Privacy Policy

1. About this Privacy Notice

At MSF we make sure we protect the information you give us. References to “MSF”/“we”/“us”/”our” are to Médecins Sans Frontières / Artsen zonder Grenzen, Plantage Middenlaan 14, 1018 DD Amsterdam The Netherlands.

This privacy notice is written in accordance with relevant data protection legislation including the General Data Protection Regulation.

This privacy notice sets out how MSF collects, uses and stores personal data via our international website (“Website”) www.msf.org. This Policy does not cover MSF’s presence on social media platforms such as, including but not limited to: Instagram, Youtube, Facebook, Linkedin, Twitter, Tumblr, Pinterest, Flickr, and on publishing platforms such as, including but not limited to: Issuu, Scribd, Medium on which we have established our own presence. In the context of those platforms, we are merely another user and the privacy policies as well as the terms and conditions of those platforms are applicable.

If you’ve any questions please contact: dpo@amsterdam.msf.org

2. When do we collect information about you?

We collect information:

when you use our website, through cookies.

We may automatically collect the following information with regard to each of your visits to the Website:

Technical information, including the operating system and platform, browser type and version; 
Details of your visits to the Website, including but not limited to: every ‘HTTP Query’ your browser client sent to our server(s); the full Uniform Resource Locators (URL) clickstream to, through and from the Website (including date and time); page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, traffic data, location data, weblogs and other communication data. This information does not identify you.

3. About cookies

Like most websites, our Website places “cookies” – a small text file – in the browser of your computer. Cookies help us to make the site work as you expect it to and collect information about how you use our website and analyse the website’s traffic. However, we do not store any information that identifies you personally. We just save a unique session identifier which then helps us find your user profile and associated preferences, to facilitate your next visit.

Cookies can be either “persistent” or “session” based. Our Website uses both types of cookies.
Persistent cookies are stored on your computer, contain an expiration date (by default the cookies expire after 23 days), and may be used to track your browsing behaviour upon return to the issuing website or component. You can remove persistent cookies by following directions provided in your internet browser’s “Help” menu.

Session cookies are short-lived, are used only during a browsing session, and expire when you quit your browser.
You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. Instructions on how to do so will vary from browser to browser but you can find out more at www.allaboutcookies.org. Some features and functionality may be lost if you choose to disable cookies. Also, remember that you will have to adjust the cookie settings for each browser and device and you use to visit our Website. The content sent using the cookie refers to the terminal and not to the person for whom the cookie was issued. Consequently, this content is not different from one user to another on the same terminal.
Our Website may contain links to other sites that may use cookie technology. We do not have access to, or control over, these cookies.

What cookies do we use?

Strictly Necessary cookies

These cookies are necessary for the website to function and cannot be switched off in our systems. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

Functional cookies

Google Analytics: These cookies allow us to count visits and traffic sources to be able to measure and evaluate the performance of our site and the audience in order to optimize the site and its editorial choices according to their respective performances. Without these cookies, we would not know when you visited our site and would not be able to evaluate if it works correctly. Google analytics collects no personal data nor IP addresses.

_ga_DLHWDN150K

_ga

4. How do we use your information

As a general rule, your personal data will not be used for any other purpose than those for which they were voluntarily provided to us. Your personal data are shared or transferred to third parties if such sharing or transfer is authorised by you or required to achieve the purposes for which you have provided them to us. It means that we may share your personal data with service providers, who help assist us in fulfilling our purposes. Personal data may also be shared with third parties when required by law or by a court order.

Your information may also be used for technical purposes, including:

To ensure that content from the Website is presented in the most effective manner for you and for your computer
statistical purposes; and
analyse our fundraising activity

5. Who has access to your data

Trained staff

Your information is only accessible by trained staff. We regularly review who has access to your information. As a general rule, your personal data will only be accessible insofar as it is necessary to fulfill the purpose for which it was collected. For instance, the data you provide for donations will be accessible to our donations department, our fundraising and marketing team and to service providers, if any, for the purpose of processing your donation. We do comprehensive checks on any contractors before we work with them. We always put a contract in place that sets out how they manage the personal data they collect or have access to.

Disclosure of information

We will never share your Personal Information with any other company or third party without your consent, except in the following circumstances (each as permitted by applicable law, in particular, with regard to a transfer out of the EEA, as applicable):

as set out in this Policy;
when we are required to do so by law, for example, in response to a subpoena, in response to a court order or other legal obligation, or in response to a valid request from a law enforcement agency;
to protect the security or confidentiality of our records and systems;
in special cases when we have reason to believe that disclosing this information is necessary to identify, contact, or bring legal action against someone who may be causing injury to or interference with our rights, or
in the event that we sell or transfer all, or any portion of, our business or assets (including in the event of any reorganisation, dissolution, spin-off, or liquidation) we reserve the right to transfer your Personal Information to the relevant acquirer, successor, purchaser or beneficiary, or any appropriate combination of them.

We operate globally and may have a need to transfer certain Personal Information to countries outside the EEA which do not provide an adequate level as required under EU data protection law. We use Standard Contractual Clauses to ensure that your Personal Information is adequately protected and your privacy respected in the case of such a transfer.

6. How do we keep your information safe?

We use reasonable precautions to protect your Personal Information and to store it securely. Our Website has a secure SSL certificate, a global standard security technology that enables encrypted communication between the web browser and the web server.
Unfortunately, the transmission of information via the internet is not completely secure. We will do our best to protect your Personal Information, but cannot guarantee the security of your information transmitted to our Website; any transmission is at your own risk.

7. How long do we keep your information?

We keep your information for as long as it’s necessary in connection with the purposes defined above in “How do we use your information?”.
If you request to receive no further contact from us, we'll keep only the basic information about you on our suppression list in order to avoid sending you unwanted materials in the future, for the duration allowed by the application legislation.

8. Our legal basis for processing personal data

Organisations need a lawful basis to collect and use personal data under data protection law. The law allows for six ways to process personal data (and additional ways for sensitive personal data). Three of these are relevant to the types of processing that MSF carries out:

A person’s consent (eg to send you direct marketing by e-mail or SMS);
Processing that is necessary for compliance with a legal obligation (eg to process a gift aid declaration); and
Our legitimate interests (please see below for more information).

Our legitimate interests may include:

Charity Governance; including delivery of our charitable purposes, statutory and financial reporting and other regulatory compliance purposes;
Administration and operational management; including responding to solicited enquires, providing information and services, research, events management, the administration of volunteers and employment and recruitment requirements.

If you'd like to change our use of your personal data in this manner, please get in touch with us using the details above.

9. How can you change your information and what are your rights?

Contact us at dpo@amsterdam.msf.org if you'd like to change or update your personal information.

You have a number of rights under data protection legislation:

You can request any information we hold on you. Email us at dpo@amsterdam.msf.org and ask for it in writing. You may be asked for proof of identity.
You have the right to ask us to stop using or to restrict the processing of your personal data.
You can withdraw your consent to us processing your data at any time (where such processing is based on consent eg to send you electronic direct marketing).
If you believe our records are inaccurate you have the right to ask for those records concerning you to be updated. To update your records please get in touch with us using the details above.
In accordance with the provisions of the General Data Protection Regulation, you have a right to erasure (“to be forgotten” i.e. to have your personal data deleted from our database), or transferred to another organisation (“data portability”).
If you have any concerns about the way your data is being used or if you’d like to make a complaint, please contact us using the details above.
You are entitled to file a complaint about how MSF treats your data. To do so, you may directly contact: privacy@autoriteitpersoonsgegevens.nl

10. When do we update this notice?

We change this Privacy Notice when we need to. If we make any significant changes in the way we treat your personal information we’ll make this clear on our websites or by contacting you directly.

Last updated on 26 July 2023.
Any all rights on this document belong to MSF. Any reproduction, without written consent, is strictly forbidden.

11. Editor

MSF
Médecins Sans Frontières / Artsen zonder Grenzen
Plantage Middenlaan 14 - 1018 DD
Amsterdam
The Netherlands.

12. Web hosting

Opalstack LLC

30 N Gould St Suite R
Sheridan, Wyoming 82801
United States

support@opalstack.com

Server based in Frankfurt, Germany