Privacy Policy

Stichting Food Safety & Security Foundation (FSSF)
Last updated: 10 July 2026

This policy explains what personal data the Food Safety & Security Foundation (“FSSF”, “we”, “us”) collects when you use fss.foundation, why we collect it, and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Who we are (data controller)

The controller responsible for your personal data is:

Food Safety & Security Foundation
c/o Dr. h.c. H.L.M. Lelieveld
Ensahlaan 11
3723 HT Bilthoven
The Netherlands
Email: privacy@fss.foundation
Chamber of Commerce (KvK): 93646925 · RSIN/ANBI: 866479570

FSSF is an “Algemeen Nut Beogende Instelling” (ANBI / Public Benefit Organisation) registered in the Netherlands. Our GDPR officer is Gunter Greil, BSc., reachable at the email above.

2. What we collect and why

We only collect data you actively provide or that is needed to operate the website. We do not sell personal data, and we do not use it for automated decision-making or profiling.

  • Contact form — name, email address, and the content of your message. Purpose: to receive and respond to your enquiry. Legal basis: consent (Art. 6(1)(a)) / our legitimate interest in responding (Art. 6(1)(f)).
  • Donations — when you make a donation by bank transfer, we receive the information your bank includes with the transfer (such as your name and account details) together with any message you add. Purpose: to receive, administer, and acknowledge your donation. Legal basis: our legitimate interest in administering donations and, where applicable, a legal obligation to keep financial records (Art. 6(1)(f) & (c)).
  • Analytics & cookies — usage data such as pages visited and approximate region (see section 4). Purpose: to understand how the site is used and improve it. Legal basis: consent (Art. 6(1)(a)).
  • Server logs — IP address, browser type, date/time of request. Purpose: security and reliable operation of the site. Legal basis: legitimate interest (Art. 6(1)(f)).

3. Donations

Donations are currently made by bank transfer only. The website itself does not collect or process any card or bank details, and we do not use an online payment provider. Your payment is handled entirely by your own bank; we only see the transfer information your bank passes on to us (for example your name and the amount). We keep this information as required by Dutch tax and accounting rules.

4. Cookies and analytics

We use Google Analytics, a service by Google Ireland Ltd., to see how visitors use the site (for example which pages are viewed). Analytics cookies are only set after you consent via our cookie banner; you can withdraw consent at any time. Google may process this data, which can involve transfer to servers in the United States under the appropriate safeguards (EU Standard Contractual Clauses / EU–US Data Privacy Framework). Google Analytics is configured to anonymise your IP address where available.

Strictly necessary cookies (needed for the site to function) are always active and do not require consent.

5. Social media

FSSF maintains a presence on social media platforms, including LinkedIn (LinkedIn Ireland Unlimited Company), to share updates about our work and communicate with our community. When you interact with our posts or page on these platforms, the platform processes your data under its own privacy policy, over which we have no control. If we link our own website to a social platform, this may result in data being processed outside the EU, including in the United States. We recommend reviewing the privacy policy of any platform you use.

6. Who we share data with

We share personal data only with:

  • Service providers acting on our behalf (for example our hosting provider, email provider, and payment provider), under agreements that require them to protect your data;
  • Authorities, where we are legally required to do so.

We never sell your personal data or share it for others’ marketing.

7. How long we keep it

We keep personal data only as long as needed for the purpose it was collected, or as required by law (for example, Dutch tax and accounting rules for donation records). Contact-form messages are kept only as long as needed to handle your enquiry and any follow-up.

8. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data erased, where applicable;
  • restrict or object to processing;
  • data portability;
  • withdraw consent at any time (this does not affect processing already carried out).

To exercise any of these, email privacy@fss.foundation. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

9. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows the current version.