GOOD ANALYTICS PRIVACY NOTICE
Last updated: 05-03-2024
1. Introduction
This is the Privacy Notice of Stichting Good Analytics, a foundation based in Utrecht, the Netherlands, registered in the Commercial Register of the Chamber of Commerce under number 88622770 (“Good Analytics”, “us” or “we” or “our”).
This Privacy Notice outlines the processing of Personal Data on this website (the “Website”) and of our volunteers. This Privacy Notice describes our policies and practices regarding our collection and use of your Personal Data and sets forth your right to privacy.
Personal Data will be processed in compliance with European data protection legislation (including the EU General Data Protection Regulation (Regulation (EU) 2016/679 (“GDPR”)). “Personal data”, “Controller” and “Processor” have the meanings given in the GDPR.
2. Who is the Controller for the processing of your Personal Data?
The Controller of your personal data is the organisation that is responsible for the use of any personal data about you. Good Analytics is the Controller of any personal data processed as a result of your use of this Website. If you are a volunteer, Good Analytics will also need to process some personal data relating to you as part of your volunteer arrangement. In this case, Good Analytics will also be the Controller of your personal data.
3. Which categories of Personal Data do we process?
We collect the following types of Personal Data from you when you visit our Website:
-
Information you provide to us: We collect Personal Data when corresponding with us on the Website. Such Personal Data includes:
-
your first name and surname
-
email address
-
any Personal Data you provide to us when corresponding with us
-
Information automatically collected by us: When you visit or interact with this Website, we automatically collect Personal Data about you and your visit. Such information includes:
-
your IP address and other unique identifiers of the computer, mobile or other device you use to access this Website
-
your choice about cookies on our website
We gather such information through the use of web technologies that are required for our website to function. More information on the use of cookies can be found in our Cookie Notice here. IP addresses are stored for 30 days and are never stored together with other Personal Data.
We also collect Personal Data from you when you become a volunteer:
-
Information you provide to us: We collect Personal Data when you fill in the volunteer agreement, during the interviews and while working with Good Analytics. Such Personal Data includes:
-
your first name and surname
-
email address
-
date of birth
-
CV
-
photos and videos
-
notes taken during any interviews
-
any Personal Data you provide to us when corresponding with us such as career aspirations and project preferences
4. Why and under which lawful basis do we process your Personal Data?
We process your Personal Data when you visit the Website for the following purposes and based on one of the following lawful bases:
-
For our legitimate and/or overriding (business or legal) interest (art. 6(1)(f) GDPR):
-
​
-
to answer your queries and further maintain contact with you (for instance regarding media related queries)
-
for our internal management
-
for the handling of complaints and disputes
Web technologies
-
to provide, maintain, secure and optimize our Website
-
to ensure we can provide you with a well-functioning website by for instance using your IP-address to manage traffic efficiently
-
to help diagnose server problems and to administer our Website
-
to avoid and manage security risks, threats and abuse through the placement of essential cookies
(Please refer to our Cookie Notice for more information).
-
On the basis of your consent (art. 6(1)(a) GDPR):
-
to promote Good Analytics
-
to send news and updates
-
For compliance with our legal obligations (art. 6(1)(c) GDPR):
-
to comply with our legal obligations when required under applicable local laws. These can be specific regulations, court orders or governmental regulations.
We process your Personal Data when you become a volunteer for the following purposes and based on one of the following lawful bases:
-
To perform our contract with you or enter into such contract with you (art. 6(1)(b) GDPR):
-
managing the relationship between Good Analytics and the volunteer;
-
to match you to appropriate projects based on existing/desired skill
-
to administer the contract between Good Analytics and the volunteer
-
On the basis of your consent (art. 6(1)(a) GDPR):
-
Where you have provided your consent to publish photos and/or videos for promotional purposes.
-
-
For compliance with our legal obligations (art. 6(1)(c) GDPR):
-
to comply with our legal obligations when required under applicable local laws. These can be specific regulations, court orders or governmental regulations.
5. When and how we share your information with others
We may share your information with other third parties for the purposes described below. We will only disclose your Personal Data to those with a legitimate business need and after we have taken steps to ensure that your Personal Data is processed in a manner consistent with this Privacy Notice.
These include:
-
Our Partner NGOs: When you are a volunteer, your name and contact details will be disclosed with the relevant NGO you will provide services to.
-
Our Service Providers: Your Personal Data may be disclosed to our service providers who perform services on our behalf. They provide services such as cloud hosting and website maintenance. Our service providers are subject to contractual obligations to safeguard your Personal Data and to only process the Personal Data as instructed.
-
Other third parties when necessary pursuant to regulatory obligations: We may disclose your Personal Data to third parties to comply with court orders, other legal obligations, to enforce or apply our terms of use and other agreements and protect the rights, property, or safety of Good Analytics or others.
We do not sell Personal Data to anyone and only share it with third parties when this is necessary.
6. Transfers outside the European Economic Area
Your Personal Data is transferred outside the EEA, namely to the US as our service providers are located there. We have put suitable safeguards in place to ensure that any transfers are carried out in compliance with data protection laws. These include, for instance, relying on adequacy decisions or standard contractual clauses issued by the European Commission together with binding and enforceable commitments by the recipient.
You may request additional information in this respect and obtain a copy of the relevant safeguard by exercising your rights as set out below.
7. Data subject rights
You are entitled to a number of rights over the processing of your Personal Data. You may exercise these rights at any point by contacting us via info@goodanalytics.nl. We will consider all such requests and will provide our response within a reasonable period, or within the period prescribed by law. If we do not comply with your request within such time frame, we will explain why. We may request you to provide us with information necessary to confirm your identity before responding to any request you make.
You have the following rights:
-
The right to access: subject to exceptions, you have the right to request access to the Personal Data we hold about you as well as information about our processing of your Personal Data;
-
The right to rectification: if the Personal Data we hold about you is inaccurate you are entitled to have it updated or rectified;
-
The right to deletion: subject to exceptions, you can ask us to delete your Personal Data.
-
The right to object: under certain circumstances, you have the right to ask us to stop processing your Personal Data. For example you may object to processing for direct marketing activities (for example, by clicking on the unsubscribe link in our emails) and where we are relying on our or a third party’s legitimate interests to process the Personal Data (unless we can demonstrate compelling legitimate grounds to continue processing your Personal Data);
-
The right to withdraw consent: where we rely on your consent to process Personal Data, you have the right to withdraw consent at any time. Such withdrawal will not impact the lawfulness of any data processing activities prior withdrawal;
-
The right to restriction of processing: under certain circumstances you have the right to restrict the processing of your Personal Data such as if you believe (i) the Personal Data we have about you is not accurate; (ii) the Personal Data is not being processed lawfully, but instead of deleting the Personal Data, you would prefer us to restrict processing; or (iii) we no longer need your Personal Data for the purposes we collected it, but you require the data in order to establish, exercise or defend legal claims;
-
The right to data portability: under certain circumstances you have the right to ask us to transfer Personal Data to a third party (in a structured, commonly used and machine-readable format) where you have provided that Personal Data to us either on the basis of your consent or to perform a contract with you and the processing is carried our using automated means; and
-
The right to lodge a complaint with a supervisory authority: you also have the right to file a complaint to the data protection authority in the country where you usually live or where the alleged infringement of data protection laws has taken place.
Please note that if you ask us not to contact you by email at a certain email address, we will retain a copy of that email address on our “master do not send” list in order to comply with your no-contact request.
8. How do we protect Personal Data?
We have implemented adequate technical and organizational measures to safeguard the Personal Data we process. We update and test our security technology on an ongoing basis.
9. How long do we keep and store your Personal Data?
We will not retain your Personal Data longer than necessary in relation to the purposes for which the data are processed.
For volunteers we will keep:
-
your (contact) details for five years to encourage you to participate in a project again ;
-
your CV and our interview notes for one year after you were last active with us;
For website visitors:
-
your personal data will be deleted after the end of your relationship with us;
unless we are required by statutory obligations or have an overriding interest to retain your Personal Data for a longer period of time. Such an extended period of time applies to correspondence related to media matters. We may also retain your Personal Data for a longer period in the event of complaints or disputes to the extent that this is necessary to protect our interests and/or the interests.
10. Changes to this Privacy Notice
We may change this Privacy Notice from time to time by posting the updated version of the Notice on our Website. We will give you reasonable notice on our Website of any material change. The “effective date” at the top of this Notice indicates when such changes will take effect. We encourage you to visit our Website frequently to stay informed about how we use your Personal Data.
11. Questions, concerns or complaints
To ask questions or to comment about our Privacy Notice and our privacy practices, you may contact info@goodanalytics.nl.
13. Cookie Notice
Please refer to our Cookie Notice available here for more information on our use of cookies with this Website.
​