Privacy notice
Last updated: 19 August 2026
This notice explains how Foresight Matchmaking processes personal data. It covers this directory and matchmaking service only. Recoding Medicine applications are a separate process on the official programme site.
Who operates this service
Foresight Institute is the sole operator and controller of Foresight Matchmaking, including listings, matching, sign-in, and introductions. Website: https://foresight.org. SPRIND does not operate this directory, is not a joint controller of data processed here, and assumes no liability for matches, introductions, or listings.
Remmy — local AI on Foresight servers in Berlin
Remmy is an optional chat that helps fill your listing. If you use it (or paste text to pre-fill), that text is processed on Foresight’s own inference servers in Berlin — hardware the Institute operates locally. It is not sent to ChatGPT, OpenAI, Anthropic, or another consumer US cloud. Drafts are never published or saved as a listing until you submit the form yourself. You can skip Remmy and fill the form by hand. Match scores and blockers come from a deterministic rules engine, not from Remmy.
Independence from Recoding Medicine
Recoding Medicine is a separate programme. Eligibility, funding, and applications for that programme are handled on the official programme site, not here. Using this directory does not constitute an application to Recoding Medicine and does not create any relationship with SPRIND.
What we collect
Organisation profiles as entered by their owners: organisation details, dataset descriptions (not the datasets themselves), AI capability, and one contact person (name, email, role). Introduction messages (up to 500 characters) and accept/decline decisions. Optional self-reported joint-application outcomes (for aggregate reporting). A technical event log of profile edits and introduction state changes (security, abuse prevention, service metrics). We do not collect passwords, payment data, advertising identifiers, precise location, or any patient-level health records.
Why we process it
To help organisations find each other and form teams around open programmes on Foresight Matchmaking — currently Recoding Medicine (deadline 16 October 2026) — including sign-in, directory listing, deterministic matching, and emailed introductions.
Legal bases
Consent (GDPR Art. 6(1)(a)) when you register and maintain a profile. Legitimate interests (Art. 6(1)(f)) in operating a secure, auditable matchmaking service — including rate limits, security logs, and abuse prevention — balanced against your rights as an organisation contact. You may withdraw consent by deleting your profile in Your profile (/me), or by emailing the privacy contact below.
Who can see a listing
Listings are not on the open web. After you add a profile, other signed-in members can see the organisation and capability fields needed for partner discovery. Contact details and private dataset governance notes are never shown on listings. The default is signed-in users only. Hidden keeps you out of the directory and matching. Public (open web) is off unless you choose it. When you send an introduction, we email both listed contacts so you can continue off this platform. You can hide your profile or close introductions at any time in your settings.
Recipients and processors
Hosting and delivery of this web application may involve infrastructure providers (for example Vercel) that process request and security logs under their terms. Remmy chat and paste-to-prefill are processed on Foresight’s own inference servers in Berlin — not by a consumer LLM vendor. See the Remmy section above. If email delivery is configured, magic-link messages are sent through the operator’s SMTP provider. We do not sell personal data. We do not use third-party advertising trackers or marketing analytics pixels.
Cookies
Only strictly necessary cookies: a signed session cookie after you sign in, a locale preference, and an operator admin cookie when applicable. No non-essential cookies, no fingerprinting for advertising, no third-party trackers.
Retention
Profiles remain until you hide them, delete them in Your profile (/me), or request deletion by email. Profiles and introduction records are deleted no later than 16 October 2027 (twelve months after the application deadline), unless you ask for earlier deletion. Magic-link tokens are single-use and expire after 24 hours. Aggregate metrics that contain no personal data may be retained in reports.
Your rights
Under the GDPR you may request access, rectification, erasure, restriction, or portability of your personal data, and you may object to processing based on legitimate interests. You also have the right to lodge a complaint with a supervisory authority.
How to exercise your rights
Signed-in users can permanently delete their own profile from Your profile (/me). That action removes the profile, match cache, introductions, and magic-link tokens immediately, and anonymises related event-log entries. You can also email bradley@foresight.org from the contact address on your profile and name the organisation profile concerned. We will respond without undue delay and within one month where required by law.
Supervisory authority
You may complain to your local data-protection authority. In Germany, that is the Federal Commissioner for Data Protection and Freedom of Information (BfDI): https://www.bfdi.bund.de. A directory of EU authorities is published by the European Data Protection Board: https://edpb.europa.eu.
Contact
Privacy requests for this Matchmaker directory: bradley@foresight.org
Recoding Medicine applications and eligibility (external programme site, not this directory): Recoding Medicine applications (external) →