Yes. We reported the incident to the relevant supervisory authorities, and the case reference numbers are below so that you can quote them rather than take our word for it.

Quote the reference for the company you dealt with. If more than one applies to you, any of them will find the matter.

Day 8 Experiences Ltd runs Yacht Week. The Ski Week Ltd runs Ski Week. Both sit under Day 8 AB, registered in Stockholm, which is why the incident was reported in Sweden as well as the UK.

Quarterdeck Life Ltd is a separate company that manages the people who work the trips. If you worked with us rather than travelled as a guest, your records are most likely Quarterdeck's, and it made its own report.

Some people appear in more than one of these, most often former Yacht Week skippers whose records moved to Quarterdeck when it was set up. If that is you, more than one entry above may be relevant.

You can complain to your national data protection authority at any time, and you do not need our agreement or our involvement to do it. You can go to them directly whether or not you have raised anything with us first, and whether or not you are satisfied with what we have told you.

If you live elsewhere, your own country's authority can take your complaint.

Reporting an incident is a legal obligation, not a resolution. It does not undo what was copied, and it does not settle anything between you and us. We are saying it plainly because notifying a regulator is sometimes presented as though it closes the matter. It does not.