Donate

Privacy statement

This privacy statement applies to the Princess Máxima Center Foundation (‘Foundation’). In this statement, we explain how we handle your personal data. We comply with the General Data Protection Regulation (GDPR) and related laws and regulations.

Which personal data do we process?

The Foundation may process the following data:

  • contact details, address, telephone number, and email address

  • date of birth

  • payment details, such as bank account number

  • technical information about your visit to our website, such as IP address

  • browsing behavior on the website

  • operating system, browser type, and internet provider

  • website from which you were redirected

  • other data you provide to us

Why do we process your personal data?

The Foundation processes your personal data for the purposes listed below:

  • to process and manage your donation

  • to inform you about new campaigns

  • to optimize our services and to further spread our message

  • to comply with legal obligations that apply to the Foundation

  • to conduct internal and external audits of our services

  • to verify your identity

  • to contact you for newsletters

  • to adjust and improve the website

  • to contact you and respond to any questions or complaints you submit

By providing your telephone number and/or email address and agreeing to the privacy statement, you consent to the processing of your personal data for the purposes listed above.

On what grounds do we use your data?

The Foundation processes your personal data on the basis of the following legal grounds:

  • you have given the Foundation explicit permission for the processing

  • the processing is necessary for entering into or performing an agreement in which you are a party

  • the Foundation has a legitimate interest in the processing

The Foundation has the following legitimate interests:

  • to be able to (continue to) deliver and improve our services

  • to ensure the website functions and improves

  • to improve security

Sharing with third parties

The Foundation may engage third parties that process personal data on behalf of the Foundation. These may include:

  • website developers

  • contractors or suppliers, including suppliers of IT services

The Foundation makes agreements with these parties about, among other things, the security of the personal data that is processed.

Security

The Foundation takes ongoing and structural measures to optimally protect your personal data against unlawful use. The Foundation ensures that all its user settings, programs, and services are designed from the start in such a way that your privacy protection is maximized. Wherever possible, the Foundation takes continuous privacy-enhancing security measures.

Retention periods

We aim to delete personal data as soon as we no longer need it to achieve our goals. Some data is stored because this is required based on financial and/or tax obligations. In that case, your data will be kept for seven years. After this period, we ensure that your personal data is removed carefully.

Your rights

If your personal data is being processed, you have several rights, which are set out below. You can exercise these rights by submitting your request in writing to the Princess Máxima Center Foundation or by sending an e-mail to the Foundation.

A staff member will respond to your request as soon as possible, and in any case within one month, in principle by email. If you submit a request, we will first assess whether we can process your request. We cannot process the request if we cannot establish your identity.

Access and/or correction of personal data

You may ask us at any time which (categories of) personal data the Foundation processes about you, for what purposes this happens, from which source the personal data originates, and which retention periods are applied. You may also contact us at any time to supplement, correct, or delete your personal data.

Restriction of processing

If you do not agree with the content of the personal data the Foundation stores about you, you may submit a request to temporarily restrict the processing of your personal data.

Withdrawal of consent

You may withdraw your consent for processing your personal data at any time by sending an e-mail to the Foundation.

Data portability

You may request the personal data the Foundation stores about you in a structured, commonly used, and machine-readable format. After receiving the personal data, you are free to transfer this information to third parties.

Right to be forgotten

If you no longer wish to use the services of the Foundation, you may submit a request to delete all your personal data.

Right to object

You have the right to object to the processing of your personal data by the Foundation that is based on the legal ground of ‘legitimate interest of the Princess Máxima Center Foundation’. If the Foundation relies on this legal ground, the Foundation makes a balancing test regarding your privacy. The right to object gives you the opportunity to request that this balancing test be carried out again.

Right to file a complaint or to start legal proceedings

You always have the possibility to file a complaint about the Foundation’s use of personal data in general, both with the Foundation and with the Dutch Data Protection Authority. You can find the contact details of the Dutch Data Protection Authority here.

Cookies and similar technologies

The Foundation uses cookies and similar technologies. Cookies are small pieces of information stored on your computer. You can find more information about the cookie policy here.

Questions, complaints, or comments

If you have questions, comments, or complaints about the Foundation’s use of your personal data, please contact us by e-mail or by post at the following address:

Princess Máxima Center Foundation
Attn.: donor administration
Heidelberglaan 25
3584 CS Utrecht

Changes and applicable law

The Foundation has the right to amend this privacy statement. We ensure that the most recent version is always available on our website. None of the provisions of this privacy statement are intended to create any obligation or agreement between the Foundation and you as the data subject. Dutch law applies to the provisions of this privacy statement and all disputes arising from it.