Privacy Policy — Soolvit

This Privacy Policy explains how Soolvit collects, uses, stores, protects and communicates the personal data of users of its platform. Soolvit is a platform dedicated to managing challenges, open innovation programmes, hackathons, calls for projects and other initiatives that enable companies, organisations, startups, students, researchers and entrepreneurs to collaborate. This policy is established in accordance with Algerian Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data, as amended and supplemented by Law No. 25-11 of 24 July 2025, as well as applicable Algerian laws.

The Soolvit platform is operated by Leanovator, a company established in Algeria. Legal company name: SARL Leanovator Address: 70, Rue Didouche Mourad, Algiers Centre, Algiers, Algeria Data Protection Officer (DPO): support@soolvit.com Leanovator is responsible for the personal data processing activities it determines for its own purposes, including account management, platform operation, security, support, subscriptions and Soolvit communications. When a company or organisation uses Soolvit to organise a challenge or programme, it may determine the purposes and procedures for certain processing activities relating to participants. The respective roles and responsibilities of Leanovator and the organisation are determined according to the processing actually carried out and, where necessary, by contract.

The data collected depends on the features used and the information provided by users. 2.1. Identification and Contact Data - First and last name; - Username; - Email address; - Telephone number, where requested; - Profile photo, where provided; - Position, company or organisation. 2.2. Account Data - Account login details; - Password in a secure form; - Roles and permissions; - User preferences; - Information required for authentication; - Records of operations relevant to the operation and security of the account. 2.3. Application and Challenge Data When a user participates in a challenge, call for projects or programme, the data processed may include: - Form responses; - Information about a startup, company or project; - CVs and professional profiles; - Professional or academic information; - Documents and files submitted; - Information about team members; - Application status and history; - Information required to participate in the programme. 2.4. Evaluation Data As part of juries and evaluations, Soolvit may process: - Grades and scores; - Comments; - Evaluations; - Results and rankings; - Information relating to the selection process. Access to this data is restricted to people authorised for the relevant programme. 2.5. Technical Data To ensure the operation and security of the platform, certain technical data may be processed: - IP address; - Connection dates and times; - Browser type; - Operating system; - Device information; - Technical and security logs; - Information required to diagnose errors.

Personal data is used, in particular, to: - Create and manage user accounts; - Authenticate users and manage their permissions; - Enable participation in challenges and programmes; - Manage applications and evaluations; - Facilitate exchanges between participants, organisers, juries and mentors; - Provide requested services; - Send notifications necessary for the operation of the platform; - Provide technical support; - Manage subscriptions and billing; - Ensure security and prevent unauthorised use; - Maintain and improve the platform; - Produce statistics; - Comply with applicable legal obligations; - Defend Leanovator's rights and interests. The data collected must be relevant and limited to what is necessary for the purpose concerned.

Depending on the purpose, processing may be necessary to perform a requested service, manage a contractual relationship or comply with a legal obligation, or may be based on the individual's consent where required. Leanovator ensures that processing is carried out in accordance with the conditions set out in applicable Algerian law. Where processing is based on consent, consent is obtained appropriately and may be withdrawn under the conditions provided by law.

Soolvit may offer users the option to receive newsletters, news, event invitations and information about its activities. Where consent is required, promotional communications are sent only to people who have given their consent. Subscribing to the newsletter is separate from creating an account or using Soolvit's main features. Users may unsubscribe at any time using the link provided in emails. Where necessary, Leanovator retains information to demonstrate subscription and honour unsubscribe requests. Messages strictly necessary for account security, managing a requested service or performing a contractual relationship are distinguished from promotional communications.

When a user participates in a challenge organised by a company or organisation, certain data may be shared with the organiser to manage the programme. Depending on the challenge, this data may include identity and contact details, form responses, submitted documents and information relating to participation. Organisers may access only the data necessary for their duties and the relevant programme. Where export features are available, exportable data must be limited to what is necessary. Access and permissions must be configured to prevent unauthorised viewing or extraction. Data obtained as part of a challenge must not be reused for a purpose incompatible with the purpose for which it was collected. Where necessary, data-sharing arrangements and the parties' responsibilities are defined in the terms of use and agreements entered into with organisers.

Depending on the service used, data may be accessible to: - Leanovator employees who are authorised to access it; - Soolvit administrators with the necessary permissions; - Challenge organisers; - Authorised jury members and mentors; - Partners participating in a programme, where sharing is necessary; - Technical and hosting service providers; - Email delivery providers; - Payment service providers, where necessary; and - Competent authorities where required by law. Leanovator limits access to and disclosure of data to what is necessary for the relevant purpose.

Soolvit may use service providers for hosting, maintenance, security, email, notifications, payments and other technical features. Where these providers process personal data on behalf of Leanovator, their work must be governed by appropriate confidentiality, security and data protection obligations. Providers may access only the information necessary to perform their services.

Personal data is retained for no longer than is necessary to fulfill the purposes for which it was collected or processed, in accordance with applicable Algerian legislation on the protection of personal data. The retention period is determined based on the nature of the data, the purpose of the processing, the duration of the relationship with the data subject, and the applicable legal and contractual obligations. When the retention of certain data remains necessary to comply with a legal obligation, to manage contractual obligations, or to establish, exercise, or defend legal claims, such data may be retained for the period required for that purpose. Upon expiration of the applicable retention period, the data is deleted or anonymized, subject to legal retention obligations and other applicable legitimate grounds. Retention periods are defined and documented by data category as part of the internal management of data processing.

Under applicable Algerian law, data subjects may exercise the rights granted to them by law, including rights of access, rectification and objection, as well as other rights applicable to the nature of the processing. Where processing is based on consent, the individual may withdraw consent under the conditions provided by law. These rights are subject to the conditions and limitations provided by law.

For any request concerning personal data, you may contact: Leanovator — Operator of Soolvit 70, Rue Didouche Mourad, Algiers Centre, Algiers, Algeria DPO: support@soolvit.com To protect personal data, additional information may be requested to verify the applicant's identity where necessary. Requests are handled under the conditions and time limits set out in applicable Algerian law. Where the relevant conditions are met, data subjects may also lodge a complaint with the National Authority for the Protection of Personal Data (ANPDP).

Leanovator implements appropriate technical and organisational measures to protect data against unauthorised access, loss, destruction, alteration or unauthorised disclosure. These measures may include: - Access controls and permission management; - Secure authentication; - Communications protection; - Backups; - Security updates; - Limiting privileges; - Logging of relevant operations; and - Incident management procedures. Access to data is limited to people who need it to perform their duties.

The Soolvit website may use cookies and similar technologies. Some cookies are necessary for the operation of the platform, particularly for authentication, security and session management. Soolvit also uses, or may use depending on its configuration, analytics tools to understand how the site is used and improve its features. These tools may use cookies or similar technologies to measure audience and analyse browsing activity. Where consent is required, non-essential analytics tools must not be activated until consent has been obtained. Users must be able to manage their choices and, where applicable, withdraw their consent. The categories of cookies actually used, their purposes and their retention periods must be detailed in the cookie management mechanism and applicable documentation.

Users may submit business, financial, technical or strategic information about their startups and projects. This information is used in connection with the challenges, programmes and services for which it was provided. Where it contains personal data, that data is processed in accordance with this policy. The sharing of documents or information with an organiser, jury, mentor or partner must be limited to the needs of the relevant programme. Confidential information may also be protected by separate contractual commitments.

Leanovator may amend this policy to reflect legal, technical or functional changes to Soolvit. The current version is published on the Soolvit website. In the event of a material change, appropriate information measures will be implemented in accordance with applicable law.

For any questions about this policy or the processing of personal data: Leanovator — Operator of Soolvit 70, Rue Didouche Mourad, Algiers Centre, Algiers, Algeria DPO: support@soolvit.com