Privacy Policy

Why do we process personal data?

The relationship with our supporters, our donors and volunteers, and with our other stakeholders is essential to realising our shared mission. To keep in touch with our supporters and stakeholders and to mobilise them, we sometimes need to record personal data. Below we explain how, when and for what specific purpose we do this.

Careful handling of your personal data is very important to us. The General Data Protection Regulation (GDPR) is our starting point and we aim to provide full transparency.

Who is responsible for your data?

The Justice for Prosperity Foundation is the controller for the processing of your personal data within the meaning of the GDPR.

Justice for Prosperity UN SDG House, Mauritskade 64 1092 AD Amsterdam, The Netherlands

Email: [email protected]

How and when do we collect personal data?

When you use our services and website(s) you may provide personal data. We only process the data that is necessary for the purpose concerned. What we process depends on the type of engagement and on the functionalities of our website(s) that you use. For example, we only process your email address for our newsletter if you sign up to receive it, and we only process your banking details if you make a donation.

What personal data do we collect?

Depending on the services you request or engage with, we may process the following personal data:

• Name and address details
• Telephone number
• Email address
• Date of birth
• Banking details (for donations)
• Your participation in volunteer activities

For our newsletter specifically, we process only your email address, and your name where you choose to provide it.

How do we use your personal data, and on what legal basis?

We process personal data for one or more of the following purposes, and each purpose rests on a legal basis under Article 6 of the GDPR:

• Newsletter. To send you our newsletter. Legal basis: your consent (Article 6(1)(a) GDPR). You give this consent when you sign up, and you can withdraw it at any time (see below).
• Events. Registration for and evaluation of events. Legal basis: your consent, or the performance of an agreement with you.
• Donations and volunteering. To process a donation, collection or periodic gift, and to manage volunteer activities. Legal basis: the performance of an agreement with you and, where applicable, our legal obligations.
• Contact and communication. To respond to your questions and to send you information, invitations or announcements you have asked for. Legal basis: your consent or our legitimate interest in communicating with our stakeholders.
• Application procedures. To carry out recruitment procedures. Legal basis: steps taken at your request prior to entering into an agreement.
• Website functionality and improvement. To provide and improve the functionalities and services on our website. Legal basis: our legitimate interest in a functioning, secure and effective website.

Who processes your data on our behalf?

To send our newsletter we use Brevo, the email service platform operated by Sendinblue SAS, a company based in France, with data stored on servers within the European Union. Brevo processes your data on our instructions as a processor, under a data processing agreement, and only for the purpose of sending our newsletter and managing subscriptions. Brevo does not use your data for its own purposes.

We may use other processors for specific services, for example our payment provider for donations. Where we do, they act only on our instructions and under a data processing agreement.

Do we transfer data outside the European Economic Area?

We aim to keep the processing of your personal data within the European Economic Area (EEA). Brevo stores newsletter data on servers within the EU. If any processor we use transfers personal data outside the EEA, we ensure that appropriate safeguards are in place, such as an adequacy decision by the European Commission or the European Commission’s Standard Contractual Clauses.

Are personal data shared with other third parties?

Unless stated in this Privacy Policy, your personal data will not be rented, sold or otherwise shared with or provided to third parties. Your data will only be shared with third parties if you have given your explicit permission, or where we are required to provide personal data to enforcement authorities or anti-fraud organisations in order to comply with a legal obligation.

How long do we keep personal data?

Personal data is stored in accordance with the GDPR and is not kept longer than necessary for the purposes for which it was collected. For the newsletter, we keep your data until you unsubscribe or otherwise withdraw your consent, after which your data is removed from our mailing list.

How do we ensure your data is treated confidentially?

We handle your personal data confidentially. Technical and organisational measures are in place to protect personal data. We only share personal data in accordance with this Privacy Policy, and only with third parties with your consent or where we are obliged to by law. Appropriate security measures are in place to limit misuse of and unauthorised access to your personal data. Only certain people have access to your data, and that access is protected, including through firewalls, secure servers and data processing agreements with third parties.

Your rights

Under the GDPR you have the following rights in relation to your personal data:

• Right of access. You can ask us what personal data we hold about you.
• Right to rectification. You can ask us to correct inaccurate or incomplete data.
• Right to erasure. You can ask us to delete your data, insofar as we are not required to retain it, for example to meet a legal retention period.
• Right to restriction of processing. You can ask us to limit the processing of your data in certain circumstances.
• Right to data portability. You can ask us to provide the data you gave us in a structured, commonly used and machine-readable format.
• Right to object. You can object to the processing of your data for direct marketing purposes at any time.
• Right to withdraw consent. Where we process your data on the basis of your consent, you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. For our newsletter, you can withdraw your consent at any time by using the unsubscribe link in every email we send, which is as simple as giving your consent.

To exercise these rights, please send your request to [email protected]. Please make clear that your request concerns your rights under the GDPR. To verify your identity we may ask you to provide a copy of proof of identity. We advise you to black out your citizen service number (BSN), the document number and the Machine-Readable Zone (MRZ) on any copy you send.

Complaints

If you have a complaint about how we use your data, you can contact us. You are also entitled to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Privacy policy of third parties

Our website may contain links to other websites that do not belong to us. We cannot accept responsibility for the way these parties handle personal data. We advise you to read the privacy policy of these parties, or to contact them for further explanation of how they use personal data.

Social media

Social media buttons may be included on our website to allow pages to be shared via social media networks such as Facebook, X (formerly Twitter), YouTube, Vimeo and LinkedIn. If you click on these buttons, your personal data will be processed by the relevant social media network. We advise you to read the privacy statements of these networks to see how they handle your personal data.

Where can you send your questions or complaints?

If you have any questions or comments, please contact us. You can use the contact form on the website or send an email to [email protected].

This Privacy Policy was last updated on July 3rd, 2026. To continue to comply with the latest developments in privacy protection, we make changes to this Privacy Policy from time to time. You will always find the most recent version on this page.