Privacy statement

Data controller

Registered address: Stichting Sri Ganapathy Sachchidananda Benelux, Eilandenweg 36, 2904 VJ Capelle aan den IJssel, Nederland / Netherlands — KvK 41064217 — RSIN 8027.66.821 — info@sgsbenelux.nl

Visiting address of the centre: Helmstraat 9, 1975 DP IJmuiden, the Netherlands.

Questions about your data can be sent to info@sgsbenelux.nl.

What we process

Name, email address, phone number (optional) and full postal address.

Gift details: amount, project, frequency, payment method, reference, status and date.

For a periodic gift agreement: date of birth, Dutch citizen service number (BSN), address, optional fiscal partner details, your digital signature and a signing log (IP address, browser, timestamp).

Technical data needed for security and fraud prevention.

Why, and on what legal basis

Processing your gift and managing recurring gifts: performance of a contract (Art. 6(1)(b) GDPR).

Tax and ANBI records, including the BSN on a periodic gift agreement: legal obligation (Art. 6(1)(c) GDPR; the BSN is used only where Dutch tax law requires it).

Newsletters and updates: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.

Security, abuse prevention and service improvement: legitimate interest (Art. 6(1)(f) GDPR).

Retention

Donation and financial records: 7 years, as required by Dutch tax law.

Periodic gift agreements and their signing log: for the term of the agreement plus 7 years.

Email consent: until you unsubscribe.

Processors and transfers

Payments are processed by Mollie B.V. (Netherlands), a licensed payment institution.

Our database, file storage and email delivery run on infrastructure located inside the European Union.

We never sell your data or share it for advertising.

One exception to EU-only processing: if you give us your WhatsApp number and opt in to WhatsApp updates, that number is processed by WhatsApp Ireland Ltd. and Meta Platforms, with transfer to the United States under the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. Without your opt-in your number is never shared with WhatsApp. You can withdraw consent at any time in the donor portal or by replying STOP.

Your rights

You have the right of access, rectification, erasure, restriction, objection and data portability, and you may withdraw consent.

The donor portal lets you export your data, stop a recurring gift and delete your account. Data we are legally required to keep is retained until that period expires.

You may lodge a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).

Security

Access to donor data is limited to authorised staff, traffic is encrypted, and sensitive documents are held in restricted storage with per-donor access rules. The BSN is stored encrypted (AES-256); staff only ever see the last four digits for reconciliation.