Privacy Policy

Sheremetev & Partners Foundation
KvK: 42132995
Effective date: 01.09.2026 · Version 1.0
This Privacy Policy explains how Stichting Sheremetev & Partners Foundation ("the Foundation", "we", "us") processes personal data in connection with sheremetevfoundation.com and its Russian-language version at /ru/ (together, "the Website"), in accordance with the EU General Data Protection Regulation (GDPR) and its Dutch implementing act (Uitvoeringswet AVG).

A Russian translation is available at /ru/privacy. Where the two versions differ, the English version prevails, as English is the Website's primary language.

1. Who is responsible for your data

Data controller: Stichting Sheremetev & Partners Foundation Registered with the Dutch Chamber of Commerce (KvK) under number {KvK-номер} Registered office: {адрес}, Netherlands

The Foundation's application for ANBI (algemeen nut beogende instelling / public benefit organisation) status with the Dutch Tax and Customs Administration (Belastingdienst) is in progress. Once granted, the information required under Article 41a of the Uitvoeringsregeling AWR 1994 — including the Foundation's RSIN, board composition, remuneration policy, policy plan, activity report and financial statements — will be published on the Governance & Reporting page.

For any question about this policy or your personal data, contact: privacy@sheremetevfoundation.com privacy@sheremetevfoundation.com

2. What we collect, why, and on what legal basis

We do not use your data for automated decision-making or profiling with legal or similarly significant effects on you.

3. Cookies Policy

The cookie consent panel in the site footer lets you accept or decline each non-essential category separately, and is always available to reopen there. Statistics cookies are not set — and the underlying Google Analytics script does not run — until you actively consent.

4. Who we share your data with

We do not sell personal data and do not share it with third parties for their own marketing purposes. If you attend an event we co-organise with a partner venue, that venue may separately process your data as an independent controller for on-site purposes (e.g. access control). This is disclosed at the point of ticket purchase where applicable.

5. International transfers — summary

Most of our processors are established outside the European Economic Area (United States, United Kingdom, United Arab Emirates). Depending on the processor, we rely on: an EU adequacy decision (United Kingdom), the EU-U.S. Data Privacy Framework (Google, Mailchimp), or the European Commission’s Standard Contractual Clauses (all processors, as a fallback safeguard). A copy of the relevant safeguard is available on request at privacy@sheremetevfoundation.com

6. How long we keep your data

7. Your rights

Under the GDPR you have the right to:
  • Access the personal data we hold about you
  • Rectification of inaccurate or incomplete data
  • Erasure ("right to be forgotten"), where applicable
  • Restriction of processing
  • Object to processing based on legitimate interest
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, contact privacy@sheremetevfoundation.com. We respond within one month, as required by Art. 12(3) GDPR.

You also have the right to lodge a complaint with a supervisory authority. In the Netherlands: Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you are based in another EU/EEA member state, you may contact your local data protection authority instead.

8. Security

We use encrypted connections (TLS) throughout the Website. Fonts are self-hosted rather than loaded from third-party CDNs, to minimise third-party requests triggered by your visit. Access to email and site administration is limited to Foundation staff and contractors who need it for their role. Payment data is handled entirely by Stripe; we never see or store full card numbers.

9. Children

The Website is not directed at children. We do not knowingly collect personal data from anyone under 16 without the consent of a parent or legal guardian. If you believe a child has provided us with personal data, contact privacy@sheremetevfoundation.com and we will delete it.

10. Changes to this policy

We may update this policy as the Website, our processors, or the law change. The effective date above reflects the latest revision. Material changes — such as introducing marketing cookies — will be highlighted on the Website before they take effect.

11. Contact

Stichting Sheremetev & Partners Foundation
Hoge Vijver 84, 2923 VR Krimpen aan den IJssel, Netherlands
privacy@sheremetevfoundation.com