Privacy statement

Data controller

Registered address: Stichting Sri Ganapathy Sachchidananda Benelux, Eilandenweg 36, 2904 VJ Capelle aan den IJssel, Nederland / Netherlands · KvK 41064217 · RSIN RSIN 8027.66.821 · info@sgsbenelux.nl

Visiting address of SGS Benelux Center: Helmstraat 9, 1975 DP IJmuiden, the Netherlands.

Questions about your data can be sent to info@sgsbenelux.nl.

What we process

Name, email address, phone number (optional) and full postal address.

Gift details: amount, project, frequency, payment method, reference, status and date.

For a periodic gift agreement: date of birth, Dutch citizen service number (BSN), address, optional fiscal partner details, your digital signature and a signing log (IP address, browser, timestamp).

Technical data needed for security and fraud prevention.

Why, and on what legal basis

Processing your gift and managing recurring gifts: performance of a contract (Art. 6(1)(b) GDPR).

Tax and ANBI records, including the BSN on a periodic gift agreement: legal obligation (Art. 6(1)(c) GDPR; the BSN is used only where Dutch tax law requires it).

Newsletters and updates: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Security, abuse prevention and service improvement: legitimate interest (Art. 6(1)(f) GDPR).

Retention

Donation and financial records: 7 years, as required by Dutch tax law.

Periodic gift agreements and their signing log: for the term of the agreement plus 7 years.

Email and WhatsApp consent: until you unsubscribe.

WhatsApp messages, email sync logs and casual interest messages: 90 days after processing or rejection.

Magic login links: 24 hours.

Technical logs for fraud and incident investigation: 1 year.

Processors and transfers

Payments are processed by Mollie B.V. (Netherlands), a licensed payment institution.

Email newsletters and confirmations are sent through Brevo (France), under a data processing agreement.

Our database and file storage run on infrastructure located inside the European Union.

SGS Benelux staff receive internal notifications about new gifts via Telegram. These alerts contain the donor's name, country and amount and are used only for gift administration.

We never sell your data or share it for advertising.

One exception to EU-only processing: if you give us your WhatsApp number and opt in to WhatsApp updates, that number is processed by WhatsApp Ireland Ltd. and Meta Platforms, with transfer to the United States under the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Without your opt-in your number is never shared with WhatsApp. You can withdraw consent at any time in the donor portal or by replying STOP.

Your rights

You have the right of access, rectification, erasure, restriction, objection and data portability, and you may withdraw consent.

The donor portal lets you export your data, stop a recurring gift and delete your account. Data we are legally required to keep is retained until that period expires.

You may lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

Security

Access to donor data is limited to authorised staff, traffic is encrypted, and sensitive documents are held in restricted storage with per-donor access rules. The BSN is stored encrypted (AES-256); staff only ever see the last four digits for reconciliation.