Privacy & cookie policy

Access to Medicine Foundation, located at Naritaweg 227-A 1043 CB, Amsterdam, The Netherlands, is responsible for the processing of personal data as shown in this privacy statement. You can contact us regarding this policy at info@accesstomedicinefoundation.org.

Personal data that we process

Access to Medicine Foundation processes your personal data by using our services and / or by providing this information to us.

Below is an overview of the personal data we process:

• Your name

• Organisation name

• Contact details

• Contact details of your organisation

• Your job title

• Social media account handles

• IP address

• Information about your interaction with our website and access times

• Information included in your resume and cover letter when you apply for a job.

Special and / or sensitive personal data that we process

Our website and/or service does not intend to collect data about website visitors who are younger than 16 years, unless they have permission from a parent or guardian. However, we cannot check if a visitor is older than 16. We therefore advise parents to be involved in the online activities of their children, to prevent data about children being collected without parental consent. If you are convinced that we have collected personal data about a minor without this permission, please contact us at info@accesstomedicinefoundation.org. We will then remove this information.

For what purpose and on what basis we process personal data

The Access to Medicine Foundation processes your personal data for the following purposes and on the following legal bases under the GDPR:

• To communicate with you or answer questions you ask us - Legitimate interest (Art. 6(1)(f))

• To keep you up to date about our activities such as report publications, events, and newsletters - Consent (Art. 6(1)(a))

• To administer your participation in online events, webinars, or surveys - Consent / performance of a request (Art. 6(1)(a)/(b))

• For general research and analysis, to improve the quality and security of our website based on statistical data - Consent, where non-essential cookies are used (Art. 6(1)(a))

• To comply with legal obligations including disclosure obligations - Legal obligation (Art. 6(1)(c))

Where processing relies on consent, you can withdraw that consent at any time, free of charge, as described under "Cookies, or similar techniques, that we use" below.

Automated decision-making

Access to Medicine Foundation does not make decisions based on automated processing on matters that can have (significant) consequences for people. These are decisions that are taken by computer programs or systems, without a person (for example an employee of the Access to Medicine Foundation) sitting in between.

How long we store personal data

The Access to Medicine Foundation does not store your personal data longer than is strictly necessary to achieve the purposes for which your data is collected. Cookie-specific retention periods are listed in the Cookiebot cookie declaration referenced below.

Sharing personal data with third parties

The Access to Medicine Foundation shares your personal data with various third parties if this is necessary for the execution of the agreement and to comply with any legal obligation. With companies that process your data on our instructions, we conclude a processor agreement to ensure the same level of security and confidentiality of your data. The Access to Medicine Foundation remains responsible for these processing operations.

Where a third party is located outside the European Economic Area (EEA), we ensure an appropriate safeguard is in place before transferring personal data, such as an adequacy decision or Standard Contractual Clauses (SCCs). In addition, The Access to Medicine Foundation provides your personal data to other third parties (see our cookie policy). We only do this with your express permission.

Information Security

Access to Medicine Foundation is certified to ISO/IEC 27001, the international standard for information security management, and applies documented information security policies covering access control, incident response, and business continuity to protect the data described in this policy.

Cookies, or similar techniques, that we use

The Access to Medicine Foundation uses cookies and similar technologies on this website. We use Cookiebot as our consent management platform to obtain, record, and manage your cookie consent preferences, and to provide a detailed, up-to-date overview of the individual cookies placed on this website (name, provider, purpose, and expiry period).

Cookies fall into the following categories:

• Strictly necessary: Required for the website to function (e.g., security, load balancing)

• Functional: Remember your preferences and settings

• Analytics: Understand how visitors use our site, in aggregate/statistical form

• Marketing/social media: Shared with social media, advertising, and analytics partners, who may combine it with other information you've provided to them or that they've collected from your use of their services

On your first visit to our website, the Cookiebot consent banner asks for your explicit, granular consent before placing any cookie other than strictly necessary cookies. You can accept, reject, or customise your consent by category. You can change your cookie settings or withdraw your consent at any time via the Cookiebot cookie declaration link on this website, which lists every individual cookie in use.

View, modify or delete data

You have the right to view, correct or delete your personal data. In addition, you have the right to withdraw your consent to data processing or to object to the processing of your personal data by The Access to Medicine Foundation. You are also entitled to data portability. This means that you can submit a request to us for the personal data we hold from you to be sent to you or another organisation named by you, in a digital file. You can exercise these rights by contacting us at info@accesstomedicinefoundation.org.

To verify that a request for access has been made by you, we may ask for limited identifying information. We will not ask for a full copy of your passport or ID card. We will respond to your request as quickly as possible, and in any case within one month of receipt; this period may be extended by a further two months where necessary, taking into account the complexity and number of requests, in which case we will inform you of the extension within one month. The Access to Medicine Foundation also wants to point out that you have the possibility to submit a complaint to the national supervisor, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

How we protect personal data

The Access to Medicine Foundation takes the protection of your data seriously and takes appropriate technical and organisational measures, in line with its Information Security Policy, to prevent the abuse, loss of, unauthorised access to, unwanted disclosure of, and unauthorised modification of your data. If you feel that your data is not properly secured or there are indications of its abuse, please contact us at info@accesstomedicinefoundation.org.

Last Updated: 10 September, 2026