Legal & Privacy

We value your privacy and are committed to protecting your personal data. This Privacy Statement explains how we collect, use, and share your personal information in accordance with the General Data Protection Regulation (GDPR).

Data Controller

The data controller responsible for your personal data is Carbon13. Located at:

c/o Salisbury House, Station Road, Cambridge, CB1 2LA, United Kingdom.
c/o Studio Legal, Rechtsanwälte Berliner Freiheit 2, 10785 Berlin, Germany.

Types of Personal Data Collected

We may collect and process the following types of personal data:

  • Identity Data: Name, username, or similar identifiers.
  • Contact Data: Email address, telephone numbers, and postal address.
  • Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.
  • Usage Data: Information about how you use our website, products, and services.
  • Application Data: including areas of expertise, founder information, and background.
  • Community Data: including your profile, experience and any other information that may give context to your involvement at any stage in our community.
  • Marketing and Communications Data: Your preferences in receiving marketing from us and your communication preferences.

Purpose of Data Collection

We use your personal data for the following purposes:

  • To provide and manage our services: Processing transactions, managing subscriptions, and providing customer support.
  • To personalize your experience: Customizing content and recommendations based on your interests.
  • To improve our services: Conducting analysis and research to enhance our website, products, and services.
  • To communicate with you: Sending updates, newsletters, and promotional materials, subject to your preferences.
  • To ensure security: Protecting our website, systems, and data from unauthorized access and breaches.

Legal Basis for Processing

We rely on the following legal bases to process your personal data:

  • Consent: Where you have given clear consent for us to process your personal data for a specific purpose.
  • Contract: Processing is necessary for the performance of a contract to which you are a party.
  • Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
  • Legitimate Interests: Processing is necessary for our legitimate interests, provided your interests and fundamental rights do not override these interests.

Data Sharing and Disclosure

We may share your personal data with:

  • Our Community of past, present and future founders, experts and related people and systems used in running our programmes and company.
  • Service Providers: Third-party companies that provide services on our behalf, such as payment processing, data analysis, domain and other experts and customer support.
  • Business Partners: Partners with whom we collaborate to offer products or services.
  • Legal Authorities: Government bodies and law enforcement agencies where required by law or to protect our legal rights.

Data Retention

We keep your personal data only for as long as we need it for the purposes set out above. We do not keep personal data longer than necessary, and we review the data we hold from time to time and delete or anonymise anything we no longer need.

How long we keep data depends on why we hold it. The main things we consider are the purpose we collected it for, whether we still have an active relationship with you, whether you have asked us to stop using it, and whether we are under a legal or regulatory obligation to keep it. Once none of these applies, we delete or anonymise the data.

Where the law requires us to keep certain records for a minimum period, we keep them for that period and no longer. This applies in particular to financial, accounting and tax records, and to identity records we are required to hold under anti-money-laundering law.

We may keep data beyond our normal review point where we need to preserve it in connection with a legal claim, a regulatory or tax matter, an audit, or a request you have made to us. Once that matter is resolved, we delete or anonymise the data if we no longer need it.

If you want to know how long we will hold a particular piece of your data, or you want us to delete data we no longer need to keep, please contact us at the Data Controller addresses above.

Your Data Protection Rights

Under GDPR, you have the following rights:

  • Access: Request access to your personal data.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data under certain circumstances.
  • Restriction: Request restriction of processing your personal data under certain circumstances.
  • Objection: Object to the processing of your personal data under certain circumstances.
  • Portability: Request transfer of your personal data to another organisation or to you, in a structured, commonly used, and machine-readable format.

Recording, Transcription and AI Tools

To protect the privacy of all participants and comply with applicable data protection laws (including the UK GDPR, EU GDPR, and Data Protection Act 2018), attendees must not record, stream, or use any device or software to capture, transcribe, or analyse event content without prior written consent from the organiser and all affected individuals.

This prohibition includes the use of AI-powered microphones, transcription tools, or note-taking services that process audio or text, particularly where such tools transmit or store data outside the United Kingdom or European Economic Area.

Only authorised recordings made by or on behalf of the organiser will occur during the event. If such recording takes place, attendees will be clearly notified in advance, and any personal data captured will be processed in accordance with this privacy policy.

Participants found to be recording or processing data in breach of this clause may be removed from the event and, where appropriate, reported to the relevant data protection authority.

Exercising Your Rights

To exercise your rights or for any inquiries regarding your personal data, please contact us at the Data Controller addresses.

We will respond to your request within one month of receiving it.

Changes to This Privacy Statement

We may update this Privacy Statement from time to time and any changes will be visible on this page. Your continued use of our services after the effective date of the changes constitutes your acceptance of the revised Privacy Statement.

Effective Date

This Privacy Statement is effective as of 29th July 2020 and was last updated on 5th August 2026.