Privacy Policy

Last updated: 3 August 2026

This Privacy Policy explains how Tobias Mayer, sole proprietor ("we", "us", or "our") collects, uses, stores, and protects your personal information when you visit our website, register for our events, or contact us.

We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are (Data Controller)

For the purposes of data protection legislation, the data controller is:

• Name / Business: Tobias Mayer (sole proprietor)
• Contact Email: tobiasmayer.uk@gmail.com
• Postal Contact: Available upon request for data protection inquiries.

If you have any questions about this policy or how we handle your personal data, please contact us using the details above.

2. The Personal Data We Collect

We may collect and process the following personal information:

• Contact Details: Name, email address, phone number.
• Event Registration Information: Role/practice type, experience level, motivations for attending, and answers to survey questions provided during registration.
• Transactional Information: Payment history and ticket details (payment processing is handled securely by third-party providers such as Ticket Tailor or Stripe; we do not store full payment card details).
• Communication Data: Any messages or feedback you send to us directly via email or contact forms.
• Technical Data: IP address, browser type, and basic analytics regarding how you interact with our website.

3. How We Use Your Data & Our Lawful Basis

We rely on the following lawful bases under UK GDPR to process your personal data:

1. Performance of a Contract: To process your event bookings, send ticket confirmations, handle payments, and deliver event logistics.
2. Legitimate Interests: To tailor and improve our events (e.g. using attendee survey answers to shape Open Space event agendas), communicate essential event updates, and manage our business effectively.
3. Consent:
   • To send you marketing communications or updates about future events (when you have actively opted in).
   • To include your details on an optional attendee list shared with other participants for networking purposes.
   Note: You can withdraw consent at any time by contacting us or clicking the unsubscribe link in our emails.

4. How We Share Your Data

We will never sell your personal information. We only share personal data with trusted third parties necessary for running our services, including:

• Service Providers / Data Processors: Event ticketing platforms (e.g. Ticket Tailor), payment gateways (e.g. Stripe), email delivery services, and website hosting providers.
• Other Event Attendees: Only if you explicitly consent to sharing your contact details on an optional networking/delegate list.
• Legal Obligations: If required by law or to protect our legal rights.

5. How Long We Keep Your Data

We keep your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting obligations:

• Event Registration & Transaction Data: Retained for up to 6 years to comply with financial and tax accounting requirements.
• Mailing List / Consent Data: Retained until you withdraw your consent or unsubscribe.

6. How We Keep Your Data Secure

We maintain appropriate security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Access to personal data is restricted to those who require it to manage event operations.

7. Your Data Protection Rights

Under UK GDPR, you have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we rectify inaccurate or incomplete information.
• Erasure ("Right to be Forgotten"): Request that we delete your personal data (where we have no legal requirement to keep it).
• Restriction: Request that we restrict the processing of your data in certain circumstances.
• Object: Object to our processing of your data where we rely on legitimate interests.
• Withdraw Consent: Withdraw your consent for marketing or list sharing at any time.

To exercise any of these rights, please email us at tobiasmayer.uk@gmail.com.

8. How to Complain

If you have concerns about how we collect or use your data, please contact us first so we can try to resolve the issue. You also have the right to lodge a complaint with the UK data protection regulator:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk
Helpline: 0303 123 1113

9. Changes to This Privacy Policy

We may update this policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.