PROVITAL Rising Stars
Challenge

PRIVACY POLICY FOR THE RISING STARS CHALLENGE 2026

At PROVITAL, S.A. (hereinafter “we”), we are committed to respecting your privacy and complying with laws and regulations to ensure that the personal information you give us is kept secure and processed fairly.

This privacy policy (“Privacy Policy”) covers how we collect, use, and process your personal information when you register to the Rising Stars Challenge 2026 organised by us ("the Competition"). The privacy policy and terms of use for our website apply to the use of our website when participating in the Competition as well. You can read it here: https://www.weareprovital.com/en/privacy

If you do not agree to this Privacy Policy, please do not partake in our Competition.

In accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights, PROVITAL, S.A. hereby provides the following information in its capacity as the Data Controller of the collected personal data:

• Data controller company: PROVITAL, S.A.
• Tax Identification Number (NIF): A08584997
• Address: Pol. Ind. Can Salvatella – Gorgs Lladó, 200 - 08210 Barberà del Vallès (Barcelona)
• Email address: info@weareprovital.com

How we use your personal data

We will treat your information as private and confidential (but we reserve the right to disclose this information in certain circumstances, as set out below). Your personal information can be used in any of the following ways:

Competition participation

If you choose to participate in our Competition we ask you to provide the required information, as set out in the Registration page (your name and surnames, country of residence, email address, name of your university or school and a proof of your status as student).

The legal basis for the processing of personal data is the consent given by the data subject via the relevant acceptance box, in accordance with Article 6.1.a) of the GDPR, and with the provisions of Art. 21 of the LSSI-CE.

We process this information so that you are able to participate in our competition and so that we can notify/announce you as winner online, in accordance with the terms of the competition agreed between us. For this, your name and surnames, as well as your country of residence and the name of your university may appear in our publications both in our website and our social media. Your email address will never be publicly published.

In the event that you are chosen as one of the 11 finalists, we will contact you by email to request a photo and a brief description (BIO) of who you are, what you have studied and your future plans within the formulation sector. Giving us this information is not required to maintain your position as a finalist of the Rising Stars Challenge 2026. We simply want to use this information to give more visibility to your proposal and that our contacts, distributors and clients get to know who is behind your formulation idea and your video.

If you win a prize, we will contact you to ask for your bank account data, such as the name and address of your bank, IBAN number, SWIFT code and any other information required to make the bank transfer for the unique purpose to deliver the prize. This information will not be shared or published and will be used exclusively for the purpose of awarding the prize, if applicable.

Use of name and image our communications

We must outright state that you shall agree that we use your name to market the competition. By becoming a competitor in the Rising Stars Challenge 2026, you must understand that we will use your name and profile image to co-brand the event. We will include your name in Provital’s webpage and communications, including but not limited to our posts on this event. Also, we need your consent to include your name in all publications related to your formulation and your video, so that we can always give you the credit that corresponds, both online and in our printed materials.




Processing your Enquiries

If you contact us about our Competition or other related services, the forms you complete or the emails you send may include information about you, such as your name, your email address and your enquiry. We use this information to respond to your enquiries.

In line with the legitimate interest we have in promoting our business, we will process your enquiries to reply and provide you with information about the services we offer.

You are under no obligation to provide us with any details, but if you don't provide all relevant information, we may not be able to help.

Direct Marketing

If you ask to be added to our mailing list through our website, we will keep you updated with information on our services by email, unless you would like to be removed from that list (in which case please let us know by clicking unsubscribe at the bottom of any marketing email that you receive).

Who we share your information with

If you win or if you are a finalist of the Competition, we may publish the name, country and/or school submitted by you when entering the competition, such as online on our websites, social media sites or other platforms, as agreed to in the terms of this Competition.

In certain circumstances insofar as it is reasonably necessary for the purposes set out in this privacy policy we may share your personal information with carefully-selected third parties, who are engaged to help us run, manage and improve the quality of the Competition, as well as for marketing purposes, and/or to protect and defend our rights and property. Activities which are carried out by third party service providers may include: shipment service providers, and other selected third parties who are contracted by us to fulfill our obligations to you under our Competition Terms.

We only provide these companies with the information which they need to carry out their services for specified purposes and in accordance with our instructions, and they will not be permitted to use the information for other purposes. We require all third parties to treat your personal information as carefully and confidentially as we do and to take appropriate security measures to protect your personal information in line with our policies.

You should be aware that if we are requested by the police or any other regulatory or government authority investigating suspected illegal activities to provide your personal information or any other information we obtain about you, we are entitled do so.

If another company acquires us or all or some of our assets, that company will possess the same information and will assume the rights and obligations with respect to that information, in which case you will be notified via email and/or a prominent notice on the Website of any changes in ownership or use of your information, as well as any choices you may have regarding that information.

Except as set out above, we will never sell, distribute or disclose any of your personal data (except anonymous aggregate information) to any third party without your consent.

Security

We follow generally accepted industry standards to protect the personal information submitted to us. We will take all steps reasonably necessary, including all reasonable technical and organisational precautions, to ensure that your personal data is treated securely and in accordance with this Privacy Policy.

Where we store your data and international data transfers

Some information we hold may be stored on servers that may be located outside of the European Economic Area (EEA). With certain service providers, we may use specific contracts approved by the European Commission which give personal data the same protection it has in Europe.

If you would like to find out more about these safeguards, please let us know by writing to info@weareprovital.com.

Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

Third-party links

We may from time to time include links to third party websites on our Website (such as links to social media platforms like LinkedIn and Instagram). The linked third party sites operate fully independent from us and have separate and independent privacy policies, which we encourage you to review when you visit those sites. This Privacy Policy only covers our Competition and does not cover any competitions, websites or platforms of third parties.

Changes to this privacy policy

We may update this Privacy Policy from time to time. The amended Privacy Policy will be posted on the Website so please check this page regularly for changes. We may also notify you of changes, where feasible, via email and/or in any other appropriate way.

Rights of the data subject

When the User's personal data are processed, they shall be deemed to be a data subject, as established in the GDPR, and, as such, they shall be entitled to the fulfilment of the following rights by the data controller:

Right of access
Right to rectification
Right to restrict processing
Right to erasure
Right to information
Right to data portability
Right to object
Right to lodge a complaint with a supervisory authority


Contacting us

You can contact us if you have any questions regarding this policy or the use of your data at info@weareprovital.com.


Before sending your registration to the Rising Stars Challenge 2026, you must agree to the Privacy Policy in order to give your express and informed consent for the data to be processed for the stated purposes.

The system will automatically assign you an ingredient from one of our 11 product subcategories. In order to be able to receive by email all the details and documentation you need to generate your formulation proposal, please read carefully the following Non- disclosure agreement and sign at the end.

Non-disclosure agreement
This Non-Disclosure Agreement governs the disclosure of information by Provital, S.A. (“Provital”), with registered office in Gorgs Lladó 200, 08210 Barberà del Vallès, Barcelona, Spain, to every registrant (the "Recipient") at the Rising Stars Challenge 2026 for the exclusive and sole purpose of providing to the Recipient with the necessary information to create the formulation with which they will compete in the Rising Stars Challenge 2026 (the “Purpose”). Provital wish to ensure that such Confidential Information remains strictly confidential.
Provital and the Recipient will be collectively referred to as the “Parties”.


1. Confidential Information. As used herein, “Confidential Information” shall mean any and all technical and non-technical information that Provital provides to the Recipient, whether in graphic, electronic, written or oral form, and including but not limited to any proprietary information, as well as any works of authorship, models, inventions, know-how, processes, documents, and formulae related to the current, future, and proposed products and services of Provital, and also any information concerning any research, experimental work, development, design details and specifications.

2. Non-Disclosure. The Recipient undertakes not to use the Confidential Information disclosed to it for any purpose other than the Purpose. The Recipient shall not disclose, use, publish, disseminate or otherwise communicate the Confidential Information of Provital, directly or indirectly, in whole or in part, at any time or in any manner and notwithstanding any termination or expiration of this Agreement except as approved in writing in advance by Provital.

3. Notice of Disclosure. The Recipient shall immediately notify Provital upon discovery of any loss or unauthorized disclosure of the Confidential Information.

4. Use of Confidential Information. All Confidential Information is provided “AS IS,” without any warranty of any kind. Recipient recognizes and agrees that nothing contained in this Agreement shall be construed as granting it any property rights, by license or otherwise, to any Confidential Information, or to any invention or any patent, copyright, trademark, or other intellectual property right that has issued or that may issue, based on such Confidential Information. Recipient shall not make, have made, use or sell for any purpose any product or service or other item using, incorporating or derived from any Confidential Information, nor make any filings or registrations based on the receipt or use of the Confidential Information, absent separate written approval of Provital.

5. No Reproduction. Confidential Information shall not be reproduced in any form except as required to accomplish the Purpose of this Agreement. Any reproduction of any Confidential Information shall remain the property of Provital and shall contain any and all confidential or proprietary notices or legends which appear on the original.

6. Term. This Agreement shall terminate five (5) years after the Effective Date; provided, however, Recipient’s obligations under this Agreement shall survive termination of the Agreement between the parties and shall be binding upon the Recipient’s heirs, successors and assigns. Upon written request of Provital, the Recipient shall promptly return to the Company all documents and other tangible materials representing the Confidential Information and all copies thereof.

7. Miscellaneous.

7.1. Amendments and Waivers. Any term of this Agreement may be amended or waived only with the written consent of Provital.

7.2. Sole Agreement. The Agreement sets forth the complete, exclusive and final statement of the agreement between the parties as to the subject matter hereof and supersedes all prior and contemporaneous agreements, understandings, negotiations and discussions, whether oral or written, between the parties regarding such subject matter.

7.3. Notices. Any notice required or permitted by this Agreement shall be in writing and shall be deemed sufficient upon delivery, when delivered personally or by overnight courier or sent by email (upon confirmation of receipt), or forty-eight (48) hours after being deposited as certified or registered mail with postage prepaid, addressed to the party to be notified at such party’s address as set in this document or as subsequently modified by written notice.

7.4. Governing Law and Jurisdiction. This Non-Disclosure Agreement shall be governed by and construed in accordance with the laws generally applicable in Spain (derecho común español), without applying the rules concerning conflicts of law. The Parties, with an express waiver of any other jurisdiction that by law may correspond to them, expressly submit to the jurisdiction of the courts of the city of Barcelona (Spain) the resolution of any issue, discrepancy, controversy or claim that may arise from the execution, interpretation or fulfilment of the Non-Disclosure Agreement, including those referring to non-contractual obligations that may arise from or might be related to the Non-Disclosure Agreement.

7.5. Severability. If one or more provisions of this Agreement are held to be unenforceable under applicable law, the parties agree to renegotiate such provision in good faith. In the event that the parties cannot reach a mutually agreeable and enforceable replacement for such provision, then (i) such provision shall be excluded from this Agreement, (ii) the balance of the Agreement shall be interpreted as if such provision were so excluded and (iii) the balance of the Agreement shall be enforceable in accordance with its terms.

7.6. Assignment. The Recipient will not assign or transfer any rights or obligations under this Agreement without the prior written consent of Provital. Any such assignment without prior consent shall be null and void from the beginning. Recipient shall not export, directly or indirectly, any technical data acquired from Provital pursuant to this Agreement or any product utilizing any such data.

7.7. Advice of Counsel. EACH PARTY ACKNOWLEDGES THAT, IN EXECUTING THIS AGREEMENT, SUCH PARTY HAS READ AND UNDERSTOOD ALL OF THE TERMS AND PROVISIONS OF THIS AGREEMENT.


In Witness Whereof, the parties hereto have caused this Non-Disclosure Agreement to be executed as of today.


[Provital]
By: Gema Soto
As: Proxy of Provital

[Recipient]