Privacy notice
Last updated: 25 August 2026
This notice explains how Foresight Matchmaking processes personal data. It covers this directory and matchmaking service only. Recoding Medicine applications are a separate process on the official programme site.
Who operates this service
Foresight Institute is the sole operator and controller of Foresight Matchmaking, including profiles, matching, sign-in, and introductions. Website: https://foresight.org. SPRIND is not a joint controller of data processed on this directory.
Remmy — local AI on Foresight servers in Berlin
Remmy is an optional chat that helps fill your profile. If you use it (or paste text to pre-fill), that text is processed on Foresight’s own inference servers in Berlin — hardware the Institute operates locally. It is not sent to ChatGPT, OpenAI, Anthropic, or another consumer US cloud. Drafts are never published or saved as a profile until you submit the form yourself. You can skip Remmy and fill the form by hand. Match scores and blockers come from a deterministic rules engine, not from Remmy.
Independence from Recoding Medicine
Recoding Medicine is a separate programme. Eligibility, funding, and applications for that programme are handled on the official programme site, not here. Using this directory does not constitute an application to Recoding Medicine.
What we collect
Organisation profiles as entered by their owners: organisation details, dataset descriptions (not the datasets themselves), AI capability, optional website and LinkedIn, and one contact person (name, email, role). Optional self-reported joint-application outcomes (for aggregate reporting). A technical event log of profile edits and of members opening a listing’s email or LinkedIn (security, abuse prevention, service metrics). We do not collect passwords, payment data, advertising identifiers, precise location, or any patient-level health records.
Why we process it
To help organisations find each other and form teams around open programmes on Foresight Matchmaking — currently Recoding Medicine (deadline 16 October 2026) — including sign-in, the directory, deterministic matching, and direct contact by email or LinkedIn.
Legal bases
Consent (GDPR Art. 6(1)(a)) when you register and maintain a profile. Legitimate interests (Art. 6(1)(f)) in operating a secure, auditable matchmaking service — including rate limits, security logs, and abuse prevention — balanced against your rights as an organisation contact. You may withdraw consent by deleting your profile in Your profile (/me), or by emailing the privacy contact below.
Who can see a profile
Profiles are not on the open web. After you add a profile, other signed-in members can see the organisation and capability fields needed for partner discovery, plus the contact email and LinkedIn URL if you added one. Contact name, role, and private dataset governance notes are not shown on listings. The default is signed-in users only. Hidden keeps you out of the directory and other members’ shortlists; you still see your own matches above the usual threshold. Public (open web) is off unless you choose it. You can hide your email, hide your profile, or delete it at any time in your settings.
Recipients and processors
The directory is hosted in the European Union. Hosting and sign-in email use professional infrastructure providers who process data only on Foresight Institute’s instructions (including request logs and backups). Remmy chat and paste-to-prefill run on Foresight’s own servers in Berlin — not a consumer LLM vendor. See the Remmy section above. We do not sell personal data. We do not use third-party advertising trackers or marketing analytics pixels.
Where data is stored
Directory data is stored in the European Union. If you use Remmy (optional), that text is processed on Foresight servers in Berlin. Professional infrastructure providers in the EU process hosting, backups, and sign-in emails solely on Foresight Institute’s instructions. Matching scores are computed by Foresight’s rules engine, not by an external AI vendor.
Cookies
Only strictly necessary cookies: a signed session cookie after you sign in, a locale preference, and an operator admin cookie when applicable. No non-essential cookies, no fingerprinting for advertising, no third-party trackers.
Retention
Profiles remain until you hide them, delete them in Your profile (/me), or request deletion by email. Profiles, sign-in tokens, and the log of members opening a listing’s email or LinkedIn are deleted no later than 16 October 2027 (twelve months after the Recoding Medicine application deadline of 16 October 2026), unless you ask for earlier deletion. Magic-link tokens are single-use and expire after 24 hours. Aggregate metrics that contain no personal data (for example counts of profiles or contact clicks) may be kept in reports after that date.
Your rights
Under the GDPR you may request access, rectification, erasure, restriction, or portability of your personal data, and you may object to processing based on legitimate interests. You also have the right to lodge a complaint with a supervisory authority.
How to exercise your rights
Signed-in users can permanently delete their own profile from Your profile (/me). That action removes the profile, match cache, and magic-link tokens immediately, and anonymises related event-log entries. You can also email bradley@foresight.org from the contact address on your profile and name the organisation profile concerned. We will respond without undue delay and within one month where required by law.
Supervisory authority
You may complain to your local data-protection authority. In Germany, that is the Federal Commissioner for Data Protection and Freedom of Information (BfDI): https://www.bfdi.bund.de. A directory of EU authorities is published by the European Data Protection Board: https://edpb.europa.eu.
Contact
Privacy requests for this Matchmaker directory: bradley@foresight.org
This directory is currently in beta. If you encounter a bug, paste the error message into a note to us: Report a bug
Recoding Medicine applications and eligibility (external programme site, not this directory): Recoding Medicine applications (external) →