Section 18 Notice

How We Process Your Personal Information

Motus Corporation Pty Limited - mx Hackathon

Effective Date: 13 June 2025

Version: Final

1. Introduction

Motus is a diversified (non-manufacturing) business in the automotive sector with unrivalled scale and scope in South Africa, and a selected international presence, primarily in the United Kingdom and Australia.

Motus' unique business model is fully integrated across the automotive value chain through its four key business segments namely, Import and Distribution, Retail and Rental, Motor-related Financial Services and Aftermarket Parts.

Motus Corporation (Pty) Limited is a 100% owned subsidiary of Motus Holdings Limited and is based in Bedfordview South Africa. This document sets out our processing of your personal information with regards to your participation in the mxhackathon.

2. Key Definitions

Operator

means a person who processes personal information for a responsible party in terms of a contract or mandate, without coming under the direct authority of that party;

Personal Information

means information relating to an identifiable, living, natural person, and where it is applicable, an identifiable, existing juristic person, including, but not limited to:

  • information relating to the race, gender, sex, pregnancy, marital status, national, ethnic, or social origin, colour, sexual orientation, age, physical or mental health, well-being, disability, religion, conscience, belief, culture, language, and birth of the person;
  • information relating to the education or the medical, financial, criminal or employment history of the person;
  • any identifying number, symbol, e-mail address, physical address, telephone number or other particular assignment to the person;
  • the blood type or any other biometric information of the person;
  • the personal opinions, views, or preferences of the person correspondence sent by the person that is implicitly or explicitly of a private or confidential nature or further correspondence that would reveal the contents of the original correspondence;
  • the views or opinions of another individual about the person; and the name of the person if it appears with other personal information relating to the person or if the disclosure of the name itself would reveal information about the person

Processing

means any operation or activity or any set of operations, whether or not by automatic means, concerning personal information, including:

  • the collection, receipt, recording, organisation, collation, storage, updating or modification, retrieval, alteration, consultation, or use;
  • dissemination by means of transmission, distribution or making available in any other form; or
  • merging, linking, as well as blocking, degradation, erasure, or destruction of information.

Responsible Party

means a public or private body or any other person which, alone or in conjunction with others, determines the purpose of and means for processing personal information.

3. Method of Collecting Personal Information

We collect your personal data directly from you when you make use of our Web-based platform located at www.mxhackathon.co.za.

4. Supply of Personal Information To Us

To enable your participation in the Hackathon hosted by Motus, we require certain personal information from you. This includes your full name, contact details, educational institution, and any other information necessary to verify your eligibility and facilitate your involvement in the event.

Important: In some cases, we may request additional details such as your identity document number or student ID to ensure compliance with applicable legal and regulatory requirements.

All other information you provide is voluntary and will be used to enhance your experience during the Hackathon, including communication, logistical arrangements, and post-event engagement.

You will be informed of the specific information required at each stage of the registration and participation process.

5. Consequences of Failure To Provide Information

Providing the required personal information is essential for registration and participation in the Hackathon.

If you do not supply the mandatory details requested during the sign-up process—such as your name, contact information, and student verification—we will not be able to process your application or allow you to participate in the event.

Any additional information requested beyond the mandatory fields is voluntary and intended to enhance your experience. However, failure to provide such voluntary information may limit our ability to offer certain features, communications, or support during the Hackathon.

6. Lawful Basis of Processing

We will only process your personal information to comply with legislative requirements where we are the responsible Party and our contractual requirements where we are the Operator.

7. Purposes for Processing Personal Information

In addition to collecting your information for the purpose of complying with legislative obligations as described above, we collect and process your personal information to facilitate your participation in the Hackathon hosted by Motus. The purposes for processing include:

  • Registering your details on our event management system to manage your application, participation, and communications related to the Hackathon.
  • Verifying your eligibility to participate, which may include confirming your student status or identity.
  • Coordinating event logistics, such as scheduling, team assignments, and access to Hackathon resources.
  • Providing support and updates throughout the Hackathon, including reminders, announcements, and technical assistance.
  • Conducting post-event follow-ups, such as feedback surveys, prize distribution, and showcasing winning projects.
  • Marketing and promotional activities, where you have given consent, including sharing highlights or testimonials from the Hackathon.
  • Complying with legal and regulatory obligations, including data protection laws and any applicable competition rules.

8. Disclosure of Personal Information to Third Parties

To facilitate the smooth operation of the Hackathon, we may share your personal information with trusted service providers and partners who assist us in managing the event. This includes support with registration, communication, logistics, judging, and technical infrastructure.

These third parties are contractually bound to process your personal information only on our instructions, solely for the purposes of the Hackathon, and in compliance with the Protection of Personal Information Act (POPIA). We take appropriate technical and organizational measures to ensure your data is handled securely and confidentially.

We do not sell or disclose your personal information to unrelated third parties. Any sharing of your data is strictly limited to what is necessary to deliver a safe, engaging, and well-organized Hackathon experience.

9. Retention of Your Personal Information

We will retain your personal information only for as long as necessary to fulfill the purposes for which it was collected—namely, to manage your participation in the Hackathon and related post-event activities.

Where applicable, we may retain your information for longer periods if required by law or for legitimate business purposes, such as reporting, auditing, or resolving disputes.

Once your information is no longer needed, it will be securely deleted or anonymized in accordance with the Protection of Personal Information Act (POPIA) and our internal data retention policies.

10. Data Processing Outside The Republic of South Africa

All personal information collected for the Hackathon will be processed and stored within the Republic of South Africa. We do not transfer or process your personal information outside of South Africa.

We apply appropriate technical and organizational security measures to protect your information in accordance with the Protection of Personal Information Act (POPIA). Your data will only be accessed by authorized personnel and service providers who are contractually bound to maintain its confidentiality and security.

11. Your Rights

Subject to applicable laws and regulations, you own your personal information. You may exercise a number of rights, including the right:

  • to be informed whether your personal information is being processed;
  • to request details of how we process your personal information;
  • to request access to copies of your personal information retained by us;
  • to be informed of about the purpose of processing of your personal information;
  • to be informed of the justification that is relied on by us to process your personal information;
  • to be informed about any third parties your personal information was disclosed to (locally or internationally);
  • to request the correction of inaccuracies in the records containing your personal information and, if applicable, completion of your data;
  • to object to the processing of your personal information;
  • to request the destruction or deletion of your personal information;
  • to request that any third parties that have records containing your personal information provided by us to them are notified and required to correct, complete, destroy or delete your personal information;
  • to lodge complaints regarding any adverse outcomes that may result from the analysis of your personal information by automated systems;
  • to seek damages should you sustain any harm as a result of the unlawful processing of your personal information;
  • to withdraw your consent to the processing of your personal information after the date of withdrawal (any processing up to that date will remains lawful);
  • to request a restriction of the processing of your personal information if you dispute the correctness of your personal information, or if the processing is unlawful, but you do not wish to have your personal information deleted;
  • to receive the personal information in our possession in a structured, standardized machine-readable format and to have this information provided to third parties;
  • to raise a complaint to the Information Regulator (complaints.IR@justice.gov.za) or any other approved competent authority if you are of the opinion that the processing of your personal information by us is unlawful.
}