Legal
Privacy policy
Last updated: 9 May 2026
1. Who we are
Stichting Animal Protect is a Dutch foundation that helps animals in need with medical care, shelter and recovery. We are responsible for the processing of personal data as described in this policy.
- Name
- Stichting Animal Protect
- info@stichtinganimalprotect.nl
- Website
- stichtinganimalprotect.nl
- ANBI status
- Applied for
2. What data we process
Depending on how you use our website, we may process the following data:
| Category | Examples | When |
|---|---|---|
| Identification data | Name, email address | When donating, contacting us or subscribing to the newsletter |
| Payment information | Amount, payment status, Stripe session ID | With every donation |
| Contact details | Name, email, message | When using the contact form |
| Volunteer data | Skills, availability | When signing up as a volunteer |
| Technical data | IP address, browser type, page visits | Automatically when visiting the website (with consent) |
Bank details and card numbers are processed exclusively by Stripe and are never stored by Stichting Animal Protect.
3. Purposes and legal bases
We process personal data on the basis of the following legal bases:
- Performance of a contract: Processing donations, sending confirmations and updates per case.
- Legitimate interest: Fraud prevention, security and technical logs for troubleshooting.
- Legal obligation: Financial administration and ANBI reporting require donation information to be retained.
- Consent: Analytics cookies (PostHog), newsletter subscriptions and non-essential functional cookies. You can withdraw your consent at any time.
4. Third parties and processors
We work with the following service providers as processors:
| Service | Purpose | Location | Privacy |
|---|---|---|---|
| Stripe | Payment processing | US / EU (SCCs) | stripe.com/privacy |
| PostHog (optional) | Website analytics (anonymous) | EU (Frankfurt) | posthog.com/privacy |
Transactional email (such as donation confirmations) is sent through our own mail server and is not shared with third parties. PostHog is only loaded after you have given consent through the cookie banner. Your data is never sold to third parties.
5. Retention periods
| Type of data | Retention period | Reason |
|---|---|---|
| Donation data | 7 years | Statutory retention obligation (Belastingdienst, the Dutch tax authority) |
| Contact form | 2 years after last contact | Handling and follow-up |
| Newsletter | Until unsubscription + 1 year | Proof of consent |
| Volunteer data | Until withdrawal + 6 months | Retaining the ability to make contact |
| Analytics logs | 90 days | PostHog default retention |
| Admin sessions | 24 hours | Security |
6. Your rights (GDPR)
Under the GDPR you have the following rights:
- ✓Access: Requesting which data we hold about you.
- ✓Rectification: Having incorrect data corrected.
- ✓Erasure: Erasure of your data ('right to be forgotten').
- ✓Restriction: Temporarily suspending processing.
- ✓Portability: Receiving your data in a machine-readable format.
- ✓Objection: Objecting to processing based on legitimate interest.
- ✓Withdrawal of consent: Withdrawing analytics cookies through the cookie banner or the cookie policy.
You can submit requests via info@stichtinganimalprotect.nl. We respond within 30 days. You also have the right to lodge a complaint with the Autoriteit Persoonsgegevens (the Dutch data protection authority, autoriteitpersoonsgegevens.nl).
7. Security
We take appropriate technical and organisational measures to protect your data: HTTPS (TLS), hashed session keys, parameterized queries via Drizzle ORM, rate limiting on all forms and API endpoints, and restricted access to production systems.
8. Cookies
For detailed information about which cookies we use and how you can manage your preferences, please refer to our cookie policy.
9. Changes
We reserve the right to amend this privacy policy. In the event of material changes, we will post a notice on the website. The date at the top of this document indicates when the policy was last updated.