Below you will find the Astrazeneca Data Privacy Standard and Code of Conduct for the Hackathon - by agreeing to these terms you are agreeing to the privacy terms and code of conduct.

The bit you need to know:

Key data will be used to register you for the event to allow for contact and collaboration (name, company, email address).

Data Privacy Standard 
KEY PRINCIPLES :

• We respect and protect privacy by collecting, using, retaining, sharing, and/or disclosing personal data fairly, transparently, and securely. 
• We respect data subject rights and respond to queries and requests made by individuals about their personal data.
• We hold third parties with whom we work to the same expectations as described in this Standard.

WHY IT MATTERS
AstraZeneca values the personal data entrusted to us, and we are committed to collecting, using, retaining, and disclosing personal data in a fair, transparent and secure way to meet Company and legal requirements for processing personal data.

WHAT YOU NEED TO KNOW
This Standard sets out the Company requirements for processing personal data and aligns with and, in some cases, exceeds the requirements of applicable laws and regulations. Local laws and regulations that apply to the activities described in this Standard may be more restrictive than this Standard. Where that is the case, the more restrictive rules must be followed. Personal Data is any information about an identified or identifiable natural person (including but not limited to our employees, patients, shareholders, contractors, or the staff of our suppliers, visitors to our buildings, or website users). In some jurisdictions, the concept of Personal Data is interpreted broadly and expansively to include information that is not obviously an identifier of an individual (e.g., IP addresses and unique device IDs). The requirements in this Standard apply to: 

• All Company employees and temporary staff who have access to Personal Data as part of their business activities, 
• Managers who are accountable for ensuring that appropriate privacy controls are in place within their business function, and 
• Programme/project sponsors who are responsible for ensuring appropriate privacy requirements are assessed at an early stage and incorporated into processes, systems, and services wherever necessary. Third parties who perform services for or on behalf of the Company are expected to embrace standards of conduct consistent with the principles of this Standard.

Protecting Personal Data

In some countries and where legally required, we will notify or gain pre-approval from the local privacy regulator prior to collecting and using any Personal Data. Data Minimisation: We will only collect and use the minimum amount of Personal Data to support our business activities and will not make personal data available to anyone (including internal staff) who is not authorised, or does not have a business need to know the information. Legitimacy: We will only use Personal Data where we have a legitimate business need or a legal obligation. AstraZeneca will only process Personal Data in the way described in the applicable privacy notice and in accordance with any consent we have obtained from the individual. Accuracy: We will keep Personal Data accurate and up-to date. Personal Data must be maintained in an accurate and up-to-date form during any processing (i.e., transfer, storage, and retrieval) to fulfil the purposes for which it is to be used. Security: We will protect any personal data collected, used, retained, and disclosed to support our business activities by following the relevant usage, technical, and organisational policies, standards, and processes. Safeguards must be put in place to protect Personal Data against a variety of threats, including: 

• Loss or theft;
• Unauthorized access, use, or disclosure; 
• Improper copying, modification, or tampering; 
• Improper retention or destruction; and 
• Loss of integrity, availability, and access to Personal Data

Employees must take appropriate steps to prevent the misuse or loss of Personal Data, to prevent unauthorised access to it, and to report any known or suspected instance of misuse, loss, or unauthorised access to their line manager and their local Privacy Representative.

Data Subject Rights and Requests: We will respond to queries or requests made by individuals about their Personal Data, and, where required by law, we will provide individuals with the ability to access, correct, and delete their Personal Data. We will provide the ability for individuals to object to further processing and to request data portability where permitted by law in their country. Where legally permitted, AstraZeneca may:

• Charge a fee for granting access;
• Refuse a request (for example, where an individual makes the same request on several occasions in quick succession);
• Apply any relevant exemptions outlined in law to withhold Personal Data. If AstraZeneca does not agree that the information is incorrect or should be deleted, we will record that the individual considers the information to be incorrect or wishes to have it deleted. In such situations, the individual may have a right to object to any further processing

Retention: We will only keep Personal Data necessary to support a specific business activity or legal or regulatory requirement. Personal Data must be:

•  Kept only for as long as it is necessary to meet or support a business activity or comply with a legal or regulatory requirement; 
• Kept in accordance with the Company Global Retention and Disposal (GRAD) schedule; and 
• Securely disposed of or destroyed at the end of the specified retention period.

International Transfers: We will ensure that any transfer of Personal Data outside the AstraZeneca group of companies complies with applicable law. Where required by law, we will obtain individuals’ consent for transferring their Personal Data outside their country of residence and, in some cases, notify or gain approval from the relevant privacy regulator prior to the transfer taking place.

Third Parties: We must ensure that access to and transfers of Personal Data to third parties are carried out for legally justifiable reasons and with suitable privacy safeguards, which may include contractual protections. We must ensure that any third parties or suppliers who will have access to AstraZeneca Personal Data: 

• Go through a due diligence process which assesses their privacy risk; and 
• Enter into a written contract with an AstraZeneca Affiliate that contains appropriate privacy clauses,

Marketing and Promotional Activities: We will abide by any relevant laws that require the consent of consumers when sending marketing communications and carrying out promotional activities. In some markets, AstraZeneca sends marketing communications directly to patients/the public via email, direct mail, telephone, and SMS text messaging. In most markets, we also send promotional content to Healthcare Professionals via some or all of these channels. Where legally required, we must ensure that such communications are only sent with the individual’s prior consent (or equivalent optin/opt-out). An opt-out mechanism will be included or be readily available to the individual in each communication (e.g., an unsubscribe function in an email). Where an individual unsubscribes from receiving communications, we must honour their request promptly and ensure we maintain a list of individuals who have opted out from receiving communications from AstraZeneca. AstraZeneca has a Data Protection Officer responsible for overseeing AstraZeneca’s compliance with EU data protection law and can be contacted at Privacy@astrazeneca.com in case of any questions or concerns regarding the processing of personal data at AstraZeneca.

Code Of Conduct

Please Read!

All attendees, partners, volunteers and staff at our hackathon are required to agree with the following code of conduct. Organisers will enforce this code throughout the event.

We expect cooperation from all participants to ensure a safe environment for everybody.

​​​​​​​Our hackathon is dedicated to providing a safe and comfortable environment and harassment-free experience for everyone, regardless of the following:

• gender
• gender identity and expression
• age
• sexual orientation
• disability
• physical appearance
• body size
• race
• ethnicity
• nationality
• religion
• political views
• previous hackathon attendance or lack of
• computing experience or lack of
• chosen programming language or tech stack

We do not tolerate harassment of hackathon participants in any form. Sexual language and imagery is not appropriate at any hackathon venue, this includes the following:

• hacks
• talks, presentations, or demos
• workshops
• any parties associated to the hackathon
• social media
• any other online media

We advise all participants to avoid showing personal spaces (such as bedrooms) on video. Please utilise the background or blur available on Teams/Zoom to protect yourselves online.

Do not give out your personal address, contact or other details to others in the hack. Should you wish to connect, allow your educational institutions to broker the connection.

Recording of personal email addresses of other candidates beyond the hack is forbidden.

All output from the hack will be open source.

Hackathon participants violating these rules will be expelled from the hackathon and your educational institution / organisation will be informed. All actions are at the discretion of the hackathon organisers.

If you see any activity breaching the Code of Conduct, please contact the Hack organisers immediately.

Email: accessibility.hackathon@astrazeneca.com

More Details

Harassment includes offensive verbal comments related to gender, gender identity and expression, age, sexual orientation, disability, physical appearance, body size, race, ethnicity, nationality, religion or political views, sexual images in public spaces, deliberate intimidation, stalking, following, photography or audio/video recording against reasonable consent, sustained disruption of talks or other events, inappropriate physical contact, and unwelcome sexual attention.

Participants asked to stop any harassing behaviour are expected to comply immediately.

As this is a hackathon, we like to explicitly note that the hacks created at our hackathon are equally subject to the anti-harassment policy.

Sponsors and partners are also subject to the anti-harassment policy. In particular, sponsors should not use sexualised images, activities, or other material. Sponsor representatives (including volunteers) should not use sexualised clothing/uniforms/costumes, or otherwise create a sexualised environment.

If you are being harassed, notice that someone else is being harassed, or have any other concerns, please contact a member of hackathon staff immediately.

If a participant engages in harassing behaviour, the hackathon organisers may take any action they deem appropriate. This includes warning the offender, expulsion from the hackathon, or reporting their behaviour to local law enforcement.

We expect participants to follow these rules at all times.

If you see any activity breaching the Code of Conduct, please contact the Hack organisers immediately.

Email: accessibility.hackathon@astrazeneca.com

Based on: https://hackcodeofconduct.org/