Privacy Notice MAKE IT REAL: Creator Commerce Challenge
Version 1.0, last updated 15 oktober 2026 *In the event of differences between translations, the Dutch text shall prevail.*
MAKE IT REAL is a challenge for students. You build a real brand with a real shop, and we handle your data with care. This notice explains what data we use, why, for how long, and what your rights are.
1. Who are we?
MAKE IT REAL is organised by:
- Probo Sign B.V., Fortuinweg 17, 9101 PE Dokkum
- Media Innovatie Campus (MICA), Sixmastraat 15, 8932 PA Leeuwarden
Probo and MICA jointly decide why and how your data is used. This means we share responsibility (as joint controllers under Article 26 GDPR). We have agreed between us who does what. MICA is your main contact for all privacy questions: info@mica.nu. You can also exercise your rights through Probo; we will then coordinate this between us.
2. Who does this notice apply to?
Everyone who visits the site, creates an account, signs up (individually or as a team), is invited by a team member, or takes part in events such as the hackathon and Demo Night @ MICA and the showcase at Visualize Expo.
3. What data do we use, and why?
| What | Purpose | Legal basis |
|---|---|---|
| Name, email address, password (encrypted) | Creating an account, logging in, contacting you about the challenge | Performance of the participation agreement |
| Age group (18+, 16–17) | Checking whether you can take part and whether extra arrangements are needed | Performance of the participation agreement |
| School, course, skills | Assessing whether you fit the target group, forming teams | Performance of the participation agreement |
| Team name, team members, role in the team | Organising teams | Performance of the participation agreement |
| Your idea, motivation, links to your work | Assessing your application, providing guidance, judging | Performance of the participation agreement |
| Email address of a team member you invite | Sending one invitation email | Legitimate interest (being able to form the team) |
| Public team profile | Showing which teams are taking part | Consent (the captain makes the team public; you choose whether your name is visible) |
| Photos and videos in which you can be recognised | Communications about MAKE IT REAL | Consent (a separate opt-in, which you can withdraw at any time) |
| Project results: brand name, shop, products, pitch, outcome | Showing what the challenge achieves | Performance of the participation agreement (see participation terms) |
| Name and email address after the challenge | Telling you about a future edition | Consent |
| Technical data (IP address, login times, error messages) | Security and keeping the site working properly | Legitimate interest |
We do not ask for your date of birth, address, telephone number or citizen service number (BSN). Do not enter sensitive information, such as details about your health or religion, in free-text fields.
4. What is public?
Only what you choose to make public: team name, school, course, skills, skills you are looking for and a short introduction. Your first name or photo will only appear online if you enable this yourself. Your idea stays hidden until you choose to make it visible. Email addresses, motivation and links are never public.
5. Are you under 18?
You can take part from the age of 16. If you are 16 or 17, we ask you to confirm that your parent or guardian knows you are taking part. You do not need to start a business for the challenge. If you are under 16, unfortunately you cannot sign up yet.
6. Who do we share your data with?
We never sell your data. We only share what is necessary with:
- The jury: reads the applications and pitches of finalist teams, without your email address. Jury members have agreed to keep this information confidential.
- Service providers that run the site: Lovable (website and hosting), Supabase (database and login) and Resend (email). We have data processing agreements with them; they may only use your data on our behalf.
- Probo account: if you create a Probo account during the challenge, Probo's terms and privacy statement apply to that account.
- Your school (Firda or NHL Stenden): only if you ask us to (for example, for academic credits), or with your consent. Otherwise, we do not share anything with your school.
7. Data outside Europe
Some service providers are based wholly or partly in the United States. Wherever possible, we choose storage in the EU. If data is transferred outside the EU, this only happens with the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
8. How long do we keep your data?
- Application, account and team data: for up to 12 months after this edition ends (the edition runs up to and including Visualize Expo, 25 March 2027). After that, we delete everything.
- Invitations that are not accepted: deleted after 30 days.
- Name and email address for a future edition: until you unsubscribe.
- Photos and videos: for as long as your consent remains in place. If you withdraw it, we will no longer use them in new communications.
- Deleting your account? We will erase your data within 30 days, except for anything already shared publicly about the outcome.
9. Security
Passwords are stored in encrypted form. Only the organisers can access applications, and only as far as necessary. Everyone has their own login; teams never share a single password.
10. Your rights
You can access your data, have it corrected or deleted, or download it. You can object and withdraw your consent at any time. You can manage many of these things yourself in your dashboard under My data. Or email info@mica.nu; we will respond within one month. If you disagree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
11. Changes
If we update this notice, you will see this in the date at the top. We will send participants a message about any important changes.