Privacy Policy

As a subsidiary of The Rockefeller Foundation, we have adopted The Foundation’s Privacy Policy listed below.

Effective Date: November 26, 2024

We are committed to protecting your privacy. This Privacy Policy is part of our Terms of Use and is designed to help you understand how The Rockefeller Foundation (“The Foundation”), www.rockefellerfoundation.org, and other platforms operated by The Foundation (collectively, the “Site”) collect information about you when you visit or otherwise interact with the Site and how it uses and discloses that information. This Privacy Policy applies to data that personally identifies you (“personal information” or “personal data”) that is collected on the Site. Your use of the Site constitutes your agreement to this Privacy Policy. If you do not agree to the Privacy Policy, please do not use the Site.

We may modify this Privacy Policy at any time and will post the current version on the Site and update the Effective Date. We encourage you to periodically review our Privacy Policy to stay informed about how we are using the information we collect.

In some jurisdictions, individuals have rights they can exercise to access or restrict the personal information collected and retained, among other things. If you reside in such jurisdictions, you may have some or all such additional rights, which are addressed below as “individual rights.”

Collection of Personal Information

We collect the following types of information about you:

Contact information, such as your first name, last name, email address, phone number, address, and social media identifiers (e.g., usernames).
Demographic information, such as your age and gender.
Technical information gathered when you interact with the Site, such as your IP address, browser information, geographic location, device type, duration of browsing session, and how you arrived at the Site.
Internet or other electronic network activity information, such as your browsing history and information regarding your interactions with and use of the Site.
Employment information, such as your job title, organization, and classification of employment (e.g., government).
Grant Information, such as your grant program/topic interests and geography interests.
Inferences drawn from any of the information we collect to create a profile about you reflecting your preferences, characteristics, behavior, and abilities.

Sources of Personal Information

Information You Provide Directly

Certain features of the Site may include features or services that permit you to enter contact information and other information about you, such as your name, address, and email address.
For supplemental information regarding our data collection, use, and sharing practices when you interact directly with us, such as by applying for a job, developing and executing a grant proposal, or engaging with the Bellagio Center, please refer to the last three sections at the end of this Privacy Policy.

Information We Collect Automatically

When you interact with the Site, certain information about your use of the Site is automatically collected. This information includes your domain name and host for Internet access; the Internet address of the Site from which you came; the date and time of your access; your computer’s IP address and information about its operating system, browser, and host; MAC address and device-identifying information; the date and time you access the Site; the areas and pages you visit on the Site; the number of times you return to the Site; and other clickstream data.
Much of this information is collected through cookies, web beacons, and other tracking technologies, as well as through your web browser or device. The tracking technologies employed when you use our Site may be first-party or third-party. We use cookies for the following purposes:

Performance/Analytics: We use these cookies to analyze how the Site is accessed, used, or performs. We use this information to maintain, operate, and continually improve the Site. We may also obtain information from our email newsletters to learn whether you opened or forwarded the newsletter or clicked on any of the content. This information tells us about our newsletters’ effectiveness and helps us ensure that we’re delivering information that you find interesting.
Advertising: Interest-based advertising is the collection of data across different websites and/or different devices for the purpose of tailoring advertising based on your preferences or interests known or inferred from the data collected. We allow third parties, such as Google, Facebook, and Twitter, who assist us in serving both general and personalized/interest-based advertising regarding the Site on non-affiliated sites, to collect or receive your information and interactions with our Site and elsewhere on the Internet over time and use that information to provide measurement services and target ads to you. Other companies may also use such technology to advertise on our Sites. You have the choice to tell us not to collect and use this information, and in some jurisdictions, we will only engage in interest-based advertising if you opt in. You can learn more about ad-serving companies and the options available to limit their collection and use of your information by visiting the websites of the Network Advertising Initiative, the Digital Advertising Alliance, the European Interactive Digital Advertising Initiative for the EEA or UK, the Digital Advertising Alliance of Canada for Canada, and similar AdChoices website for India. Similarly, you can learn about your options to opt out of mobile app tracking by certain advertising networks through your device settings and by resetting the advertiser ID on your Apple or Android device.

We may combine the information we collect through cookies, web beacons, or other technology tools with other information we have collected from you or information from other sources.

The third-party website analytics tools that collect automated information about visitor traffic on our Site include Google Analytics. Google Analytics is a web analytics service provided by Google, Inc., on our Site. Google Analytics uses cookies or other tracking technologies to help us analyze how users interact with and use the Site, compile reports on the Site’s activity, and provide other services related to the Site’s activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a return visitor and any referring website. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. You can learn how Google collects and processes data and how to opt out of tracking of analytics by Google, by clicking here.

We also may allow third parties to issue cookies, pixels, web beacons, and other tracking technologies on our Site to help us compile aggregated statistics regarding the operations of our Site, research, and other purposes.

If you do not want to receive cookies, you may set your browser to reject them or manually delete individual cookies. However, if your browser is set to reject cookies or you manually delete cookies, you may have trouble accessing some of the Site’s services and features. Note that browser-management tools for cookies are outside of our control, and we cannot guarantee their effectiveness.

Because an industry-standard Do-Not-Track protocol has not yet been established, our information collection practices on our Site will continue to operate as described in this Privacy Policy regardless of any “Do Not Track” signals that may be sent by certain browsers. However, you may refuse to accept cookies in order to prevent tracking activities.

Information from Social Media

When you interact with the Site through a social media platform (such as by clicking on a social media icon linked to the Site), we may collect the personal information that you make available to us on that social media page, including your social media account ID or username and other information included in your posts or private messages. If you choose to log in to your Site account with or through a social media platform, we and that platform may share certain information about you and your activities.

Information from Public Sources or Third Parties

We may collect personal information without you entering it on the Site, including by obtaining it from public sources or from third parties, and use it to send you information we think may be of interest to you, where permitted by law. If you don’t want to receive information from us, you can follow the instructions below in the section “To Stop Receiving Messages from Us.”

Use of Personal Information

We may use the information you give us to:

Communicate with you, including to respond to your inquiries and fulfill your requests;
Provide, maintain, personalize, optimize, and improve the Site, including research and analytics regarding use of the Site, or to remember you when you leave and return to the Site;
Make decisions about approving and funding grants;
Make decisions about approving Bellagio Center residency program applications and conference requests;
Provide you with more relevant content in email bulletins to which you may be subscribed;
Provide advertising, including interest-based advertising;
Inferences drawn from any of the information we collect to create a profile about you reflecting your preferences, characteristics, behavior, and abilities.[LJ3]
Detect, investigate, and prevent activities that may violate our policies or be fraudulent or illegal;
Comply with legal requirements and protect the safety, property, and rights of The Foundation, Site users, and others;
Anonymize or aggregate your information for any purpose.

Sharing of Personal Information

We may share your personal information with third party service providers, affiliates, and agents who use the information to help us respond to your requests and to perform services on our behalf.

We may share your personal information with marketing partners, advertisers, or other third parties, who may contact you with their own offers or messages. We may share your personal information with third parties who we think have a similar mission to ours to enable them to reach you with similar or related messages.

If you interact with the Site in connection with your employment (e.g., you work for a grant recipient), your employer, coworkers, or other individuals designated by your employer may view any personal information that we collect in connection with your participation in The Foundation’s work or use of or interaction with the Site. This paragraph does not apply to Foundation employees.

Subject to applicable law, we reserve the right to use or disclose your personal information to third parties, including law enforcement or other government entities, in a good faith belief that such disclosure is reasonably necessary to (a) take action regarding suspected illegal activities; (b) enforce, apply, or investigate issues or complaints related to our Terms of Use, Privacy Policy, or other policies or agreements such as The Foundation’s Whistleblower Policy; (c) comply with law or legal requirements, including legal processes such as a search warrant, subpoena, or court order; and (d) protect our rights, reputation, personal safety, and property, or those of our users, affiliates, or the public.

We may change our ownership or corporate organization while providing the Site. We may transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information the same as described in this Privacy Policy.

We may also disclose your personal information with your express consent.

We may share aggregate, non-personally identifiable information about Site users with third parties as well.

Please note that public-facing interactions, such as likes, comments, re-posts, etc., on social media become publicly available and can be collected and used by others, so you should use care before posting information about yourself or others.

We do not rent or sell your personal information to third parties.

Third-Party Websites

Our Site contains links to third-party websites, such as the websites of other organizations or social media websites like Facebook and Instagram. These websites are governed by their own terms of use and privacy policies that differ from our own, which you should read. We are not responsible for the security or privacy of any information collected by other websites or other services. You should exercise caution and read the third party’s privacy policies before disclosing any personal information to understand how they collect, process, share, and store your information. Please contact those websites directly if you have any questions about their privacy policies.

Information You Provide About Others

Do not provide or allow others to provide personal information about anyone unless you, on your own behalf and on behalf of anyone whose information you provide: (a) have reviewed and agree with this Privacy Policy and Terms of Use, and (b) are authorized to and do consent to have all data used and transferred internationally. By submitting any personal information about others, you represent and warrant that you received authorization beforehand, including the aforementioned authorization to use and internationally transfer all data.

Use of the Site by Children

We comply with the Children’s Online Privacy Protection Act of the United States and similar laws around the world where applicable. Our Site is not directed to children, we do not actively solicit information from children, and we do not knowingly collect personal information from children without proper, verifiable parental consent. If you believe that we may have collected personal information from someone under the applicable age of consent without parental consent, please write to us at the physical address set forth below in the section “Contact Us” , and we will endeavor to investigate and delete such information from our systems.

To Stop Receiving Messages from Us

If you wish to stop receiving messages from us, click on the “unsubscribe” link at the bottom of any automated message you receive from us, or, for non-automated messages, make a request via the contact information in the “Contact Us” section below.

Changes to this Privacy Policy

We may make changes to this Policy from time to time. We will post any changes on the Site, and such changes will become effective when they are posted. If we change the Policy in a material and retroactive manner, we will provide appropriate notice to you. Your continued use of our Site following the posting of any changes will mean you accept those changes.

Security

We maintain reasonable and appropriate measures designed to maintain information we collect in a secure manner. We have taken certain physical, electronic, and administrative steps to safeguard and secure the information we collect from visitors to the Site. Even though we follow reasonable procedures to try to protect the information in our possession, no security system is perfect, and no data transmitted over the Internet can be guaranteed to be 100% secure. WE DO NOT REPRESENT OR GUARANTEE THE SECURITY OF PERSONAL INFORMATION OR OTHER INFORMATION IN ANY FORM. Similarly, we disclaim liability for personal information submitted through our Site, and you provide us with this data at your own risk.

Retention of Personal Information

Personal information that we collect, access, or process will be retained only as long as necessary for the fulfillment of the purposes for which it was collected, unless otherwise provided in agreements between you and The Foundation or as required or authorized by law. Personal information that is no longer required to fulfill the identified purposes will be destroyed, erased, or de-identified.

Visitors from Outside the United States – Cross-Border Transfer

Our databases are located in the United States. If you are outside of the U.S., you may be located in a region with laws or regulations governing personal data collection, use, or disclosure that differ from U.S. laws, which do not have the same data protection laws as the EEA and other regions. By providing your data, you consent to: (i) the use of your personal data for the uses identified above in accordance with the Privacy Policy; and (ii) the transfer of your personal data to the U.S. as indicated above and the application of U.S. laws to the collection, use, and disclosure of your personal information.

For Users in the EEA and UK and Certain Other Jurisdictions

If you are a resident of the EEA and UK, the following information applies.

Purposes of processing and legal basis for processing personal data: As explained above and below, we process personal data in various ways depending upon your use of our Site. We process personal data on the following legal bases: (1) with your consent; (2) as necessary to perform our agreements; and (3) as necessary for our legitimate interests in providing services where those interests do not override your fundamental rights and freedoms related to data privacy.

We do not make any decisions based solely on automated processing (including profiling) of your personal data which has legal effects concerning you or which significantly affects you.

For EEA and UK residents, in relation to sending direct marketing communications to you via email or text message, we will only do so where (i) we have your express consent or (ii) (subject to applicable EU member state or UK law) you are an existing user. You have the right to withdraw consent to marketing at any time by contacting us via the information in the “Contact Us” section.

Transfers: Personal data we collect may be transferred to, and stored and processed in, the United States or any other country in which we or our affiliates, partners, or service providers maintain facilities. Generally, transfers of personal data will be governed by the “Visitors from Outside the United States – Cross-Border Transfer” section above. If we transfer your personal information out of the EEA or UK, we will ensure at least one of the following safeguards is implemented:

We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.
Where the recipient country has not been deemed to provide an adequate level of protection for personal data, we will ensure that appropriate safeguards are put in place. These may include entering into a data transfer agreement incorporating the ‘standard contractual clauses’ approved by the European Commission or the Information Commissioner’s Office (or equivalent data transfer agreements approved by applicable supervisory authorities). If you would like to receive further details of the measures that we have taken in this regard, please contact us using the contact information listed in the “Contact Us” section.

Individual Rights: If you are a resident of the EEA or UK, you are entitled to the following rights, and if you are a resident of certain other jurisdictions, you may have some or all of the following rights. Your exercise of these rights will have no adverse effect on you, including on your grant candidacy or status.

Please note: In order to verify your identity, we may require you to provide us with personal data prior to accessing any records containing information about you. We may also use a third-party verification provider to verify your identity.

The right to know or access what personal data we have collected, used, disclosed, and sold about you.
The right to correct, complete, or update personal data we have collected, used, disclosed, and processed about you.
The right to request that we delete any personal data we have collected about you.
The right to object to processing and/or revoke consent previously provided to us for purposes of processing your personal data.

To submit a request, you may write to us at the address in the “Contact Us” section.

You will not, ordinarily, have to pay a fee to access your personal data or to exercise any of the other rights set forth in this section.

In the EEA and UK, you have the right to make a complaint at any time to the relevant national supervisory authority. In Italy, this would be the Garante Per La Protezione Dei Dati Personali, Italy’s supervisory authority for data protection issues (https://www.garanteprivacy.it/). In the UK, this would be the Information Commissioner’s Office (“ICO”), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to address your concerns before you approach one of the national supervisory authorities, so please contact us in the first instance.

A list of Supervisory Authorities is available here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

For Users in Kenya

If you are a resident of Kenya, the following information applies.

We do not make any decisions based solely on automated processing (including profiling) of your personal data which has legal effects concerning you or which significantly affects you.

Transfers: Personal data we collect may be transferred to, and stored and processed in, the United States or any other country in which we or our affiliates, partners, or service providers maintain facilities. Generally, transfers of personal data will be governed by the “Visitors from Outside the United States – Cross-Border Transfer” section above. If we transfer your personal data out of Kenya, the offshore transfer of the personal data will not take place unless there are adequate data protection standards, or there are:

Adequacy: an adequacy decision made by the Data Protection Commissioner that the country, territory, or the international organization where data is being transferred ensures an adequate level of protection of personal data;
Necessity: the transfer is deemed to be necessary if it is: (i) for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject before entering into a contract; (ii) for the conclusion or performance of a contract concluded in the interest of the data subject between the controller and another person; (iii) for any matter of public interest; (iv) for the establishment, exercise or defense of a legal claim in order to protect the vital interests of the data subject or of other persons, where the data subject is physically or legally incapable of giving consent; (v) for the purpose of compelling legitimate interests pursued by the data controller or data processor which are not overridden by the interests, rights, and freedoms of the data subjects; or
Consent of the data subject on the condition they have consented to the proposed transfer and have been informed of the possible risks of transfer.

Individual Rights: If you are a resident of Kenya, you are entitled to the following rights.

The right to know or access what personal data we have collected, used, disclosed, and sold about you.
The right to correct, complete, or update personal data we have collected, used, disclosed, and processed about you.
The right to request that we delete any personal data we have collected about you.
The right to object to processing and/or revoke consent previously provided to us for purposes of processing your personal data.

To submit a request, you may write to us at the address in the “Contact Us” section.

You will not, ordinarily, have to pay a fee to access your personal data or to exercise any of the other rights set forth in this section.

There is also a right to lodge a formal complaint with Kenya’s Office of the Data Protection Commissioner (“DPC”) (https://www.odpc.go.ke/file-lodge-a-complaint/) in the event that the complaint and/or dispute with the Company is not properly and timely resolved. We would, however, appreciate the chance to address your concerns before you approach the DPC, so please contact us in the first instance.

For Users in Thailand

If you are a resident of Thailand, the following information applies.

Transfers: Personal data we collect may be transferred to, and stored and processed in, the United States or any other country in which we or our affiliates, partners, or service providers maintain facilities. Generally, transfers of personal data will be governed by the “Visitors from Outside the United States – Cross-Border Transfer” section above. If we transfer your personal data out of Thailand, the offshore transfer of the personal data will not take place unless there are adequate data protection standards, or:

Where it is for compliance with the law;
Where the consent of the data subject has been obtained, provided that the data subject has been informed of the inadequate personal data protection standards of the destination country or international organization;
Where it is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the request of the data subject prior to entering into a contract;
Where it is for compliance with a contract between the data controller and other persons or juristic persons for the interests of the data subject;
Where it is to prevent or suppress a danger to the life, body, or health of the data subject or other persons, when the data subject is incapable of giving the consent at such time; or
Where it is necessary for carrying out the activities in relation to substantial public interest.

Individual Rights: If you are a resident of Thailand, you are entitled to the following rights.

The right to know or access what personal data we have collected, used, disclosed, and sold about you.
The right to correct, complete, or update personal data we have collected, used, disclosed, and processed about you.
The right to request that we delete any personal data we have collected about you.
The right to object to processing and/or revoke consent previously provided to us for purposes of processing your personal data.

To submit a request, you may email and write to us at the address in the “Contact Us” section.

You will not, ordinarily, have to pay a fee to access your personal data or to exercise any of the other rights set forth in this section.

There is also a right to lodge a formal complaint with Thailand’s Personal Data Protection Commission (“PDPC”) in the event that the complaint and/or dispute with the Company is not properly and timely resolved. We would, however, appreciate the chance to address your concerns before you approach one of the national supervisory authorities so please contact us in the first instance.

Contact Us

Please contact the Communications Office at media@rockfound.org or at the address and numbers listed below with respect to any inquiries about our Privacy Policy or if you need assistance correcting or updating your personal information.

ATTN: Privacy Request
The Rockefeller Foundation
Communications Office
420 Fifth Avenue
New York, New York 10018-2702
Tel: 212-869-8500/Fax: 212-764-3468
media@rockfound.org[JBM14]

If we need, or are required, to contact you concerning any event that involves your information, we may do so by email, telephone, or mail.

Information Collected Under “Career Opportunities”

When you provide information in Career Opportunities, we use that information to evaluate your candidacy for employment and to track and evaluate our hiring practices generally. We may disclose your information to recruiters and other third parties who help us review applicants. When uploading a resume, please do not provide us with sensitive information such as social security numbers, dates of birth, and financial information.