The Bletchley AI Summit — Privacy Notice
This privacy notice explains how personal data is collected and used in connection with The Bletchley AI Summit (the “Event”), an IT Revolution event in partnership with Newton. It applies to individuals who apply to attend, register for, speak at, or otherwise participate in the Event. For this Event, this notice takes precedence over the IT Revolution Events, LLC Privacy Policy Agreement to the extent of any inconsistency.
1. Who is responsible for your data
Newton Consulting Limited (“Newton”), a company registered in England and Wales (company number 04279175) with its registered address at Kingston Business Park, 2 Kingston Bagpuize, Abingdon, OX13 5FE, United Kingdom, is the data controller of personal data processed in connection with the Event.
IT Revolution Events, LLC (“IT Revolution”), an Oregon limited liability company with its address at 25 NW 23rd Place, Suite 6314, Portland, OR 97201, United States, acts as a data processor, processing personal data on Newton’s behalf to run the Event, including managing the application and registration process, programme and speaker coordination, and event communications.
2. What data we collect
In connection with the Event, the following categories of personal data may be processed: your name, job title, company or organisation, business contact details (such as email address and telephone number), professional background and related CV information provided as part of the application process, dietary or accessibility requirements you choose to share for event logistics, and records of your correspondence and participation relating to the Event.
3. Why we process your data and our legal basis
Your personal data is processed for the following purposes: to review applications and curate attendance for the Event; to register attendees and speakers and manage the Event, including logistics, communications, and on-site arrangements; to develop and coordinate the Event programme; and to send event-related communications before, during, and after the Event, including post-event follow-up.
The legal bases for this processing under Article 6 of the UK GDPR are: (a) performance of a contract, or taking steps at your request prior to entering into a contract (Article 6(1)(b)), where processing is necessary to register you for and deliver the Event; and (b) legitimate interests (Article 6(1)(f)), where processing is necessary for the legitimate interests pursued by the controller or a third party in organising and promoting the Event and maintaining professional relationships with participants, except where those interests are overridden by your interests or fundamental rights and freedoms. No special category data is intentionally collected for the Event; any accessibility or dietary information you volunteer is used solely for event logistics.
4. Who receives your data
Personal data collected through the Event application and registration process is shared between Newton, as controller, and IT Revolution, as processor acting on Newton’s behalf. Within each organisation, access is limited to personnel who need the data to deliver the Event.
Newton may use attendee data for post-event follow-up and to maintain professional relationships with participants, in accordance with this notice and applicable law. IT Revolution processes attendee data only for the direct management of the Event and in accordance with Newton’s instructions, unless you separately consent to further use (for example, by opting in to IT Revolution’s own communications at registration).
Service providers. Trusted service providers (such as registration and email platforms) may process personal data on our behalf to support the Event, under contracts that restrict their use of the data to providing those services. A list of service providers is available on request.
5. International transfers
Personal data collected for the Event may be transferred to and processed by IT Revolution in the United States, subject to appropriate safeguards required by the UK GDPR, including the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You may request further information about these safeguards using the contact details below.
6. How long we keep your data
Personal data processed for the Event will be retained for the duration of the Event agreement between Newton and IT Revolution and, upon conclusion of the processing activities, IT Revolution will return or delete the personal data it holds as processor in accordance with Newton’s instructions, unless retention is required by applicable law. Newton retains personal data as controller in accordance with its own retention policies.
7. Your rights
Under the UK GDPR, you have the right to request access to your personal data, rectification of inaccurate data, erasure of your data, restriction of processing, and portability of your data, and the right to object to processing based on legitimate interests, including direct marketing. You also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. Attendance decisions for the Event are made by people, not by automated means.
To exercise any of these rights, contact either of the addresses in Section 8. Requests received by IT Revolution will be forwarded to Newton without undue delay.
8. Contact
For Newton Consulting Limited (controller): Sarah Da Silva, Sarah.DaSilva@newtonimpact.com
For IT Revolution Events, LLC (processor): events@itrevolution.com
If you are not satisfied with how your personal data has been handled, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority: https://ico.org.uk/global/contact-us/.