WE HUMAN, MB (hereinafter "we", "us", "the Company") operates DemoDay — a 48-hour paid online engineering challenge platform available at demoday.lt.
Contact: hello@demoday.lt
This Privacy Policy applies to all participants (engineers), partner companies, and visitors of demoday.lt. It complies with the EU General Data Protection Regulation (GDPR) 2016/679 and the EU Artificial Intelligence Act (2024/1689).
2.1 Spot Registration (Engineers)
| Data | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Full name | Identify participant, display to reviewing companies | Contract (Art. 6(1)(b)) | Until account deletion or 12 months after last challenge |
| Email address | Registration, notifications, prize payouts | Contract (Art. 6(1)(b)) | Until deletion or 12 months |
| LinkedIn URL | Optional profile signal for hiring companies | Consent (Art. 6(1)(a)) | Until deletion or consent withdrawal |
| Role / Level / Stack | Matching participants to relevant tasks | Contract (Art. 6(1)(b)) | Until deletion |
| AI tools used | Challenge eligibility and task assignment | Contract (Art. 6(1)(b)) | Until deletion |
| Location | Regional reporting, prize logistics | Contract (Art. 6(1)(b)) | Until deletion |
| Source (how you heard) | Marketing analytics (anonymised) | Legitimate interest (Art. 6(1)(f)) | 90 days, then anonymised |
2.2 Challenge Submissions
| Data | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Submitted code / repo links | Judging, displayed to partner companies | Contract (Art. 6(1)(b)) | 90 days after challenge end |
| Submission notes | Judging context | Contract (Art. 6(1)(b)) | 90 days after challenge end |
| AI scoring output (score 0–100, strengths, weaknesses) | Ranking, prize allocation — see Section 5 (AI) | Contract + AI Act Art. 13 | 90 days after challenge end |
2.3 Partner Companies
| Data | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Company name, contact email | Account management, invoicing | Contract (Art. 6(1)(b)) | Duration of contract + 10 years (tax law) |
| Task briefs posted | Shared with participants for challenge | Contract (Art. 6(1)(b)) | Until task deletion |
| Payment info | Processed via Stripe — we do not store card data | Contract (Art. 6(1)(b)) | As required by tax law |
2.4 Website Visitors
| Data | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Browser cookies (analytics) | Understanding traffic patterns — only with consent | Consent (Art. 6(1)(a)) | Until consent withdrawal, max 13 months |
| IP address (server logs) | Security, abuse prevention | Legitimate interest (Art. 6(1)(f)) | 30 days |
We use the following cookie categories:
| Data | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Strictly necessary | Session management, security (CSRF) | No consent required | Session |
| Analytics (optional) | Anonymous traffic analysis via Plausible / similar privacy-first tool | Consent required | Max 13 months |
You can withdraw cookie consent at any time by clicking the cookie settings link in the footer or the banner.
We do not sell personal data. We share data only with:
DemoDay uses AI to assist in evaluating challenge submissions. In compliance with EU AI Act Articles 13 and 50:
System classification: Our submission scoring system qualifies as a high-risk AI system under Annex III, Section 4 of the EU AI Act (AI systems used in recruitment and employment decisions).
What AI does: Anthropic Claude analyses submitted code, notes, and task context to generate a score (0–100), strengths, weaknesses, and a ranking recommendation. This output is one input to human judges — not an autonomous hiring decision.
Human oversight: All final prize and hiring decisions are made by human judges from partner companies. No participant is accepted or rejected solely by automated means.
Your rights under AI Act Art. 26: You have the right to request a human review of any AI-generated assessment affecting you. Contact: hello@demoday.lt
Meaningful explanation: Upon request, we will explain the main factors that influenced your AI-generated score within 5 business days.
| Data | Purpose | Legal Basis | Retention |
|---|---|---|---|
| Access (Art. 15) | Request a copy of all data we hold about you | hello@demoday.lt | Within 30 days |
| Rectification (Art. 16) | Correct inaccurate data | hello@demoday.lt | Within 30 days |
| Erasure (Art. 17) | Request deletion of your data | hello@demoday.lt | Within 30 days |
| Restriction (Art. 18) | Limit how we process your data | hello@demoday.lt | Within 30 days |
| Portability (Art. 20) | Receive your data in machine-readable format | hello@demoday.lt | Within 30 days |
| Object (Art. 21) | Object to processing based on legitimate interest | hello@demoday.lt | Immediately |
| Withdraw consent (Art. 7(3)) | Withdraw any consent at any time without affecting prior processing | hello@demoday.lt | Immediately |
You may also lodge a complaint with the State Data Protection Inspectorate of Lithuania (VDAI): vdai.lrv.lt
We implement appropriate technical and organisational measures including:
In the event of a data breach affecting your rights, we will notify you and supervisory authorities within 72 hours as required by GDPR Art. 33–34.
We may update this policy as the platform evolves. Material changes will be communicated by email to registered participants at least 14 days before taking effect. The latest version is always available at demoday.lt/privacy.
WE HUMAN, MB
Email: hello@demoday.lt
Website: demoday.lt