Privacy Statement
1. Who we are
Stichting Katre is responsible for the processing of personal data as described in this privacy statement.
Contact details: Stichting Katre, Deventerseweg 2, Barendrecht · [email protected] · KvK: 63449730 · RSIN: 855240945
2. Which personal data we collect
Stichting Katre collects personal data that you provide to us yourself:
- Contact form and email: first and last name, email address, telephone number (optional) and the content of your message.
- Donations: name, email address and payment details (processed via our payment provider; we do not store full payment details).
- Newsletter: email address and name, only after your explicit consent.
- Website statistics: we use Cloudflare Web Analytics. This service works without cookies and only shows us aggregated figures, such as the number of page visits. No visitor profiles are created.
- Origin of a donation: when you donate, we record which campaign or referring website brought you to us (for example a post on Instagram), whether you came via an advertising link, the page on which you arrived, the country, region and city you donated from, and the type of device (mobile, tablet or computer, with the name of the operating system and browser, and the language of your browser). Country, region and city are derived by our hosting provider Cloudflare; we do not store your IP address, nor any exact location.
- Donation steps: we count anonymously, per day, how many visitors reach each step of donating (donation block opened, amount chosen, details entered, on to payment). A count contains only the step, the campaign, the country and the type of device, and cannot be traced back to you.
3. Why we use data
- Donation processing: processing and confirming your donation and meeting statutory obligations.
- Communication: answering questions via the contact form or by email.
- Newsletter: updates about our projects, only if you have given your consent.
- Accountability for campaigns: finding out which campaigns and channels lead to donations, so that we spend our budget responsibly and can account for it. For this we use the origin data, the anonymous daily counts and the website statistics.
- Legal basis: for the origin data, the daily counts and the website statistics, the legal basis is our legitimate interest (Article 6(1)(f) GDPR): knowing which campaigns work, using as little data as possible. You can object to this via [email protected]. If your browser sends a Global Privacy Control or Do Not Track signal, we do not record origin, country, region, city or device, and your visit is not included in the daily counts.
4. How long we retain data
- Financial records: 7 years in accordance with the statutory retention obligation.
- Newsletter subscription: until the moment you withdraw your consent.
- Contact messages: up to 2 years after handling.
- Origin, country, region, city and device for a donation: as long as the related donation data. For an order that is not paid: 30 days.
- Anonymous daily counts of the donation steps: 26 months.
5. Your rights
Under the AVG (the Dutch implementation of the GDPR) you have the right of access, rectification, erasure, objection and data portability. Contact us at [email protected]. We respond within 30 days. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch Data Protection Authority).
6. Cookies and session storage
We do not use tracking cookies or third-party advertising pixels. We keep the origin of your visit only in your browser’s session storage; this data disappears as soon as you close the tab or the browser. More information can be found in our cookie statement.
7. Security
Stichting Katre takes appropriate technical and organisational measures to protect your data. All donations are processed via secure (SSL/TLS) connections.
8. Changes
Stichting Katre reserves the right to amend this statement. Please check this page regularly for the most up-to-date version.