Stichting Roberta’s Nursery supports a kindergarten in Malawi. For this work, and through this website, we process a limited amount of personal data. This privacy policy explains which data that is, why we use it, how long we keep it and what your rights are. We comply with the General Data Protection Regulation (GDPR).
This is a translation. If the English and Dutch versions differ, the Dutch text prevails.
Who is responsible
Stichting Roberta’s Nursery
Hyacintenlaan 42 RD
2015 BD Haarlem, the Netherlands
Chamber of Commerce: 72016159
RSIN: 858946075
Telephone: +31 20 623 5614
Email: info@robertasnursery.org
The foundation is run by volunteers with an unpaid board. Only board members have access to the information you send us.
Contacting us
The Contact page has a contact form. We process what you enter: your name, your email address, the subject if you give one, and your message. We also record the IP address from which you send the form, solely to prevent misuse of the form. Your message is stored on our own server within the European Union and is deleted automatically after 90 days. The notification we receive is delivered by an email service provider within the European Union that acts only on our instructions.
If you email us directly, we process your email address and what you write to us. We keep your message for as long as we need to deal with your question.
Legal basis: our legitimate interest in answering messages and protecting the form against misuse (Article 6(1)(f) GDPR).
Donating
Through the donation form. On the Donate page you can make a one-off or recurring donation. We process your name and email address and, if you fill them in, your phone number, address, company name and a message. We also record the amount, whether the donation is one-off or recurring, the payment method and the status of the payment. The payment itself is handled by a payment service provider based in the Netherlands. It receives your name, your email address and the amount from us, and processes your payment details (such as your account number) on its own payment page; the privacy policy of that provider applies there too. For a recurring donation, the payment service provider keeps the mandate so that later instalments are collected automatically. You can stop a recurring donation at any time by emailing us.
By bank transfer. If you transfer money to our account, we see your name, your account number and the description on our bank statement.
We use this data to process your donation and for our financial records. As a registered charity (ANBI) we are required by law to keep those records for seven years; after that we delete the data. We do not use your data for any other purpose and do not send you a newsletter unless you ask for one.
Legal basis: carrying out your donation (Article 6(1)(b) GDPR) and the legal obligation to keep our records (Article 6(1)(c) GDPR).
This website
Technical log files. For every visit, the web server records the IP address, the time and the page requested, among other things. This is necessary for security and for tracing errors. These files are deleted automatically after thirty days.
Visitor statistics. We measure how many people visit the website and which pages are read most. We do this with statistics software on our own server within the European Union. The data stays there and we share it with no one. Specifically:
- nothing is stored on or read from your device;
- your IP address is anonymised before it is stored;
- from your IP address we first derive an approximate location (country, region and city), using a database on our own server; no data is sent to any other party for this;
- we also record which pages you viewed, for how long, which website or search engine brought you here, and what kind of device, browser and screen size you use;
- we do not track you across other websites and do not build a profile of you;
- if “Do Not Track” is enabled in your browser, we do not measure your visit;
- we delete the individual visit data after 180 days; after that we keep only totals.
Map. The contact page has a link to an external map service showing where the school is. You only visit that service’s website when you click the link.
Photos. This website shows photos of the school, the children and the people who work there. If you, or your child, appear in a photo and you would like it removed, email us and we will take it down.
The website runs on servers within the European Union. Technical management is outsourced to an IT service provider that acts only on our instructions. Apart from the parties in this policy, no one receives data through the website. We will provide the names of our processors on request.
Legal basis: our legitimate interest in a well-functioning, secure website (Article 6(1)(f) GDPR).
Cookies
This website does not place cookies for advertising, statistics or tracking visitors across other websites. That is why you only see a short notice. If you close it, the website remembers this for six months with one small file on your device, so the notice does not return on every visit. It contains nothing that can be traced back to you. On the payment page of the payment service provider, that provider’s cookie rules apply.
Sharing with others
We do not sell your data and only share it with others when that is necessary for the purpose for which you gave it to us, or when the law requires us to. We make agreements on security and confidentiality with parties that process data on our behalf. We do not make decisions about people based on automated processing.
Your rights
You have the right to access, correct or delete your personal data. You can object to the use of your data, ask us to restrict that use, and ask to receive your data in a computer file. Send your request to info@robertasnursery.org. We will respond as soon as possible, and within one month at the latest. To make sure the request comes from you, we may ask you to verify your identity; please do not send us a copy of your passport or identity card unless we ask for it.
If you disagree with how we handle your data, please let us know. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
We take appropriate measures to protect your data against loss, misuse and unauthorised access. The website can only be reached over an encrypted connection, and its administration is protected with a second login step. If you think your data is not properly secured or that it is being misused, please email us at info@robertasnursery.org.
Changes
If anything changes in the way we handle data, we will update this policy. This version is dated 18 October 2026.