Privacy notice
Last updated 24 September 2026
This notice covers member accounts on this site. You can read the Lunch Talks pages without an account, and without giving us anything.
Who is responsible
The ISPE Netherlands Affiliate is the data controller for member accounts. For anything in this notice — including to exercise the rights below — write to info@ispe-nl-pharma40.org.
What we hold, and why
| Data | Why | Lawful basis |
|---|---|---|
| Email address | To sign you in, and to reach you about your account | Legitimate interests — running a members' area you asked to join |
| Display name | To identify you inside the members' area | Legitimate interests |
| Headline, organisation, job title, country, LinkedIn address, short bio | Optional. Shown only as widely as you choose, field by field | Consent — you decide per field, and can change it at any time |
| Appearing in the member directory | So other members can find you | Consent — off unless you switch it on |
Everything starts private. Each profile field defaults to "only me", and you are not listed in the directory unless you opt in. Nothing about your profile is visible to the open web unless you set a field to "anyone".
We never hold a password
Signing in uses a one-time link sent to your email address. There is no password to choose, reuse, forget or leak, and we store no password for you.
Cookies
One cookie, set when you sign in, which keeps you signed in. It is strictly necessary for the members' area to work, so we do not ask for consent for it. There is no analytics, no tracking, and no third-party advertising cookie anywhere on this site.
Where it is kept, and who else sees it
Member data is stored in a database hosted in Western Europe by Cloudflare, which processes it on our instructions and does nothing else with it. Cloudflare also serves the site itself. We do not sell your data, share it for advertising, or pass it to other organisations. Your data is not used for automated decision-making or profiling.
How long we keep it
For as long as you have an account. When an account is deleted, the account and everything attached to it — profile, preferences and sign-in history — is removed from the database, not merely hidden.
Your rights
You can ask us to:
- give you a copy of what we hold about you
- correct anything that is wrong
- delete your account and its data
- restrict or object to how we use it
- hand your data to you in a portable form
You can also withdraw consent at any time — for a profile field, set it back to "only me"; for the directory, switch the listing off. Withdrawing consent does not affect anything done before you withdrew it.
How to exercise these: email info@ispe-nl-pharma40.org. A person handles these requests — there is no self-service export or delete button yet — and we will respond within one month.
Complaints
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Changes
If this notice changes in a way that affects you, we will say so on this page and update the date at the top.