1. Introduction
The John Blankenstein Foundation (JBF) processes your personal data carefully, securely and confidentially. The JBF strictly complies with all legal provisions relating to privacy, including the General Data Protection Regulation (GDPR). We are committed to doing everything we can to protect your privacy. The rules on protecting your privacy are laid down in the GDPR, with the Data Protection Authority supervising compliance with the law. The JBF acts within the framework of the law.

2. What is personal data?
Personal data is any data that can be traced back to a person. Examples include your name, address, telephone number, and account number. Sometimes we aggregate or anonymise your personal data so that you can no longer be traced as a person.
There is also special personal data that receives extra protection by law due to the high risk of infringement of a person's privacy. Special personal data is information about: religion, political preference, sexual orientation, health, criminal record and race.

3. Are you obliged to provide personal data?
Sometimes it is necessary to use some of your personal data in order to provide you with a service or product that you request or purchase from us. We will first ask for your explicit consent before collecting more personal data from you. The information provided for the purpose of this service or product will only be used for the processing of this service or product.

4. Who is the controller responsible for processing personal data?
The JBF is the legal controller for the processing of personal data.

5. What personal data do we use for our services and products?
Personal data is used for the proper performance of our duties as a charitable organisation (ANBI) for the purpose of achieving our objectives.

6. For what purposes do we use your data?
The personal data mentioned above is processed for the following purposes:
·The JBF uses personal data when we have a legal basis for doing so. The legal bases are: consent, agreement, legal obligation.
·Telephone contact/correspondence/complaint handling;
·Provide information about changes to services.

7. How long do we retain your data?
The JBF will not retain the collected personal data longer than is strictly necessary, or as required by law, to achieve the purposes for which the data was collected.

8. Existence of automated individual decision-making
No automated individual decision-making takes place.

9. Do we share the data with other parties?
The JBF protects your privacy and will not disclose your personal data to third parties without your express consent, unless required to do so by law.
We enter into a processing agreement with organisations that process your data on our behalf to ensure the same level of security and confidentiality of your data. The JBF remains responsible for these processing operations.

10. Will your data be transferred outside the European Union?
The JBF's starting point is to process personal data only within the European Economic Area (EEA). Since the GDPR applies within the EEA, an adequate level of protection can in principle always be ensured.

11. How do we protect your data?
Because the security of personal data is very important, the JBF has a strict policy in this regard. The JBF takes appropriate measures to prevent misuse, loss, unauthorised access, and other undesirable actions involving personal data. Examples of these measures include the use of encryption and training our employees in the area of privacy. We ensure that, if we forward your personal data to other organisations such as processors, these organisations adhere to the same standards.

12. What rights do you have based on the processing of personal data?
You have the right to view, correct or delete your personal data. You may also request a restriction on processing, transfer the data to another organisation, object to processing or exercise your right not to be subject to automated individual decision-making/profiling.
If you wish to exercise this right, please make an appointment with the JBF. You can do so by sending an email to info@johnblankensteinfoundation.nl. It is important that you can identify yourself and prove that the data actually belongs to you. It is not permitted to view data belonging to other persons.

13. How can you contact us?
If you have any questions about this privacy statement, please contact us at info@johnblankensteinfoundation.nl.
Additional information about how we handle personal data within the JBF can be found in our privacy policy and regulations. An overview of all processing of personal data within the JBF can be found in the processing register.
We are, of course, happy to assist you if you have any complaints about the processing of your personal data. If, despite this, we are unable to resolve the issue together, you also have the right under privacy legislation to lodge a complaint with the privacy regulator, the Data Protection Authority.