Privacy Policy

mathcontest.org — American Mathematics Competitions (AMC) International Group Leader for Greece, Türkiye, et. al.

Who we are Data we collect Purposes & legal bases Exam recordings Retention Sharing International transfers Your rights Security Contact

Last updated: 23 October 2025

Who we are and how to contact us

mathcontest.org is operated by AMC Abroad (the “Organizer”). We coordinate participation in the American Mathematics Competitions (AMC) for schools and students.

Organizer and contact for privacy questions and requests: AMC Abroad (amcabroad@mathcontest.org).

In many cases, schools collect and share student information with us for competition purposes. Schools act as independent data controllers for the data they collect from students and families. The Organizer acts as a data controller for data submitted to mathcontest.org and for exam security data we receive or generate.

Scope

This policy explains how we handle personal data when schools and students use mathcontest.org to register for, prepare for, and participate in AMC exams conducted online.

Data we collect

We do not use biometric recognition, and we do not perform automated facial identification. Recordings are used solely to support exam integrity reviews.

Purposes and legal bases (GDPR)

Purposes

• Organize and administer the AMC exams (scheduling, access, and support).
• Maintain exam integrity and investigate suspected breaches (review screen/video/audio, verify compliance with rules).
• Provide support to schools and teachers (setup, technical guidance, incident handling).
• Fulfill reporting and audit requirements related to the competition.
• Improve reliability and security of the online exam platform.

Legal bases

• Performance of a contract (GDPR Art. 6(1)(b)): to register schools/students, enable access to the chosen exam session, and deliver the competition services.
• Legitimate interests (Art. 6(1)(f)): to ensure exam integrity, prevent cheating or misuse, secure our systems, and support schools during exam delivery. We apply proportionate measures and minimize data where possible.
• Consent (Art. 6(1)(a)) where required by local law, for example when a school collects parental consent for recordings or optional communications. Consent can be withdrawn at any time without affecting prior processing; if withdrawn, participation or certain features may not be possible.
• Legal obligations (Art. 6(1)(c)) when we must retain or disclose information to comply with law or enforceable requests.

Schools determine the appropriate legal basis when they collect information from students and families. Where schools act as independent controllers, they remain responsible for providing their own privacy notices and obtaining any consents required by local law.

Exam recordings (how they work)

• Schools set up recording software on the exam computers. Recordings capture the computer screen, webcam view of the student’s upper body and surroundings, and environmental audio.
• To reduce intrusion while preserving integrity, schools may configure the software to blur the student’s face. However, on-screen actions, upper‑body movements, and room activity must remain visible and audible to verify compliance.
• By default, recordings are stored by the school and are not routinely uploaded to the Organizer. The Organizer may request sample or full recordings from a school only for technical infrastructure compliance review, exam integrity check, or incident investigation.
• If the Organizer receives recordings, we use them solely for integrity review. We do not use them for marketing or unrelated profiling.

Retention

• Registration and participation data: retained for the competition cycle and up to 3 months afterward (for audit and support), unless a longer period is required by law or for the establishment or defense of legal claims.
• Exam recordings at schools: schools keep recordings until the official release date for that exam series or the period directed by the Organizer. After that date, schools should securely delete them unless an investigation is ongoing or a longer retention is required by law.
• Recordings provided to the Organizer: retained only as long as necessary to complete the review or investigation, and generally no longer than 90 days after the publication of the contest results unless required by law.

Sharing and recipients

• Service providers (processors): we use vetted providers for hosting, email and support, and exam delivery. They process personal data only on our instructions and under contract.
• Schools: independent controllers for the information they collect; they may share student data and recordings with the Organizer when required for competition administration or integrity review.
• Mathematical Association of America: We share school, student roster information, and student contest responses for competition evaluation and statistics.
• Authorities: we may disclose information when required by law or to protect rights, safety, and exam integrity.

We do not sell or share personal data.

International data transfers

We may process and store data in countries other than your own. Where we transfer personal data from the EEA/UK to countries without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum where applicable), along with technical and organizational measures to protect the data.

Your privacy rights

Depending on your location, you may have the right to:

• Access your personal data and receive a copy.
• Request correction of inaccurate or incomplete data.
• Request deletion (erasure) in certain circumstances.
• Object to or request restriction of processing, especially where based on legitimate interests.
• Data portability (to obtain your data in a commonly used format).
• Withdraw consent at any time for processing based on consent.
• Lodge a complaint with your local data protection authority.

If your school collected the data from you, please contact the school first so they can address your request as the controller. You can also contact us at amcabroad@mathcontest.org for data we control.

Children’s privacy

AMC exams involve students, including minors. Schools are responsible for providing the appropriate notices to parents/guardians and, where required by law, obtaining consent for participation and recordings. We support schools with guidance and limit processing to what is necessary for the competition and exam integrity.

Cookies and similar technologies

We use strictly necessary cookies to operate sign‑in and secure exam sessions. The exam platform may use additional cookies to maintain session integrity and performance. Where required by law, we will provide a cookie banner and obtain your consent for non‑essential cookies.

Security

We apply technical and organizational measures to protect personal data, including restricted access, encryption in transit, secure configuration, and staff training. No system is 100% secure; we promptly investigate and act on suspected incidents.

Changes to this policy

We may update this Privacy Policy from time to time. We will indicate the “Last updated” date above and, where appropriate, provide additional notice.

Contact

For privacy questions or requests, contact:

• Email (general and privacy): amcabroad@mathcontest.org

© 2025 AMC Abroad. All rights reserved.