Who is responsible
IAHPM is the organiser and the controller for the programme purposes described here. Its registered address is Rue du Marché 32, 1204 Genève, Switzerland, UID CHE-278.279.361. Use the privacy contact route or write to that address with an information request.
Information and purposes
Account information includes identity, contact details, organisation roles and security records. It is used to provide authorised access and manage programme correspondence. Entry information includes product responsibility, supporting material and named contributors where relevant; it is used to assess eligibility, organise review, decide and administer the award.
Review and case records include assignments, relevant conflict declarations, assessments, correspondence, appeals, concerns and corrections. These support a fair, traceable process and the protection of the programme. Order records include purchaser and delivery details, selected goods and transaction references needed for fulfilment and support. Do not submit payment-card details through a contact or entry form.
Technical information necessary to deliver and protect the service may include connection and security logs. Optional communications require a separate choice where applicable. We do not sell applicant contact information or use entry materials for unrelated advertising.
Public and private material
The entry distinguishes information proposed for an award record from private reports and contacts. A published record identifies the awarded product, manufacturer, scope, decision, reasons and current status. It does not automatically disclose the full entry materials or personal contact details.
Do not submit identifiable patient records or unnecessary health information. Remove such information from reports before upload. Limited demonstration access should use simulated or appropriately de-identified data.
Purposes and applicable grounds
Processing is limited to administering the requested programme relationship, assessing and recording entries, dealing with concerns and orders, protecting the service and meeting applicable obligations. Where the applicable law requires a particular legal basis, processing is tied to the requested contractual steps or relationship, legitimate programme and security interests, an applicable legal obligation or a separate consent where required. Consent to optional communications can be withdrawn without affecting an entry.
Who receives information and where
Access is limited to authorised programme personnel, assigned reviewers and service providers who need the information for their role. Reviewer access is subject to confidentiality and conflicts controls. Fulfilment personnel receive the award and delivery details needed for an order, not the private scoring entry materials.
The table below identifies the services used for website delivery and assessment. Cloudflare operates distributed infrastructure, so technical processing is not confined to Switzerland.
| Service | Purpose and processing |
|---|---|
| Cloudflare, Inc. | Website delivery, security, database and private file storage. Services use Cloudflare’s distributed infrastructure; processing is not confined to Switzerland. Access to private entry materials is restricted by role. |
| IAHPM programme personnel and assigned reviewers | Entry administration and assessment. Access is limited to assigned duties and subject to confidentiality and conflicts controls. |
Physical-item enquiries are handled by the awards team. The quotation identifies any seller or fulfilment provider involved before an order is agreed.
Where information is processed abroad, the applicable transfer conditions and safeguards must be maintained. Information may also be disclosed where required by law or necessary to handle a specific dispute, with the scope limited to the purpose.
Retention
Unsubmitted drafts are scheduled for deletion after 12 months without activity, with advance notice where contact is available. Unsuccessful or incomplete private entry materials are retained for three years after closure. Key evidence and decision records for awarded entries are retained for seven years; public historical award records are maintained to preserve accurate verification.
Routine closed enquiries are scheduled for deletion after 12 months. Order and accounting records follow the applicable recordkeeping requirement. A specific dispute, preservation duty or security incident may justify retaining the relevant material separately for longer. Account deletion does not automatically remove an accurate public award record or a record that must be retained for a stated purpose.
Your requests
You may request access, correction or deletion and raise an objection about your information. Other rights depend on the law and processing concerned. Reasonable identity checks may be required; an account is not necessary to make a request. Explain the information and action concerned without sending identity documents unless specifically requested through a suitable route.
For Swiss data-protection concerns, see the Federal Data Protection and Information Commissioner. Where applicable, you may contact the supervisory authority in your jurisdiction.
Security, storage and changes
Use your account and private links carefully and report suspected unauthorised access through the contact route. The cookie and local-storage notice identifies browser technologies and choices. This notice is version 1.0; any material change to the actual processing arrangements is reflected in the published notice and relevant communications.