  • E-mail: [email protected]
  • Postal address: TAIKAI S.A. — For the attention of the Data Protection Officer, Via do Castelo do Queijo 395, Piso 2, Loja 22 e 23, 4100-429 Porto, Portugal

Note: the full name of the current Data Protection Officer is published and kept up to date at https://taikai.network/dpo, in compliance with Article 41(1) LGPD.

3. How We Collect Your Personal Data

As a website-based open-innovation platform, TAIKAI regularly receives personal data as part of the provision of its services. The personal data we collect and process may include the following categories:

3.1. Personal data you provide to us directly

  • Registration: data required to create an account and register for the services we provide on the Website, including username, full name, e-mail address and password.
  • Profile: data you optionally choose to provide to create your profile on the platform, such as date of birth, title, photograph, country, education, professional skills and employment preferences. Providing this data is optional, but profile information helps you get more from our services — for example by enabling teams to identify you for participation in a Challenge.
  • User-generated content: content you post or upload to the Website, including registrations for Challenges, resources submitted as part of your participation (documents, presentations, audio/video files), messages exchanged with other Community members, and posts on public message boards.
  • Communications: records of any correspondence between you and TAIKAI, including information you send when reporting a problem with the Website or the Services.

3.2. Personal data we collect from third parties

  • Other users: information about you posted or uploaded by other users on the Website.
  • Social-media authentication: if you choose to register on the Website using social-media authentication (such as GitHub or Google), we will receive certain personal data (such as name and e-mail) from your social-media profile, in accordance with the terms and conditions of those platforms.
  • Technical data: when you visit the Website, we automatically collect information about the devices you use and the networks you are connected to, including IP address, login information, bandwidth used, time of visit, browser type and version, browser plug-ins, operating system, referrer URL, download/upload errors, pages visited, page interactions and other connection data. This collection is carried out using cookies and similar technologies (see Section 14).

3.3. Processing of minors' data

General policy. TAIKAI's Services are, as a rule, intended for individuals aged 18 (eighteen) or above. TAIKAI does not knowingly collect personal data from individuals under 18 without the safeguards set out in this Section 3.3.

Hackathons open to participants aged 16 to 17. Exceptionally, certain university or educational Challenges may accept participants aged between 16 (sixteen) and 17 (seventeen), subject to:

  • (i) prior age verification at registration;
  • (ii) specific, prominent and verifiable consent given by at least one parent or legal guardian, in compliance with Article 8 GDPR for data subjects in the EEA and Article 14 LGPD for data subjects in Brazil;
  • (iii) processing limited to the purposes strictly necessary for participation in the Challenge;
  • (iv) no processing for direct-marketing purposes.

Children under 16. TAIKAI does not knowingly collect data from children under 16. If we become aware that we have collected data from a child under 16 without verifiable parental consent, we will delete such data without delay.

Reporting improper processing. If you are a parent or legal guardian and become aware that your minor child has provided personal data to TAIKAI without your consent, please contact us immediately at [email protected].

4. How Long We Retain Your Personal Data

We retain your personal data for as long as you maintain an active account with us. If you close your account, your personal data will be deleted without undue delay, subject to the exceptions set out in this Section.

You may, at any time, modify or delete the data in your profile through your account settings. Deleting all your data implies that we will be unable to maintain your account.

Content shared with others. Information you have shared publicly with other users may remain visible after your account is closed and will be anonymised wherever technically feasible. Your profile may continue to appear in third-party search-engine results until those services refresh their caches.

Suspended or blocked accounts. Where an account is suspended or blocked for breach of the Terms and Conditions, we will retain the data for the minimum period necessary to fulfil the purpose of the suspension and prevent circumvention of the Terms, on a case-by-case basis, applying the principle of minimisation, and never beyond 5 (five) years.

Retention for legal purposes. We may retain personal data for an additional period strictly necessary to comply with legal, tax, regulatory or fraud-prevention obligations, or to assert or defend against legal claims in judicial, administrative or arbitral proceedings, in accordance with Articles 5(1)(e) and 17(3) GDPR and Article 16 LGPD.

5. Purposes of Processing

TAIKAI processes personal data for the following specific, explicit and legitimate purposes:

  • To enable your participation in innovation Challenges on the Website;
  • To enable personalisation of your user profile and account;
  • To send you service-related communications (e.g. confirmation of registration in a Challenge) by e-mail or other means;
  • To enable communication and interaction with other Community members, including teams, jurors and organisers;
  • To publish announcements of finalists and winners of Challenges;
  • To provide user support services;
  • To keep the Website secure and safe, and to prevent fraud, attacks and misuse;
  • To send direct-marketing communications, subject to your prior, freely given and informed consent;
  • To notify you of changes to our Services;
  • To administer the Website, including troubleshooting, statistical analysis, testing and research;
  • To improve the presentation and functionality of the Website;
  • To comply with legal obligations, court orders and regulatory requirements.

TAIKAI processes personal data on the following legal bases, applied according to the data subject's jurisdiction and the specific purpose of the processing:

6.1. For data subjects in the EEA (Article 6 GDPR)

  • Performance of a contract (Article 6(1)(b)) — where processing is necessary to perform the contract you entered into when registering on the platform and to provide the contracted Services.
  • Legitimate interests (Article 6(1)(f)) — for purposes such as platform security, fraud prevention, service improvement and internal administration, where such interests are not overridden by your fundamental rights and freedoms.
  • Consent (Article 6(1)(a)) — for specific purposes such as direct marketing, installation of non-essential cookies and processing of data of minors aged 16 to 17.
  • Compliance with legal obligation (Article 6(1)(c)) — where processing is required for TAIKAI to comply with an obligation to which it is subject.

6.2. For data subjects in Brazil (Article 7 and Article 11 LGPD)

  • Performance of a contract (Article 7, V) — to provide the Services and to carry out preliminary procedures related to contract formation.
  • Legitimate interest (Article 7, IX, in conjunction with Article 10) — for purposes such as security, fraud prevention and service improvement, observing the requirements of Article 10 LGPD, including consideration of the legitimate expectations of data subjects and the adoption of measures to ensure transparency and the rights of data subjects.
  • Consent (Article 7, I, in conjunction with Article 8) — collected freely, on an informed and unambiguous basis for specific purposes, with the possibility of revocation at any time. For data of minors aged 16 to 17, the specific regime of Article 14 LGPD applies.
  • Compliance with legal or regulatory obligation (Article 7, II) — where processing arises from an obligation imposed on TAIKAI.
  • Regular exercise of rights in proceedings (Article 7, VI) — to exercise and defend rights in judicial, administrative or arbitral proceedings.
  • Credit protection (Article 7, X) — where applicable, to prevent default and manage credit risk in connection with corporate users.

7. Sharing and Disclosure of Personal Data

TAIKAI may share your personal data with the following categories of recipients, where such sharing is necessary to provide the Services or has another appropriate legal basis:

7.1. Public visibility and visibility within the Community

  • Profile. When you use the Services, your profile is visible to all Community members, including Challenge participants, jurors, and the company or organisation creating each Challenge. Certain profile elements (name, photo) may also be visible to Website visitors and indexed by third-party search engines.
  • Projects. Projects submitted within Challenges are visible to team members (where applicable), Challenge administrators and jurors.
  • Crowd Jury Challenges. Certain Challenges are open to public voting, in which case projects, individual and team profiles, and project resources are publicly visible. Please do not submit projects to public Challenges if you do not wish to make this information public.

7.2. Third-party recipients

  • Organisations creating Challenges, their administrators and jurors, or other persons granted access for the sole purpose of administering the Challenge;
  • Social-media platforms providing authentication services for use of the Website;
  • Technical sub-processors that process data on TAIKAI's behalf, including cloud-infrastructure providers, data and content management and transmission systems, search-engine providers and analytics platforms;
  • Subject to your consent, social-media platforms that may advertise our Services on their platforms;
  • Regional operating partners. In the context of partnerships with regional operators — including for operations in Brazil — TAIKAI may share strictly necessary data with such partners, acting in their capacity as Sub-processors (GDPR) or Operators (LGPD), under written contract ensuring compliance with applicable data-protection obligations. The list of active operating partners is maintained and made available upon request to the DPO.

7.3. Specific cases of sharing

TAIKAI shares personal data with third parties only in the following cases:

  • Where necessary to perform the Services (e.g. providing your data to an organisation creating a Challenge in which you have registered);
  • To support the improvement and optimisation of the Website using analytics and search tools;
  • At the data subject's express request (e.g. registration via social-media authentication);
  • On the basis of your consent or a demonstrated legitimate interest;
  • To comply with legal obligations, court orders, or in response to a valid request from a competent authority, or where in good faith we consider disclosure reasonably necessary to defend TAIKAI's rights or the personal safety of its users;
  • In the context of a merger, acquisition, sale of assets or corporate reorganisation, in which case the data may be transferred as part of the transferred assets, without prejudice to the continuity of the contractually ensured protection.

Client-specific data residency. Where required by a customer or for a specific event, all personal data of TAIKAI users from that customer's account may be kept exclusively within the EEA, provided this is duly stipulated in the contract between TAIKAI and the client.

8. International Data Transfers

Personal data processed by TAIKAI is, as a rule, stored on servers located within the European Economic Area (EEA).

Transfers outside the EEA. Where, in the context of the provision of the Services or use of sub-processors, it is necessary to transfer personal data outside the EEA, TAIKAI ensures that such transfers are carried out with appropriate safeguards, namely:

  • To countries covered by an adequacy decision of the European Commission, pursuant to Article 45 GDPR;
  • To other countries, by means of Standard Contractual Clauses approved by the European Commission, Binding Corporate Rules (BCR), or any other mechanism set out in Article 46 GDPR.

Transfers involving Brazilian data subjects. Where data of data subjects located in Brazil is processed, or where data is transferred outside Brazil, TAIKAI complies with the international-transfer regime set out in Articles 33 to 36 LGPD, including:

  • By means of an adequacy decision of the Brazilian National Data Protection Authority (ANPD) on the level of protection of the destination country — where applicable and in force;
  • By means of specific contractual clauses approved by the ANPD or standard contractual clauses approved under specific regulation;
  • By means of the data subject's specific and prominent consent for the transfer, with prior information about the international nature of the operation, clearly distinguishing this purpose from other purposes;
  • By means of binding corporate rules, regularly issued certifications or codes of conduct validated by the ANPD;
  • For compliance by the controller with a legal or regulatory obligation, or for the performance of a contract or preliminary procedures relating to a contract to which the data subject is a party, at the data subject's request.

Transparency. Upon written request to the DPO, TAIKAI will provide detailed information on the international data transfers applicable to your specific case, including the safeguards adopted and how to obtain a copy of them.

9. Security Measures

TAIKAI implements appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction or damage, in accordance with Article 32 GDPR and Article 46 LGPD. Such measures include, among others, access controls, encryption in transit (TLS), encryption at rest for sensitive categories, environment segregation, audit logs and internal incident-response procedures.

Incident notification. In the event of a personal-data security incident likely to result in significant risk or harm to data subjects, TAIKAI will:

  • Notify the competent supervisory authority — the Comissão Nacional de Proteção de Dados (CNPD) in Portugal and/or the Autoridade Nacional de Proteção de Dados (ANPD) in Brazil, as applicable — within the legally required timeframes;
  • Communicate to affected data subjects, where applicable, providing information on the nature of the incident, the data involved, possible consequences and measures adopted or proposed for mitigation.

10. Data Subjects' Rights

TAIKAI recognises and ensures the effective exercise of data subjects' rights. Applicable rights vary according to the legal framework applicable to the data subject, with TAIKAI required to respect the cumulative set of rights provided under the GDPR and the LGPD.

10.1. Rights common to GDPR and LGPD

  • Right of confirmation and access. The right to obtain confirmation as to whether or not your personal data is being processed and, if so, access to that data and to information such as the purposes of processing, the categories of data, the recipients, the retention period and the applicable safeguards.
  • Right to rectification. The right to obtain, without undue delay, the correction of inaccurate or incomplete personal data, including by means of a supplementary statement.
  • Right to erasure (deletion). The right to request the erasure of personal data where: the data is no longer necessary for the purpose for which it was collected; you have withdrawn consent; you have exercised the right to object without overriding legitimate grounds for TAIKAI; or the data has been processed unlawfully.
  • Right to object. The right to object, at any time, to the processing of your data where it is based on legitimate interest or public interest.
  • Right to withdraw consent. Where processing is based on consent, the right to withdraw it at any time, without affecting the lawfulness of processing carried out previously on the basis of consent.
  • Right not to be subject to automated decisions. The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you, without human review, except in legally permitted cases.
  • Right to data portability. The right to receive personal data concerning you in a structured, commonly used and machine-readable format and to transmit it to another controller, where processing is based on consent or contract and is carried out by automated means.
  • Right to lodge a complaint with the supervisory authority. The right to lodge a complaint with the competent authority, without prejudice to any other administrative or judicial remedy.

10.2. Specific rights under GDPR (Articles 15 to 22)

  • Right to restriction of processing (Article 18 GDPR), in the cases set out therein.

10.3. Specific rights under LGPD (Article 18)

For data subjects located in Brazil, the LGPD additionally provides for the following rights:

  • Anonymisation, blocking or deletion of unnecessary or excessive data, or data processed in non-compliance with the LGPD;
  • Information about public and private entities with which the controller has shared data;
  • Information on the possibility of not providing consent and on the consequences of refusal;
  • Right to petition before the ANPD against the controller.

10.4. How to exercise your rights

To exercise any of these rights, or for clarification regarding this Notice or the processing of your data, please contact the Data Protection Officer at [email protected]. Requests will be addressed, as a rule, within a maximum of 30 (thirty) days for data subjects in the EEA (Article 12(3) GDPR) and 15 (fifteen) days for data subjects in Brazil (Article 19 LGPD), extendable for justified reasons of which the data subject will be informed.

Identity verification. TAIKAI reserves the right to request additional elements to verify the identity of the requestor, where there is reasonable doubt as to identity, in order to avoid undue disclosure of data to third parties.

11. Competent Supervisory Authorities

Without prejudice to the right to seek judicial remedy, the data subject has the right to lodge a complaint with the competent supervisory authority:

For data subjects in Portugal and other EEA Member States

  • Comissão Nacional de Proteção de Dados (CNPD) — Portugal
    • Website: https://www.cnpd.pt
    • Address: Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal
    • E-mail: [email protected]

Data subjects residing in other EEA Member States may lodge a complaint with the supervisory authority of their country of habitual residence, place of work or place of the alleged infringement.

For data subjects in Brazil

  • Autoridade Nacional de Proteção de Dados (ANPD) — Brazil
    • Website: https://www.gov.br/anpd
    • Address: Esplanada dos Ministérios, Bloco C, 1.º andar, 70046-900 Brasília-DF, Brazil
    • Channels: through the official website.

12. Direct Marketing and Communications

Subject to your prior, freely given, informed and unambiguous consent, TAIKAI may use the personal data provided to send direct-marketing communications, including newsletters, invitations to upcoming Challenges, information about events and other communications that may be of interest to you.

Consent may be withdrawn at any time, free of charge, by:

Regarding targeted ads and content on social-media platforms, you may object at any time by configuring the preferences of your account on the relevant social-media platform.

13. Updates to this Privacy Notice

TAIKAI reserves the right to amend this Privacy Notice from time to time, reflecting legislative or regulatory changes or changes in processing practices. Any amendments will be posted on the Website and will be effective upon posting.

Notification of material changes. TAIKAI undertakes to notify data subjects with a minimum of 30 (thirty) days' advance notice of material changes affecting the processing of their personal data or their rights, by means of a notice on the Website, e-mail or another appropriate means.

A cookie is a small text file that records information relating to your navigation on our website www.taikai.network — including the date and time pages are loaded; the browser used and language; pages viewed, frequency and duration of visits; number of visits; sources of traffic and location — and may facilitate your experience on the Website.

You may, at any time, delete cookies, refuse the installation of new cookies, or be notified before a new cookie is installed by configuring your browser as indicated below. Continued use of the Website after the display of the cookie banner implies acceptance of this Cookie Policy with respect to non-essential cookies for which consent has been given.

Refusal or deletion of cookies may prevent the use of certain Website features.

14.1. Types of cookies used

  • a) Session cookies (technical / essential): when you access the Website, a cookie token with a unique encrypted session-ID code is sent to your device. This token controls your access during the session and is deleted upon termination. These cookies allow us to identify your device and preferences (language, region) and are essential to the operation of the Website. They do not store personal information that could individually identify you.
  • b) Persistent cookies (functional): if you choose "Remember me" when logging in, a persistent cookie is sent to your device that is not deleted when you close your browser. This cookie contains an encrypted identifier that recognises your device on subsequent visits and automatically logs you in. It is designed to remember your preferences and improve your experience.
  • c) Analytics cookies: TAIKAI uses Google Analytics to monitor traffic on the Website. These cookies record statistical information about visits — number of unique visitors, pages viewed, activity on the Website and frequency of return — supporting the improvement of Website functionality and usability. They do not store personal information that could individually identify you. Upon client request, TAIKAI may remove all tracking pixels, marketing cookies and Google Analytics from pages associated with that specific client, for compliance reasons.

14.2. Cookies installed

TAIKAI's own cookies:

  • token — navigation session and access to the Website — duration: 10 days.
  • cookies_policy_accepted — records the user's choice regarding cookies — duration: 13 months.

Third-party cookies — Google Analytics:

  • _gid — used to distinguish users — duration: 24 hours.
  • _gat — used to throttle request rate — duration: 1 minute.
  • _ga — used to distinguish users — duration: 2 years.

Third-party cookies — Intercom:

  • GlobalizationUserLocationGroupID — anonymous visitor identifier — duration: 9 months.
  • RememberUsernameStatus — identifier for each unique browser session — duration: 1 week.

You may delete cookies already installed on your device by clearing your browser's cache. You may also configure your browser to refuse cookies or notify you before installation. For detailed instructions on Chrome, Firefox, Safari, Opera and Internet Explorer/Edge, please consult your browser's settings.

For further questions about this Cookie Policy, please contact us at [email protected] or [email protected].

15. Contacts

For any question, exercise of rights, or complaint regarding this Privacy Notice or the processing of your personal data by TAIKAI:

Data Protection Officer (DPO)

  • E-mail: [email protected]
  • Postal address: TAIKAI S.A. — For the attention of the Data Protection Officer, Via do Castelo do Queijo 395, Piso 2, Loja 22 e 23, 4100-429 Porto, Portugal

General support

Copyright © 2026 All rights reserved. Powered by LayerX
Discord CommunityEmail Support
Discord CommunityEmail Support