Last updated: 2026 November 5th

Stichting YvYa attaches great importance to the protection of your personal data. In this privacy- and cookiepolicy, you can read which data we process, why we do so, and what your rights are. We fully comply with the General Data Protection Regulation (GDPR).

Who is responsible?

Stichting YvYa, Weegschaalstraat 3, 5632 CW Eindhoven (Chamber of Commerce 80139515), is responsible for processing your personal data.
Questions? Send an email to info@yvya.nl or bestuur@yvya.nl, or call +31 (0)6 1445 7982.

Which data do we process and why?

In addition, we retain financial records for as long as required by statutory law (see Retention periods).

With whom do we share data?

We never sell your data and do not use it for purposes other than those mentioned above. We do collaborate with third-party service providers who process data on our behalf.
We have entered into appropriate agreements with them to ensure the protection of your personal information.

• ActiveCampaign (ActiveCampaign LLC): used for newsletters and the management of donations and registrations. This is also where your IBAN is stored when you make recurring donations. ActiveCampaign processes personal data solely on our instructions and not for their own purposes.
• Mollie B.V.: our payment provider for one-time donations and online store purchases. Payment details, such as account or card numbers, are processed directly by Mollie. Mollie also acts as an independent data controller to prevent fraud and comply with statutory financial requirements. Read their privacy policy on mollie.com.
• Triodos Bank N.V.: our bank. For collecting periodic donations, we process your name and IBAN via SEPA direct debit (creditor identifier NL43ZZZ801395150000).
• JouwWeb: the provider hosting our website and webshop platform.
• Google Analytics has been deactivated since 5 November 2026.

ActiveCampaign may transfer and process data outside the European Economic Area, such as in the United States. This is done exclusively under appropriate safeguards, including the EU-US Data Privacy Framework or European standard contractual clauses.

Furthermore, we only provide data to third parties when legally required to do so, such as in case of an official order by law enforcement or judicial authorities, or when you have granted explicit consent.

How long do we retain your data?

• Newsletter subscribers: as long as your subscription is active. We check annually whether you wish to stay updated. If you do not reply, or if you unsubscribe, we remove your details within 3 years at the latest.
• Donors: as long as you remain a donor. Direct debit mandates and IBAN records are retained for up to 14 months following the last charge. Related financial transaction records are kept for 7 years according to statutory tax obligations.
• Webshop orders: 7 years in compliance with tax law record-keeping duties.
• Contact form submissions: 1 year after handling your request.

Cookies

A cookie is a small text file stored on your device when you browse a website.

Functional cookies. These are strictly necessary for the proper functioning of the site, such as keeping items in your shopping cart and saving your cookie preferences.
These cookies do not require prior consent.

We do not deploy advertising cookies, and no third-party embedded videos are hosted on our website, with the exception of our own recorded video material for which explicit consent is always gathered in advance.

Modifying or withdrawing your choice. On our website, you can accept or decline cookies. If you wish to update your choice or withdraw consent later, you can delete the cookies and website data for yvya.nl via your browser settings. The cookie notification banner will then reappear, allowing you to select your preference anew. You can also block cookies entirely through your browser settings.

Social media. Our website includes share buttons for platforms such as Facebook, Instagram, LinkedIn, and YouTube. These buttons function through external code provided by these services and open in a new window. How they handle personal information is governed by their respective privacy statements.

Visuals and Scenes (Photos and Videos)

The YvYa Foundation takes photos and videos during meetings, events, and campaigns to capture the atmosphere and share these memories via our website (including photo albums), newsletters, and social media channels. We do this based on our legitimate interest (Article 6(1)(f) of the GDPR) to increase engagement with our foundation and mission. When creating and publishing this visual material, we always strive to respect the privacy of those present.Your Rights (Right to Object and Right to Erasure).

Is there a photo or video online in which you are recognizable, and would you prefer to have it removed? Under the GDPR, you always have the right to object to the publication of your image.

How do you submit a request? Send an email to info@yvya.nl.
What do we need? In the email, briefly indicate which page or photo album is involved, and include a short description or a screenshot of the photo in question.
Upon receipt of your request, we will permanently remove the image material from our website and/or social media channels as soon as possible, but no later than the statutory deadline.

Security

We implement suitable technical and organizational measures to safeguard your personal data against loss or unlawful processing. Data is transmitted via secure encrypted connections and stored on protected servers. Anyone authorized to access personal data on behalf of YvYa is subject to strict confidentiality obligations. IBAN information and other donor data are accessible exclusively to authorized staff and volunteers who need them for donation administration. We enforce personalized login credentials, maintain secure backups, and review our security protocols regularly.

Your rights

You have the right to:

• access the personal data we hold about you;
• have incorrect data corrected or deleted;
• restrict data processing or object to processing;
• receive your personal data in a structured, portable format;
• withdraw your consent at any given time. You can easily do so via the unsubscribe link in every newsletter or by emailing info@yvya.nl. Withdrawing consent does not affect processing carried out prior to withdrawal.

Please send any privacy-related requests to info@yvya.nl. We will reply within one month.

Complaints

If you disagree with how we handle your personal information, please get in touch with us so we can find a mutually satisfactory solution. In addition, you always retain the right to submit a formal complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl).

Changes to this policy

We may update this privacy- and cookiepolicy from time to time. The latest version will always be published on this page, with the revision date stated at the top.

Contact