Privacy Policy

Last updated: 13 October 2026

Who is responsible

Hybrid Humans is run by me, Tess Wehmeyer, as a sole trader (eenmanszaak) registered with the Dutch Chamber of Commerce (KvK) under number [60970553]. I decide how your personal data is used, so under the GDPR I am the controller.

This page covers anyone who visits hybridhumans.org, writes to me, books a conversation or takes part in a Season. For any question about your data, write to hello@hybridhumans.org. You'll get an answer from me, not from a department.

What I collect, and why

When you visit the site: my hosting provider records technical data such as your IP address, browser type and the pages you open. I see only overall visit numbers, not who you are. I need this to keep the site running and secure (legitimate interest, GDPR Art. 6(1)(f)).

When you write to me or book a conversation: your name, email address and whatever you choose to tell me. Booking runs through Calendly, which also stores the time you pick and any answers you give in the booking form. I use this to reply and prepare for our conversation (steps before a possible agreement, Art. 6(1)(b), or legitimate interest, Art. 6(1)(f)).

When you join a Season: your name, contact details, your answers in the intake, my own notes from the intake and sessions, and your billing details. I use this to run the Season with you and to send your invoice (performance of our agreement, Art. 6(1)(b)), and to keep accounting records (legal obligation, Art. 6(1)(c)).

You don't have to give me anything. Without your name and email address, though, I can't reply.

What you share in the room

The work is personal, and you may tell me things about your health, your history or other sensitive parts of your life. You decide what you share. I use it only to hold the work with you, and only with your explicit consent, which you give when you sign up (Art. 9(2)(a)). You can withdraw that consent at any time.

Sessions are never recorded. My notes stay with me. I do not put participant material into AI tools.

Everyone in a Season agrees to keep what others share in the room confidential. I can ask for that and hold the room to it, but I can't fully control what another participant does afterwards.

Quotes from participants

I only use a participant's words on this site or elsewhere with their permission, in the form they agreed to, and without their full name unless they asked for it.

Cookies

The site uses only what it needs to run. There are no advertising cookies and no tracking across other sites. Calendly may set its own cookies when you open the booking calendar.

Who else handles your data

I work with a small number of providers that process data on my behalf and only for what I use them for:

• Hostinger, for website hosting and visit statistics

• Calendly, for booking conversations

• Zoom, for the live sessions

• Signal, for the Season group (other members of the group see your Signal profile name)

• my email provider, for correspondence

• my bank and my accountant, for invoices and bookkeeping

Beyond that, I share personal data only when the law requires it.

If you subscribe to my writing on Substack, Substack handles your subscription under its own privacy policy.

Data outside the EU

Some of these providers, such as Calendly and Zoom, are based in the United States. Where data leaves the European Economic Area, it is protected by either the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses (GDPR Art. 45 and 46). Write to me if you want to know which applies.

How long I keep it

• Messages and bookings that don't lead to a Season: 12 months after our last contact.

• Intake answers and session notes: until your included holding year ends, then deleted. Earlier if you ask.

• Invoices and accounting records: 7 years, as Dutch tax law requires.

Your rights

You can ask me to:

• show you the personal data I hold about you and give you a copy

• correct it if it's wrong or incomplete

• delete it

• limit how I use it

• give you the data you provided in a format you can take elsewhere

• stop using it where I rely on legitimate interest

You can also withdraw your consent at any time. That doesn't affect anything done before you withdrew it.

Write to hello@hybridhumans.org. I'll answer within one month.

Keeping it safe

I keep personal data in password-protected accounts with two-step login where the service offers it. Only I can read your intake answers and session notes.

If you have a concern

Please write to me first, and I'll do what I can to fix it. You also have the right to complain to a data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you live or work in another EU country, you can go to the authority there.

Changes

If I change how I handle data, I'll update this page and the date at the top.