Draft prepared for EUVC's review. It is not legal advice. EUVC and British Business Bank should check it with their own advisers before publication.

Privacy notice

The Emerging Manager Summit

Who is responsible

Under the UK GDPR and the EU GDPR, EUVC is the "controller" of your personal data. That means EUVC decides how and why it is used. "We" means EUVC.

• Company: EUVC Portugal, Lda, Alameda das Linhas de Torres, N.º 230 – 5º A, 1750-150 Lisboa, Portugal. NIPC PT513784080.
• Contact: hello@eu.vc
• Our representative in the UK: EUVC UK LTD, 4th Floor c/o Isomer Capital LLP, 17a Curzon Street, London W1J 5HS. Company number 15697760.

British Business Bank plc presents the Summit with us and selects attendees with us. It is a separate controller: it decides for itself how it uses the data we share with it, and its own privacy notice applies to that use.

• Company: British Business Bank plc, Steel City House, West Street, Sheffield S1 2GQ. Company number 08117656.
• Contact: its Data Protection Officer, dataprotection@british-business-bank.co.uk

What we collect and where it comes from

When you apply, you give us:

• your name, work email, job title, LinkedIn link, firm name and website, HQ country, UK region and role
• your fund number, fund status, target fund size and investment stage
• any link to British Business Bank (an investment in your fund, or an application to Investor Pathways Capital)
• your preferred track, networking formats and learning goals
• optional: sector focus, a colleague who also applies, the newsletter box

If we approve you, you later give us your attendance confirmation, dietary needs, access needs, badge name, whether you agree to appear in photos, session bookings and Fund Canvas (facts about your fund). When you book a session with a host (a Pitch Roulette table, an expert corner, a 1:1 or a Peer Circle), you can add a short note for the host.

We also create data: our reviewers' notes, marks that help them (such as "fund III or later"), whether you checked in on the day, and a small amount of technical data. If a colleague names you on their form, we use it only to link the two applications.

The technical data is:

• Server logs. Our hosting provider records technical logs, such as IP address, browser type and time, for a limited period.
• Abuse protection. To stop misuse of our forms, we keep a scrambled (hashed) form of your IP address for at most one day.
• Cookies. The site sets no tracking or advertising cookies. Only organisers who sign in get a session cookie.
• Email delivery. For the emails we send you, we record whether they were delivered or bounced. We do not track whether you open them or click their links.

We need the required answers to consider your application. The required ticks show that you have read this notice and the Recording Notice. They are not consent.

Why we use your data

• Assess your application and tell you our decision. We select attendees together with British Business Bank, which gets priority places for the funds it backs. Legitimate interests (our own good reasons, such as choosing the right people for a free event) and steps you ask us to take before you attend.
• Approve applications from funds that British Business Bank backs. If your firm is on British Business Bank's list of the funds it backs, you apply with your work email address at that firm, and you confirm that address on your personal page, the system approves your application automatically, for up to two people per firm. It never declines anyone automatically, and our staff can change any decision. Legitimate interests: the priority places we agreed with British Business Bank.
• Run the Summit for attendees (confirmations, badges, lanyards, check-in, bookings and emails). Legitimate interests and steps you ask us to take.
• Suggest sessions to you from your application and your Fund Canvas answers. Our staff review the suggestions, and you choose what you book. Legitimate interests.
• Dietary and access needs. We and the venue, Sopwell House, use them to arrange the day. Your explicit consent. You can withdraw it at any time.
• Share data with British Business Bank (see "Who receives your data"). Legitimate interests: running and selecting the Summit together.
• Share your profile with our banking partner, HSBC Innovation Banking, only if you tick the box for it. Your consent. You can withdraw it at any time; a profile that HSBC Innovation Banking has already received is then in its care.
• Send the EUVC newsletter. Your consent, in a separate box that you tick yourself. You can unsubscribe at any time.
• Record sessions and take photographs. We record the main stage, every masterclass and the workshop, and a photographer works on the day. You choose a lanyard that tells the photographer whether you agree to appear in photos. See the Recording Notice.
• Keep records and keep systems secure. Legitimate interests and legal obligations.

People make every other decision about applications. The system decides nothing else by itself.

Who receives your data

• EUVC staff who run the Summit.

• British Business Bank, as a separate controller:

  • your application, with the marks that help our reviewers (such as "fund III or later"), so that it can help select attendees
  • if you attend: the attendee list (your name, firm, job title, email and badge name, whether you confirmed your place, and whether you checked in on the day) and your Fund Canvas answers
  • photographs from the day, for its own channels

  It does not receive your dietary or access needs, our reviewers' notes, your bookings, the emails we send you, or your choice about the banking partner.

• Sopwell House, the venue: your name with your dietary and access needs, only with your consent, to prepare food and access on the day.

• HSBC Innovation Banking, our banking partner: only if you tick the box, before the Summit, your name, firm, job title, email, fund size and stage, so that it can prepare a meeting with you.

• The hosts of what you book (an LP at a Pitch Roulette table, an expert at a corner or 1:1, a Peer Circle host): your name, your firm and the note you write when you book. Hosts never see your Fund Canvas.

• The public, if you appear in a main-stage recording or in a photograph that EUVC or British Business Bank publishes. The Recording Notice explains when that can happen and how to avoid it.

• Our processors, who handle data for us on our instructions:

  • EUVC UK LTD, which runs the system for us
  • Railway, which hosts it (servers in the EU West region)
  • Twilio SendGrid, which sends our emails
  • Google, only for sign-in by the staff of EUVC, British Business Bank and our banking partner

Transfers outside the UK and EU

British Business Bank and Sopwell House are in the UK. The EU has decided that the UK protects personal data to the EU standard (an adequacy decision).

Railway, Twilio SendGrid and Google are US companies. We rely on these safeguards:

• The EU–US Data Privacy Framework and its UK Extension. Twilio Inc., Railway and Google LLC each state that they are certified.
• If the Framework does not apply, standard contractual clauses and the UK addendum. They are part of the Twilio and Railway terms.

Ask us for a copy of the safeguards.

How long we keep it

• Application and event data, including declined and waiting-list applications: deleted six months after the Summit, by 30 May 2027.
• Exceptions: recordings and published photographs, which have no end date (you can ask us to remove you, see the Recording Notice), and anything we must keep for legal reasons.
• Newsletter: until you unsubscribe.

British Business Bank and HSBC Innovation Banking decide for themselves how long they keep what we share with them.

Your rights

You can ask us to:

• give you a copy of your data
• correct it
• delete it
• restrict how we use it
• send it to you or to another organisation

You can object to any use that relies on legitimate interests. You can withdraw consent at any time, without affecting earlier use. Some rights apply only in some cases.

Email hello@eu.vc. We reply within one month. It is free. We may ask you to prove who you are. For what British Business Bank does with your data, contact its Data Protection Officer (see "Who is responsible").

Complaints

You can complain to:

• the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt), because EUVC Portugal, Lda is established in Portugal
• the UK Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113
• the data protection authority in the EU country where you live or work (list of authorities)

Changes

We will post changes here and update the date. We will email you about changes that matter.

Last updated: [Date of publication]