Last updated on 9 September 2026 (automatically translated - Dutch is the original version).
1. Who we are
Stichting Fair Resource Foundation (hereinafter: FRF) is responsible for the processing of personal data as described in this statement.
Name: Stichting Fair Resource Foundation
Address: UcO, 2e Daalsedijk 6a, Utrecht
Chamber of Commerce (KvK) number: 08111421
We are not obliged to appoint a data protection officer and do not have one.
2. Our guiding principle
We collect as little personal data as possible to do our work. We do not sell or rent your data to anyone. We do not use advertising trackers, social media pixels or commercial profiling services. There is no cookie banner on our website because we do not place cookies that require consent.
3. What we process, why and for how long
3.1 Newsletter and email updates
What data: your name and email address. In addition, we register whether you open our emails and which links you click on. Action Network uses your IP address to automatically determine your country for the newsletter form.
Why: to inform you about our work, our research and our campaigns, and to see which topics resonate so that we do not send unnecessary or irrelevant email.
Legal basis: your consent (Article 6(1)(a) GDPR). You provide this by signing up yourself.
Retention period: until you unsubscribe. After that, we only keep your email address on an unsubscribe list so that we do not accidentally write to you again.
Withdrawal: there is an unsubscribe link at the bottom of every email. Unsubscribing does not affect the lawfulness of the emails you received before doing so.
3.2 Petitions and online actions
What data: your name, email address and city/town or postcode. For some actions, we ask for additional information; this will then be stated on the action page itself. Action Network uses your IP address to automatically determine your country for the action form.
Why: to convey your signature or message to the target of the action — for example, a member of parliament, the European Commission or a company — and to inform you about the progress and outcome of that specific action.
Legal basis: your consent (Article 6(1)(a) GDPR).
To whom we present it: with each action, we make it clear beforehand to whom the signatures are being presented and what data will be sent with them. As a rule, this concerns name and city/town or postcode, not email addresses.
Visibility: We do not make names of signatories public on our website.
Retention period: Until you unsubscribe. We store aggregated figures indefinitely as part of our campaign archive. They cannot be traced back to you.
Collaboration with partners: if we run an action together with other organisations, we will ask you separately and explicitly for consent before we share your details with those partners. This is never a condition for signing, and you can sign without consenting to this.
3.3 Donations
What data: your name, email address, the amount, the date and the payment method. Your full bank account number or credit card details do not reach us; these are processed by the payment service (see 5).
Why: to process and confirm your donation, to maintain our financial records, to comply with our tax obligations and our accountability obligations as an ANBI (public benefit organisation), and to keep you informed about what is happening with your contribution.
Legal bases:
Processing and confirming your donation: performance of the contract with you (Article 6(1)(b) GDPR).
Our administration and tax return: legal obligation (Article 6(1)(c) GDPR), pursuant to Article 52 of the General State Taxes Act (Algemene wet inzake rijksbelastingen).
Maintaining contact with you as a donor: our legitimate interest (Article 6(1)(f) GDPR) in a sustainable relationship with our supporters. You can object to this; see 9.
Retention period:
Seven years after the end of the financial year in which the donation was made. This is a statutory obligation from which we cannot deviate.
3.4 Emailing us
We do not have a contact form on our website. If you email us, we process your email address and the content of your message to be able to answer your question.
3.5 Website statistics
What data: the pages you view, the time, the website from which you arrived, your browser and device type, and your IP address in shortened form.
Why: to see what information and actions visitors are looking for, so that we can better align our website to this.
Legal basis: our legitimate interest (Article 6(1)(f) GDPR) to optimise the website. We have set up this measurement in such a way that the intrusion into your privacy is kept to a minimum:
we use Plausible;
we do not place tracking cookies for statistics;
we do not track you across other websites;
we use this data solely for statistics and for no other purpose;
we do not share it with third parties.
Retention period: we delete raw visitor data after 25 months. After that, we only keep aggregated reports that cannot be traced back to individuals.
4. Cookies
Our website only places strictly necessary, functional cookies. No consent is required for this, but we must inform you about it.
This section will be supplemented with information for the cookies that are placed.
We do not place advertising, marketing or social media cookies.
5. With whom we share data
We do not sell or rent your data. We only share it with parties that perform services for us, and we have entered into processor agreements with them which stipulate what they may and may not do with your data.
Action Network - for our contact database, email delivery, petitions and online actions - based in the US
Donorbox - for processing donations - based in the US
Stripe - for the payment transaction itself - based in Ireland / US
Plausible - for website statistics - Germany
Framer - for hosting our website - Netherlands
The payment service that processes your donation partly determines itself what happens to the payment data and is independently responsible for this. Their own privacy statement applies to that processing: https://donorbox.org/privacy
In addition, we provide data to third parties when we are legally obliged to do so, for example to the Dutch Tax and Customs Administration (Belastingdienst).
With petitions and actions, we hand over signatures to the party to whom the action is directed. See 3.2.
6. Transfer outside the European Economic Area
Action Network and Donorbox are based in the United States. This means that your data is processed outside the EEA.
7. Security
We take appropriate technical and organisational measures to protect your data against loss and unlawful use. Our website works exclusively via an encrypted connection (HTTPS). Access to our contact database is restricted to employees who need this access for their work.
Do you suspect a vulnerability or a data breach? Please let us know via info@fairresourcefoundation.org
8. Your rights
You have the right to:
request access to the data we hold about you;
have data corrected if it is incorrect or incomplete;
have your data deleted;
have the processing restricted;
object to processing that we base on a legitimate interest;
receive your data in a structured, commonly used format or have it transferred (data portability);
withdraw your consent, at any time and without giving a reason.
Send your request to info@fairresourcefoundation.org. We will respond within one month. To prevent us from providing data to the wrong person, we may ask you to confirm your request via the email address we have on file.
If you are not satisfied with how we handle your data or your request, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): https://www.autoriteitpersoonsgegevens.nl/klacht-melden
9. Automated decision-making
We do not make decisions about you based on automated processing that have consequences for you.
We do, however, use information about your involvement — which emails you open, which actions you sign — to better tailor our communication. For example, we are more likely to send you an update about a campaign for which you previously took action.
10. Changes
We adjust this statement when our work or our working method changes. The date and version number at the top indicate when this last happened. In the event of major changes, we will actively inform you, for example via our newsletter.
