Privacy Statement
The Soil Heroes Foundation (SHF) is committed to protecting your privacy. This statement explains what data we collect, why we process it, and how you can exercise your rights.
For the record: We do not sell, trade, or rent users personal information with third parties.
| Topic | Our Commitment |
| Data Controller | Soil Heroes Foundation (SHF) |
| Contact | Stougjesdijk 168 3271 KG Mijnsheerenland The Netherlands |
| Data Use | We process data primarily for communication (e.g., newsletters, project updates) and fundraising. We never sell your personal data. |
| Your Rights | You have the right to access, correct, delete your data, and withdraw consent at any time. |
| Complaint | You can always file a complaint with the Dutch Data Protection Authority (AP). |
Purposes, Data Processed, and Legal Basis (GDPR Basis)
We process your personal data for the following specific purposes and rely on a defined legal basis for each:
| Purpose of Processing | Personal Data We Use | GDPR Basis (Why We Are Allowed) |
| Sending Newsletters/Updates | Email address, Name | Consent: You have actively signed up for our newsletter. |
| Processing Donations/Purchases | Name, Address, Bank details, Purchase history | Legal Obligation/Contract: Necessary for fulfilling the financial transaction and meeting tax reporting requirements. |
| Responding to Inquiries | Name, Email address, Content of inquiry | Legitimate Interest: Necessary to respond to your questions and provide support. |
| Event/Convening Management | Name, Affiliation, Dietary/Access needs (if provided) | Consent/Contract: Necessary to manage your participation in an event you registered for. |
Recipients and International Data Transfer
Recipients of Personal Data: We may share your data (or categories of data) with the following trusted third parties who act as Processors on our behalf:
Payment processors (e.g., Stripe, PayPal) for handling donations.
Email service providers (We use Ecosend and previously MailChimp) for sending newsletters.
Cloud storage providers for secure data backup.
International Transfer: We do not intend to transfer personal data outside the European Union (EU) or European Economic Area (EEA) unless explicitly stated (e.g., through a UK/US-based email processor that adheres to GDPR and uses Standard Contractual Clauses, which you must specify if applicable).
Data Retention Period
We retain your personal data only for as long as necessary for the purpose for which it was collected or to comply with legal obligations.
Newsletter Data: Retained until you withdraw your consent (unsubscribe).
Donation/Financial Data: Retained for the statutory period required by tax and financial laws ([e.g., 7 years] in the Netherlands).
Your Privacy Rights
You have the following rights regarding your personal data:
Right of Access: You can ask us what personal data we process about you.
Right to Rectification: You can ask us to correct or complete inaccurate data.
Right to Erasure (Right to be Forgotten): You can ask us to delete your personal data.
Right to Withdraw Consent: You have the right to withdraw any consent you have given for a particular processing activity at any time (e.g., unsubscribing from the newsletter).
Right to Object, Restriction, and Data Portability: You have rights to object to certain processing, restrict processing, and receive your data in a portable format.
Mandatory Provision of Data
Obligation to Provide Data: For certain services, you are obligated to provide data. If you wish to receive our newsletter, you must provide your email address. If you wish to make a donation, you must provide the necessary payment information.
Consequences of Non-Provision: If you do not provide the mandatory data (e.g., payment details for a donation), we will be unable to fulfill the request or service.
Automated Decision-Making and Profiling
We do not use automated decision-making, including profiling, that has a legal or similarly significant effect on you.
Complaints
You can file a complaint with the Dutch Data Protection Authority (AP) if you believe we are not handling your personal data correctly.
