Privacy policy

This dated notice supersedes any earlier statement on this page where the two differ.

Sanabil operates this website and handles requests about personal data through the contact details shown on the site. The registered legal name and registered address, when supplied by the organization, appear in the footer. A community venue or contact address is separate from the registered address.

We use account, guest form, booking and program details to respond to requests, provide the requested service and administer participation (contract or steps you ask us to take). Payment references, status, invoices and receipts support settlement and legal accounting obligations. Necessary security and abuse-prevention records serve our legitimate interest in protecting the service. Optional statistics, external media and newsletters have separate choices or requests.

A guardian may supply dependent details, including accessibility, dietary, medical or emergency care notes. Access is restricted to staff who need them for participation and safety. Such sensitive information needs a specific lawful condition in addition to the ordinary GDPR basis; a general registration is not proof of consent. Photography and public media publication are separate, purpose-specific decisions and can be withdrawn.

For donations, bookings and invoices, we retain the amount, currency, payment status, references and the receipt or refund history. Online checkout goes to the selected payment provider, such as Mollie or Stripe when configured; staff may also record cash or bank-transfer settlement. In the current giving flow, recurring requests create new invoices or payment links, not automatic debits; older provider plans may have different arrangements and need individual verification. A payment or withdrawal receipt records what was received, not that a refund has already been made.

If you enter an email address for the newsletter, we use it for that requested list. Signup is separate from an account or booking. If a newsletter message has a signed unsubscribe link, follow it and confirm to stop future messages for that subscription. For older messages without a link, or links that cannot be verified after a security-key change, use our contact page to ask us to remove your address. Staff can also remove a list entry.

Necessary hosting, email delivery and selected payment providers receive only data needed for their role. If reCAPTCHA is configured, Google receives technical request and device data for security when you interact with a protected form, before an optional-cookie choice. Administrators may optionally send selected website text to DeepL for translation; ordinary visitor forms are not automatically translated there. External Instagram or TikTok players receive data such as IP address only when loaded. Provider locations and any international-transfer safeguards require verification for the actual services in use; we do not assume EEA-only processing or an unverified processing agreement.

We keep data for the service, safeguarding, legal accounting duties and possible claims, then review deletion or anonymization. There is no single GDPR period for all personal data and no automatic seven-year purge of every record. Financial administration may need at least seven years from the end of its current relevance; unrelated care notes do not inherit that period. Optional daily aggregate counts are kept for 90 days. Security IP fields and mail transport logs follow configurable operational schedules; backups rotate separately.

Optional participant feedback is linked to a verified booking or application and kept for up to two years. Authorized staff can read private feedback. Anonymous public publication requires separate consent and moderation. Authors can withdraw publication and erase their comment through their review link. Requested email access links expire after 48 hours. No review incentives are offered.

Required and optional fields are marked on our forms. Without necessary contact, booking or payment details we may be unable to handle the requested service. A guardian or organizer may provide participant details on their behalf. Newsletter signup, care consent and public-photo consent are separate from account terms.

Automated anti-abuse checks can refuse a login or form submission. They do not decide whether you are entitled to a refund: authorized staff review refund requests. If a security check prevents your request, contact us through the site. You can also send a withdrawal declaration by email.

You can ask for access, correction, erasure, restriction, portability where applicable, or object to processing based on legitimate interests. You can withdraw optional consent for future processing. Erasure is reviewed: legal record-keeping and claims can limit deletion of some financial or audit evidence. You do not need an account to make a privacy request. We must respond within one month. If a permitted extension is needed, we must explain the reason and expected timing within that first month. We check identity proportionately using information already available where possible; do not send a passport, BSN, card number or password through a general form. Contact us through the site; you may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

If you add a family member under My family, we store their name and date of birth. If you tick the care consent, we also store their allergies and diet, any medical or special care needs, and an emergency contact, so that Sanabil staff can care for them at activities and events they are registered for. Only authorized staff can see this information, and every view is recorded. It is never included in exports. Withdrawing care consent deletes the shared care information immediately for all guardians. Removing the family member or deleting your account deletes their care information when no other active guardian remains. When you book event tickets, you may name who each ticket is for.