Privacy & complaints

Privacy statement Stichting SUR (Sunrise)

In this privacy statement we explain which personal data we may process, for what purposes, how we handle this data and what rights you have.

On what legal grounds do we process personal data?

Stichting SUR only processes personal data when there is a valid legal ground. Depending on the situation, processing may be necessary to perform an agreement, to comply with a legal obligation, on the basis of a legitimate interest or on the basis of your consent.

Where we process personal data on the basis of your consent, you can withdraw that consent at any time.

Who is responsible for your personal data?

Stichting SUR is responsible for the processing of personal data as described in this privacy statement.

Stichting SUR (Sunrise), Paletplein 84, 2526 GZ 's-Gravenhage, the Netherlands · E-mail: info@sunrisehelp.org · Phone: +31 6 47 17 66 04

Which personal data do we process?

Which personal data we process depends on how you use our website, make a donation or contact us. We may process the following personal data, among others:

• name and address details;
• e-mail address;
• telephone number;
• details of your donation;
• payment and transaction details;
• information you provide to us via a contact form, e-mail or other communication.

We only process personal data that is necessary for the purpose concerned.

Donations

When you donate to Stichting SUR, we process the personal data needed to handle your donation correctly and to meet our financial and administrative obligations. Depending on how you donate, this may include your name, contact details, the amount and purpose of your donation and payment and transaction details.

Where data forms part of our records subject to a statutory retention obligation, we keep it for the applicable period. Certain basic records are subject to a fiscal retention period of seven years. This does not mean that all personal data is automatically kept for seven years.

Data we process for donations

When you donate, we record your name, e-mail address, telephone number, the type of donation and the amount. For Qurbani donations we also record in whose name the sacrifice is made. We use this information to process your donation, send you the Qurbani video via WhatsApp, answer your questions and prepare an annual overview of your donations.

If you came through the donation link of one of our staff members, we also record which staff member your donation came through; that staff member only sees donations made through their own link.

Payments are handled by Stripe; we do not store your card details. We keep donation records for 7 years, as required by Dutch tax law.

Contact with Stichting SUR

When you contact us via our website, by e-mail, by phone or otherwise, we process the data needed to handle your question or request. This may include your name, e-mail address, telephone number and the information in your message.

We do not keep this data longer than necessary to handle your question or request, unless we are legally required to keep certain information longer.

Newsletters and communication

We may inform you about our aid activities, projects, campaigns and other developments at Stichting SUR. Where your consent is required for such communication, we only use your contact details after you have given consent.

You can withdraw your consent or unsubscribe from further communication at any time, via the unsubscribe option in our messages or by contacting info@sunrisehelp.org.

Withdrawing your consent does not affect the lawfulness of processing carried out before the withdrawal.

With whom do we share personal data?

Stichting SUR does not sell your personal data to third parties. We may use external service providers for our work. Where such parties process personal data on our behalf, we make appropriate agreements on the protection and processing of personal data where necessary.

We may also provide personal data where we are legally obliged to do so or where this is necessary to comply with a request from a competent public authority.

How long do we keep your personal data?

We do not keep personal data longer than necessary for the purpose for which it was collected.

The specific retention period may differ per category of personal data. Where a statutory retention obligation applies, we keep the data for the period prescribed by law.

After the applicable retention period, personal data is deleted or anonymised, unless further retention is required or permitted by law.

Security of personal data

Stichting SUR takes appropriate technical and organisational measures to protect personal data against loss, unauthorised access, misuse, alteration and other forms of unlawful processing.

We review our measures where necessary and adapt them when developments within our organisation or in technology call for it.

Data breaches

If a breach involving personal data occurs, we assess its nature and possible consequences.

Where the GDPR requires notification, we report the data breach to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) within the statutory period. Where required by law, we also inform the people who may be affected.

Your privacy rights

When we process your personal data, you have several rights under the GDPR. Depending on the circumstances, you can:

• request access to your personal data;
• have incorrect or incomplete data corrected;
• request erasure of your personal data;
• request restriction of processing;
• object to certain processing;
• withdraw your consent where processing is based on consent;
• where applicable, request transfer of your personal data.

Would you like to exercise one of these rights? Please contact us at info@sunrisehelp.org.

We may ask you for additional information where this is necessary to verify your identity and to prevent personal data being given to the wrong person.

Complaints & reports

Privacy complaints

Do you have questions or complaints about how Stichting SUR handles your personal data? Please contact us; we will try to handle your question or complaint carefully. You also have the right to file a complaint with the Dutch supervisory authority for privacy legislation, the Autoriteit Persoonsgegevens.

General complaints and reports

Stichting SUR considers it important that questions, complaints and reports are handled carefully. Do you have a complaint about our organisation, our activities, a project, a partnership or the way we act? Or would you like to report something else relevant? Please contact us at info@sunrisehelp.org.

We aim to assess and handle complaints and reports carefully, confidentially where appropriate and within a reasonable period.

Changes to this privacy statement

Stichting SUR may change this privacy statement when our services, website, working methods or applicable legislation change.

The most recent version is published on our website.