Privacy statement.

Stichting Rozia Foundation (“Rozia Foundation”, “we”) respects your privacy and handles your personal data with care. This statement explains which data we process, why, and what rights you have. We comply with the General Data Protection Regulation (GDPR).

1. Who are we?

Stichting Rozia Foundation is the controller responsible for the processing of your personal data.

• PO Box 149, 3930 EC Woudenberg
• Email: info@roziafoundation.com
• Website: www.roziafoundation.com
• Chamber of Commerce (KvK): 92679692 · RSIN: 866137907 (ANBI, a Dutch public benefit organisation)

2. What data do we process?

• Contact: name, email address, telephone number and the content of your message.
• Donations: name, email address, payment details and the amount donated. Payment is handled through a secure payment environment.
• Newsletter: name and email address, if you sign up.
• Website use: limited technical data via functional cookies (see section 7).

3. Why, and on what legal basis?

• Answering your question: legitimate interest / acting at your request.
• Processing and confirming your donation: performance of the agreement and a legal (tax) obligation.
• Sending the newsletter: your consent, which you can withdraw at any time.
• Running and securing the website: legitimate interest.

4. Who do we share data with?

We never sell your data. We only use service providers that help us carry out our work (processors): our payment service provider (for online donations), our hosting partner (for making the website available) and our email service (for sending messages from the forms). We conclude data processing agreements with these parties. We only provide data to other third parties when the law requires us to do so.

5. Transfers outside the EU

We prefer to process your data within the European Economic Area (EEA). If data is nevertheless processed outside the EEA, we ensure appropriate safeguards as required by the GDPR.

6. How long do we keep your data?

• Contact messages: up to 2 years after they have been dealt with.
• Donation and financial data: 7 years (statutory retention obligation).
• Newsletter data: until you unsubscribe.

7. Cookies

Our website currently uses only functional and strictly necessary cookies, which are needed for the site to work properly: for example, to remember your choice of language. No consent is required for these. We do not place tracking, analytics or marketing cookies and we do not share data with advertising networks. Should we use analytics cookies in the future, we will ask for your consent first.

8. Your rights

You have the right to access, correct or have your data deleted, to withdraw your consent, to object to the processing and to have your data transferred. Send your request to info@roziafoundation.com; we will respond within four weeks. If you do not agree with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

9. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse or unauthorised access.

10. Changes

We may amend this privacy statement. The most recent version is always available on our website, together with the date of the last change.

11. Contact

Questions about privacy or about this statement? Email info@roziafoundation.com.

Gifts and payments

If you pay through our form, Mollie B.V. processes the payment. We pass your name, email address, the amount and the purpose of your gift on to Mollie. We keep this data in the Mollie dashboard, so that we can process and account for your gift. For a monthly gift, you give Mollie a direct debit mandate. You can cancel this mandate through your bank or by contacting us. We keep payment data for as long as tax law requires.

Notifications and newsletter

If you use the contact form, Rozia Foundation receives a notification by email with your name, email address, your phone number if you gave one, and your message. We send this email using Resend.

For the newsletter we use confirmation in two steps. After you sign up, we send you one email with a confirmation link. As long as you do not confirm, your address is not on the list and you do not receive a newsletter. We then keep your name, email address, language and the time of signing up for at most seven days; after that they are deleted automatically.

After you confirm, we keep your name, email address, language, the page where you signed up and the times of signing up and confirming in a secure list at Cloudflare, until you unsubscribe. Rozia Foundation receives a notification by email with these details for every confirmed sign-up. You can unsubscribe at any time with the unsubscribe link in the confirmation email and in every newsletter, or via info@roziafoundation.com. We then remove your details from the list.

Hosting and security of the forms

Our website runs at Cloudflare. Cloudflare processes technical data such as your IP address. To limit misuse of the forms, we count requests per IP address (in pseudonymised form) for at most twenty minutes. Our forms can also use a security check from Cloudflare (Turnstile). Resend and Cloudflare are American companies, so data may be processed outside the EEA (see section 5).