Stichting M06 ("M06 Foundation", "we", "us", "our") respects your privacy and is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR / AVG) and Dutch law. This Privacy Policy explains what data we collect when you visit m06.foundation or helpgaza.nl, make a donation, or otherwise interact with us, and what your rights are.
1. Data Controller
Stichting M06
Klinkerweg 142, 9684 AJ Finsterwolde, The Netherlands
KvK: 92855326 | RSIN: 866194897
Email: info@m06.foundation
2. What Data We Collect
2.1 Data you provide to us
- Contact details: name, email address, phone number, postal address.
- Donation details: amount, frequency (one-off or recurring), donation date.
- Payment details: processed by our payment provider Mollie B.V. We do not store full bank or card numbers on our servers.
- Any content you send us by email, WhatsApp, or contact form.
2.2 Data collected automatically
- IP address, browser type, device type, operating system.
- Pages visited, referring URL, timestamps.
- Cookies strictly necessary to operate the site. We do not use tracking or advertising cookies without consent.
3. Why We Process Your Data (Legal Basis)
- To process your donation — performance of an agreement (art. 6(1)(b) GDPR).
- To issue donation receipts and comply with Dutch tax and ANBI obligations — legal obligation (art. 6(1)(c) GDPR).
- To send you updates about the Foundation's work — only with your consent (art. 6(1)(a) GDPR), which you may withdraw at any time.
- To answer questions you send us — legitimate interest (art. 6(1)(f) GDPR).
- To secure our website and prevent fraud — legitimate interest.
4. Who We Share Data With
We do not sell your personal data. We share data only with processors who help us operate, under a data processing agreement:
- Mollie B.V. — payment processing (Keizersgracht 126, 1015 CW Amsterdam).
- Hosting and email providers used to operate m06.foundation and helpgaza.nl.
- Dutch tax authorities (Belastingdienst) when required by law for ANBI reporting.
All processors are located in the EU/EEA or provide appropriate safeguards (Standard Contractual Clauses) where data is transferred outside the EEA.
5. How Long We Keep Your Data
- Donation and financial records: 7 years (Dutch tax law requirement).
- Contact correspondence: up to 2 years after last contact.
- Newsletter subscribers: until you unsubscribe.
- Website logs: up to 12 months.
6. Your Rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (where legally possible).
- Restrict or object to processing.
- Data portability.
- Withdraw consent at any time.
- Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).
To exercise any of these rights, email info@m06.foundation. We will respond within 30 days.
7. Security
We use TLS/HTTPS encryption for all data transmitted to our site, restrict access to personal data on a need-to-know basis, and rely on Mollie (a licensed Dutch payment institution supervised by De Nederlandsche Bank) for secure payment handling.
8. Cookies
Our website uses only strictly necessary cookies required for basic functionality. We do not set analytics or advertising cookies without your explicit consent.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced on this page with an updated "Last updated" date.
10. Contact
Questions about this Privacy Policy? Email us at info@m06.foundation or write to the postal address above.