PRIVACY STATEMENT GSRD FOUNDATION
The GSRD Foundation (hereinafter: "we / our / us") finds the protection of the privacy of our applicants, partners and website visitors very important. We are responsible for the processing of your personal data in accordance with this Privacy Statement.
CONTACT INFORMATION
GSRD Foundation
Joan Muyskenweg 39
1114 AN Amsterdam
secretariat@gsrd.com
+31 20 564 6805
THE PURPOSE AND BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA
We process your personal data for the following purposes:
- To provide our services;
- To improve our website;
- To comply with our legal obligations.
The processing of your personal data is based on the following grounds:
- Your consent;
- The preparation or performance of an agreement with you;
- Compliance with a legal obligation;
- Our legitimate interests.
When we process personal data based on your consent, you can always revoke your consent.
The processing of your personal data can be necessary to enter into an agreement with you. In these cases we can only continue our relationship with you when you provide us with the requested personal data.
We may process your personal data when we are legally obliged to do so by law, regulation, court order or any government authority.
We may process your personal data for providing information on our organization and activities or composing user statistics of your visit to our website.
THIRD PARTIES
We employ a third party to process personal data on our behalf, namely our IT provider. This party may process your personal data only to the extent that is necessary to perform its activities on our behalf and subject to our instructions. We have procedures in place to ensure that this company values your privacy.
In all other cases, no personal data provided to us shall be transferred to third parties without your consent, unless this is necessary in the preparation or performance of an agreement with you or if we are legally obliged to do so.
Our website may contain links to other websites. We cannot be held responsible or liable for any processing of your data by these parties. For further information, we advise you to read the privacy policy on the website concerned.
RETENTION PERIOD
We do not retain your personal data for any longer than is necessary for the purposes stated in this Privacy Statement.
When we process your personal data based on a legal obligation, we will store your personal data for the period that is determined by the law.
Depending on the type of cookie, we will store your personal data for maximum two years.
Partners and applicants
When we process your personal data based on the preparation or the performance of an agreement with you, we will store your personal data for up to 10 (ten) years after our agreement has ended, or after resolving a dispute. When we do not enter into an agreement with you we will store your personal data for up to 5 (five) years.
SOCIAL MEDIA
Our website publishes articles, reports or other information, which can contain social media buttons to refer to Facebook or Twitter. These buttons can be used to share the articles on social media. We are not responsible for the privacy policy of Facebook and Twitter, since we do not have any influence on the way these social media buttons function.
By using a social media button these parties will place a ‘social media cookie’ so they can recognize you when you use the button. The privacy policies of these social media providers change regularly. You can access the privacy policies of Facebook and Twitter on their websites.
YOUR RIGHTS
You have the following rights in relation to the processing of your personal data by us.
Right to access
You have the right to access the personal data that we process. When requested we will provide you with an overview of how we process your personal data. We reserve the right to charge you a reasonable fee for administrative costs in case you request more than one overview.
Right of rectification
Upon your request, we will correct or supplement your inaccurate or incomplete personal data.
Right to erasure
You have the right to request the erasure of your personal data. We are only obliged to comply with your request in one of the following cases:
- your personal data is no longer necessary for the purposes for which they were originally collected and processed;
- you withdraw your consent and there are no other legal grounds for the processing;
- you object to the processing and we have no legitimate grounds for the processing;
- your personal data has been unlawfully processed;
- your personal data has to be erased to comply with a legal obligation to which we are subject.
After we have received your request, we will notify you about whether we can fulfil your request or not. In case we cannot fulfil your request we will let you know on which grounds.
Right to restriction of processing
You have the right to temporarily cease the processing of your personal data in one of the following cases:
- you contest the accuracy of your personal data, during a period which allows us to verify the accuracy of your personal data;
- the processing is unlawful and you oppose to the erasure of your personal data and request restriction of the processing instead;
- we don’t need your personal data anymore for the purpose of our processing, but you require your personal data for the establishment, exercise or defence of legal claims.
Right to object
You have the right to object against the processing of your personal data in one of the following cases:
- the processing is based upon our legitimate interests;
- we process your personal data for direct marketing;
- we process your personal data for scientific/historical research purposes or statistical purposes.
We reserve the right to deny your request when we can demonstrate compelling legitimate grounds for the processing which override your interests, or when the processing is necessary for the establishment, execution or defence of legal claims.
Right to data portability
You have the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and to transmit the personal data to another controller. Upon request, we can transmit the personal data for you, if this is technically feasible. The right to data portability can only be exercised when the two following grounds have been met:
- the processing is based on your consent or on the performance of a contract; and
- the processing is carried out by automated means.
You can send us a request to exercise one of your rights mentioned above. We reserve the right to take steps to authenticate your identity before we fulfill your request. We will answer your request free of charge, however reserve the right to charge a reasonable fee for carrying out your request in case your request is excessive or is manifestly unfounded.
You can send your request to secretariat@gsrd.com. Be as clear and precise as possible in your email. In any case, state which right you want to exercise and on what grounds. In general, we will answer your request within one month after we receive your request. In case we need more time, we will inform you within one month after receipt of your request that we need a maximum of another two months. Within this period of time, we will notify you about whether we can fulfil your request or not. In case we cannot fulfil your request we will let you know on what ground(s).
