Privacy statement

Last updated: 19 October 2026

Who we are

Stichting Viva Croatia in Rotterdam (Dutch Chamber of Commerce no. 42052333) is responsible for the personal data this website collects. Questions about your data? Email contact@vivacroatia.nl. For questions about a donation, you can also email donations@vivacroatia.nl.

When you donate

We ask for your name and email address. With them we record your donation: the amount, the date, the payment method and Mollie's references to the payment. We also remember which language you use the site in, so your emails arrive in that language. You pay on Mollie's own page; we don't keep your bank account or card number, that stays with Mollie.

We use this data to process your donation, to send you a receipt, and to give you a link where you can see your donations and stop a monthly donation. We may do this because you ask us to take your donation, and we can't without your name and email address (GDPR article 6(1)(b)).

If you give more than the gift-tax limit in one year (€2,769 in 2026), we will ask you by email for your citizen service number (BSN) and date of birth. Dutch tax law requires us to put them on the gift-tax return for the Belastingdienst, the Dutch tax authority (GDPR article 6(1)(c)). They are kept only in our email exchange with you and on the return.

Event emails

If you signed up for emails about our events, we have your email address, and your name if you gave it. Every email has an unsubscribe link.

How long we keep it

  • Your donations, with your name: 7 years from the end of the financial year. Dutch bookkeeping and tax law require this, so we keep them even if you ask us to delete your data.
  • Your email address: 2 years after your last donation, or sooner if you ask.
  • If you start a payment but don't complete it, we delete your name and email address within about an hour after the payment expires or is cancelled.
  • Event emails: until you unsubscribe.
  • Backups of the website: 7 days.

Who else receives your data

  • Mollie (Netherlands) handles the payments. Mollie is responsible for the payment itself, and Mollie's privacy statement applies to it.
  • Resend (United States) sends our emails and holds the event email list.
  • Hetzner (Germany) hosts the website.
  • Cloudflare stores the website's backups in Western Europe.
  • The Belastingdienst receives the gift-tax return, for big donors only.

Resend, Cloudflare and OpenAI are US companies. Transfers to them rest on the EU-US Data Privacy Framework or the EU's standard contractual clauses.

To translate posts and events, we send their text to OpenAI (United States). That text is published on this site and can contain names, for example of an organiser. OpenAI may use it to improve its models. We don't ask for permission for this. The law allows it when an organisation has a good reason that outweighs the impact on your privacy (GDPR article 6(1)(f)). Ours: the text is already public on this site, and translations let us reach everyone in our community.

Cookies

The cookies this site uses are listed in the cookie policy.

Your rights

You can ask us to:

  • show you the data we have about you;
  • correct it;
  • delete it, except the donation records the law requires us to keep;
  • restrict what we do with it;
  • stop using it (objection);
  • give you your data in a file you can use elsewhere.

You can unsubscribe from our event emails at any time, with no reason needed.

Email your request or complaint to contact@vivacroatia.nl. You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.