Privacy and Cookie Statement Stichting Democratie en Media

Privacy Statement Stichting Democratie en Media
Stichting Democratie en Media (SDM), located at Spuistraat 112-D, 1012 VA Amsterdam, is
responsible for the processing of personal data as set out in this
privacy statement.

In short, our privacy statement means that we only use your personal data
to carry out our work and that we will not share it with others unless
this is necessary for that purpose. We will carefully secure your personal data. We do this,
for example, by periodically having our IT systems tested.

If you have any questions that are not answered in this privacy statement, if you have suggestions
or comments about its content, or if you have complaints about the way
we handle your personal data, we would like to hear from you. You can
send an email to: info@sdm.nl

Website Visit / Cookies
For an overview of the cookies we collect, please refer to the cookie statement
on our website www.sdm.nl. We use Greenhost for the hosting of our
website.

Newsletter and other communication
You can sign up for the SDM newsletter, which we use to inform interested parties
about SDM’s activities. Your email address will be added to the list of subscribers if
you provide explicit consent for this. Every newsletter contains a link with which you can
withdraw your consent. After withdrawing your consent, we will delete your
personal data. Your email address will not be provided to third parties, except for the
service provider used to send the newsletters.

Partnerships
If we enter into a partnership with you or your organization, we process your name, address,
place of residence, email address, telephone number, and employer (if applicable). In addition,
we process the data included in any application. We use this
data to administer the application, including: (i) communicating during an
assessment, monitoring, and evaluation procedure, (ii) assessing, monitoring, and evaluating
an application, and (iii) consultation in the context of other applications. We process the
data based on the legitimate interest of SDM to spend its funds as effectively as
possible. We store this data for 10 years in order to be able to contact you during the term of the
project, to evaluate the support SDM has pledged over this period,
and to research the continuity of investment cycles. For the
purpose described above, we may provide data to our IT service providers and
financial administration service providers.

Suppliers
If you or your organization provides services or products to SDM, we may process your
contact details, such as name, email address, telephone number, and payment details.
We process this data to administer our contracts and pay invoices, to
prepare annual accounts, and to comply with our tax obligations. We do this because we
are executing the agreement that you or your organization has entered into with SDM and because
we are legally required to do so. Based on a legal obligation, we store this
data for 7 years. For the purpose described above, we may provide data to
our IT service providers and financial administration service providers.

Participations
SDM also participates in other legal entities. To this end, we process the name, bank details,
address, telephone number, place of residence, and signatures of co-shareholders in those
legal entities. We do this because SDM has a legitimate interest in administering

the documentation of these participations. Based on a legal obligation, we store
this data for 7 years. For the purpose described above, we may provide data
to our financial administration service providers.

Job Applications
If you apply for a position at SDM, we process the personal data you provide to us. We
process that personal data to assess your suitability for a position and to
contact you in the context of your application. This falls under Article 6.1.b of the General
Data Protection Regulation, as it is necessary for the performance of a contract
to which the data subject is party, or to take steps at the request of the data subject prior to entering into an
agreement. If you are rejected, we will keep your data for a further four
weeks to complete the application process, after which we will delete the data, unless you
have indicated that we may keep your data to contact you if a potentially
suitable vacancy becomes available.

Experts
SDM also uses external experts to advise it, including on its
strategy and activities. To this end, we process the contact details of those external experts,
including name, email address, and telephone details, as well as any contractual agreements. We
base this on the legitimate interest of SDM and for the performance of a
contract to which the data subject is party. Based on a legal obligation, we store
this data for 7 years. For the purpose described above, we may provide data
to our IT service providers and financial administration service providers.

Events
SDM organizes activities and events. In doing so, we process contact details of
participants and/or speakers and facilitators, including name, email address, possibly
telephone details, and contractual agreements. We base this on the legitimate
interest of SDM to inform those involved, to be able to organize the activities,
and/or for the performance of a contract to which the data subject is party. If there is
an agreement, we store this data for 7 years based on a legal obligation.
Other participant data is stored for 3 years, so that we can evaluate our events
and contact former participants. For the purpose described
above, we may provide data to our IT service providers and financial
administration service providers.

Third Parties
We use third parties in the performance of our services and activities. If these
third parties have access to your data in this context, it is mentioned above. Under no circumstances
does Stichting Democratie en Media sell your personal data to third parties.
With the exception of the cases mentioned above, Stichting Democratie en Media only
makes personal data available to third parties if it is required to do so by
law.

International Transfer
SDM uses the services of processors outside the EU. As a result, your
personal data may also be processed outside the EU. If this is the case, we take appropriate
measures to ensure that the transfer of your personal data complies with the GDPR.

Automated Decision-Making and AI
Stichting Democratie en Media does not use algorithms or AI, and does not make decisions based
on other types of automated processing regarding matters that could have (significant)
consequences for individuals.

Special Categories of Personal Data
It may happen that special categories of personal data are included in, for example, a
job application or request (such as information about sexuality, religion, and ethnic background), if
these are provided by the provider on their own initiative. If such information has been
provided by you in the past, and you would like it to be deleted, please contact us using the
contact details above.

How We Secure Personal Data
SDM takes the protection of your data seriously and takes appropriate measures to
prevent misuse, loss, unauthorized access, unwanted disclosure, and unauthorized modification.
If you have the impression that your data is not properly secured or if there are indications
of misuse, please contact us at info@sdm.nl

Accessing, Modifying, or Deleting Personal Data
You have the right to access, correct, or delete your personal data. In addition,
you have the right to withdraw your consent for data processing or to
object to the processing of your personal data by SDM. Furthermore, in certain
cases, you have the right to data portability, which means that you can submit a request to us
to send the personal data we process about you in a computer file to you or
another organization named by you. You can send a request for access, correction,
deletion, data transfer, withdrawal of your consent, or objection to the
processing of your personal data to info@sdm.nl

To ensure that a request has been made by you, we want to verify your identity. We
do this by sending you a number of verification questions via the contact details known to us.
We will respond to your request as soon as possible, but no later than within 20 working days. SDM would
also like to point out that you have the option to file a complaint with the national
supervisory authority, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). This can be done via the following link:
https://autoriteitpersoonsgegevens.nl/nl/contact-met-de-autoriteit-persoonsgegevens/tip-ons

Contact Details
Questions about this privacy statement can be asked via info@sdm.nl

This privacy statement was last modified on July 7, 2026.