Translation 21 August 2018

PRIVACY STATEMENT

Woord en Daad Foundation

Woord en Daad Foundation attaches great value to the protection of your personal data. In this Privacy Statement, we explain how our foundation deals with your personal data. We guarantee your privacy as well as possible, therefore we treat your personal data with great care. In all cases, Woord en Daad Foundation complies with laws and regulation, including the GDPR (General Data Protection Regulation). This implies in any case that we:

Ask for your permission if we need it for processing your personal data;
Process your personal data in accordance with the purpose it was intended for;
Process only the personal data which are minimally required;
Have taken appropriate technical and organizational measures, to guarantee the protection of your personal data;
Are aware of your rights regarding your personal data, remind you of them and respect them;
Do not share your personal data with other parties, unless this is necessary for the implementation of the purposes for which the data were provided.

As a foundation, we are responsible for the processing of your personal data. If you have any
questions, after reading the Privacy Statement and Privacy Policy, please contact us via:
Woord en Daad Foundation
Spijksedijk 16-E
4207 GN Gorinchem

Privacy Officer
Harmke van Ooijen

T: +31 (0)183 – 611 800
E: h.vanooijen@woordendaad.nl or info@woordendaad.nl

Why do we process your data?

Your personal data are processed by Woord en Daad Foundation for the following purposes:

To communicate with you in a way that suits you;
Effective programmes to reduce poverty (including monitoring and evaluation within the programmes);
Connecting people worldwide;
Correct registration of donors and/or sponsors;
Settlement of donations and/or sponsoring
Sharing news items and other information from our side;
Promoting awareness in The Netherlands.

For the above-mentioned purposes, we may ask you for the following personal data: first name; last
name; address; postal code; residence; phone number; date of birth; e-mail address; bank details;
(web) location data; profession; visual and audio material of our meetings and events; pictures to be
used with articles on Woord en Daad’s work (always based on your consent).

In addition, the following data can be requested for processing from people interviewed for our
publications: personal characteristics; lifestyle; family composition; leisure activities and interests;
consumption habits; education and training.

For an effective impact of our projects and programmes, Woord en Daad may additionally request
the following data for processing from citizens in target countries (mostly outside the EU): financial
details; physical data; membership (for instance of a farmer’s group); housing features; healthrelated data and data on religion and worldview. These data are not requested from donors.

Provision to third parties

We share your personal data only with third parties that contribute to the processing for which your
data have been provided by you. With each of these parties we have concluded a processing
agreement. We make the necessary arrangements with these parties (processors) to guarantee the
protection of your personal data. The third party concerned will keep these data only as long as
necessary for provision of their service. We will never share and/or sell the data you provided to
other parties, unless required by law.

Minors

We only process personal data of minors (persons under the age of 16 years, article 8 GDPR) with
written consent of the parent(s), caregiver or legal representative. In that case, it is important that
the parent(s) or guardian read(s) this statement. If you are a parent(s) or guardian, you can exercise
the same rights with regard to the minor’s personal data as the adult data subject, such as the right
to oppose the (further) processing of the minor’s personal data or the right to inspect and correct
these data.

Retention period

Data related to payments will be kept for 7 years for inspection by the Dutch tax authorities
(Belastingdienst). Your remaining data will be kept as long as you are registered in our system. This
includes both personal data and special data such as bank details. Data collected for interviews are
collected for publication purposes only. These data are kept outside our client relation system (CRM).
We keep some hard copies of all our publications.

Protection

We have taken appropriate technical and organizational measures to protect your personal data
against unauthorized processing, including:

All persons who are able to consult your data on behalf of Woord en Daad are obliged to confidential treatment of these data;
We apply a user name and password policy to all our systems;
We encrypt personal data if there is a reason to do so;
We back-up personal data in order to be able to recover it in case of physical or technical incidents;
We regularly test and evaluate our measures;
Our volunteers have been informed about the importance of the protection of personal data.

Rights concerning your data

You have the rights to access, rectify (in case of incomplete or incorrect data) and delete or
anonymize the personal data that you sent us. You can also object to the processing of your personal
data (or part of it) by us. You also have the right to have the personal data that you provided
transferred by us to yourself, or by order of you directly to a third party. We can ask you to identify
yourself before we can comply with the afore-mentioned requests.

Privacy policy

For further information please refer to our Privacy Policy. You can find this policy here.

Complaints

Should you have a complaint regarding the processing of your personal data, we ask you to contact
us directly via:

Stichting Woord en Daad
Spijksedijk 16-E
4207 GN Gorinchem

Privacy Officer: Harmke van Ooijen
T: +31 (0)183 – 611 800
E: h.vanooijen@woordendaad.nl of info@woordendaad.nl

If we cannot reach a solution to your complaint that you are satisfied with, you always have the right
to file a complaint with the Dutch DPA (Data Protection Authority), the Dutch supervisory authority
on privacy protection.

Privacy Statement English