Vereniging Mostar Jeugd Nederland
Privacy policy
Last updated: October 2026
-
Who we are
On this platform you choose whether you give to our Belgian or our Dutch organisation. For donations to Vereniging Mostar Jeugd Nederland, established at Johan Jongkindstraat 127, 1062 CT Amsterdam, the Netherlands, and registered with the Dutch Chamber of Commerce under number 89225899, that organisation is the controller. You can reach us at info@mostarjeugd.com.
-
What data we process
When you donate, we process your name, e-mail address, the amount, the causes you chose, the date and time, whether the donation is one-time or monthly, the payment method (for example iDEAL or the card brand) and the language of the page. If you ask for a donation receipt, we also process your address. If you donate on behalf of a company, we also process the company name and KvK number. If the payment method asks for your address, or you enter your phone number, we process those as well. Only our payment provider processes your full card or account number; we never see it. In addition, the server briefly processes your IP address to prevent abuse of the donation form.
-
Purposes and legal basis
We use your data to carry out your donation, send you a confirmation and manage a monthly donation (performance of the agreement, Art. 6(1)(b) GDPR); to meet our legal accounting and retention obligations (legal obligation, Art. 6(1)(c)); and to secure the website and prevent abuse (legitimate interest, Art. 6(1)(f)). We do not use your data for marketing and never sell it.
-
Do you have to provide this data?
Your name, e-mail address and payment details are needed to process a donation. Without them we cannot accept your donation.
-
Who receives your data
We work with carefully chosen service providers who process your data only on our behalf: a payment provider for payments, a hosting partner for the website and a cloud service for our donation records. Data processing agreements are in place with them. Otherwise we only share your data when the law requires it, for example with the Dutch Tax Administration.
-
Transfers outside the EU
Some of these service providers may also process data outside the European Economic Area. This only happens with appropriate safeguards, such as an adequacy decision of the European Commission (for example the EU-US Data Privacy Framework) or its standard contractual clauses.
-
Retention
We keep donation records for seven years, as Dutch tax law requires (Art. 52 of the General Tax Act). After that they are deleted. The server keeps an IP address for abuse protection for at most fifteen minutes; technical hosting logs are kept briefly.
-
Security
This website uses an encrypted connection (HTTPS). Payments go through the secure environment of our payment provider, which complies with the PCI DSS standard. Only authorised people within our association, each with a personal login, can access the donation records.
-
Cookies
This website sets no cookies of its own and uses no analytics or tracking services. The fonts, too, are loaded from our own server. When you click donate, you go to the payment page of our payment provider, which uses its own cookies there that are needed for a secure payment and fraud prevention.
-
Automated decisions
We make no decisions about you based solely on automated processing, and we do not create profiles.
-
Your rights
You have the right to access, rectify, erase and restrict the processing of your data, to data portability, and to object to processing based on our legitimate interest. Send your request to info@mostarjeugd.com; we respond within one month and may ask you to confirm your identity. Data we are legally required to keep can only be erased once that period has ended. You can stop a monthly donation at any time via the same address. If you are not satisfied with how we handle your data, you can lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
-
Changes
We may update this privacy policy. The date at the top of this page shows when it was last updated.