Legal
Privacy Policy.
We collect as little data as we can, we never sell it, and we only use it to support our community and run the foundation.
1. Who we are
Stichting Cancer Support Netherlands ("CSN", "we") is responsible for the personal data described in this policy. We are a Dutch foundation with ANBI status that offers peer support and community to people affected by cancer.
- Address: Amstelveenseweg 1006B, 1081 JS Amsterdam
- Email: info@cancersupportnetherlands.nl
- KvK: 97406589 · RSIN: 868037965
We are a small, volunteer-run organisation. We collect as little data as we can, we never sell it, and we only use it to support our community and run the foundation.
Questions about this policy or your data: email info@cancersupportnetherlands.nl. We'll get back to you as soon as we can, and we deal with requests about your data within one month.
2. What we collect, why, and our legal basis
We only collect what we need for each activity below. We do not ask for passport, BSN or bank details from community members.
| Who | What we collect | Why | Legal basis (GDPR) |
|---|---|---|---|
| People joining our community | Your name, phone number and what you tell us when you ask to join, such as where you live and how you're affected by cancer (e.g. patient, carer) | To check the community is right for you, add you to our WhatsApp community and Hives, and stay in touch | Your explicit consent (health information); legitimate interest (contact details) |
| Community members | Your name, phone number and anything you choose to share in our WhatsApp community | To run the community and moderate it safely | Your explicit consent |
| Event attendees | Name, contact details, dietary or access needs you tell us about | To organise the event and contact you about it | Your consent; legitimate interest |
| Photos and quotes | Photos taken at events, quotes or stories you share with us | To show what CSN does on our website and social media | Your consent, which you can withdraw at any time |
| Survey participants | Your answers, which may include health information | To understand our community's needs and improve what we offer | Your explicit consent |
| Donors | Name, contact details, amount and date of your donation | To thank you, keep financial records and meet ANBI and tax rules | Legal obligation; legitimate interest |
| Volunteers | Name, contact details, role, availability, signed volunteer agreement | To manage volunteering | Agreement with you; legitimate interest |
| Board members | Name, contact details and the identity details required for registration | To register the board with the KvK and meet our legal duties | Legal obligation |
| Anyone who contacts us | Your message and contact details | To reply to you | Legitimate interest |
| Quarterly update readers | Name and email address | To send our quarterly update | Your consent or, for donors and partners, legitimate interest. Every update has an unsubscribe option. |
3. Health information
Information about your health, such as a cancer diagnosis, is a special category of personal data under the GDPR. We only collect it with your explicit consent. We ask for this in our welcome message when you join our WhatsApp community, and when you fill in a survey.
- We only ask for what helps us support you. You never have to share details of your diagnosis or treatment.
- Only board members and the volunteers who welcome and support new members can see it.
- We never share it with anyone outside CSN without your permission.
- You can withdraw your consent at any time by emailing info@cancersupportnetherlands.nl. We will then remove you from the community and delete your details, except where the law requires us to keep them.
What you share in the WhatsApp community. Anything you post is visible to the other members of that group. Please only share what you are comfortable with. Members agree to keep what is shared in the community confidential, but we cannot control what other members do with it.
We are not a medical service. CSN offers peer support and signposting, not medical advice. If you need urgent help, contact your GP or huisartsenpost, or call 112.
4. Tools we use and who sees your data
We use a small number of trusted services to run CSN. We never sell your data or share it for marketing.
| Service | What we use it for | Where data may be stored |
|---|---|---|
| Google Workspace (Forms, Drive, Gmail, Sheets) | Event forms, surveys, email, storing records | EU and US |
| WhatsApp (Meta) | Our community and Hive groups | EU and US |
| GoFundMe | Online donations. GoFundMe's own privacy policy applies to the details you give them. | EU and US |
| Our bank | Donations by bank transfer, financial records | Netherlands |
| Website hosting (Cloudflare Pages) | Running our website | EU and US |
| Instagram and LinkedIn | Sharing news, events, and photos or quotes you've agreed to | EU and US |
Some of these providers may store data outside the European Economic Area, mainly in the US. Where they do, they rely on safeguards recognised under the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
We may also share data where the law requires it, for example with the Belastingdienst for ANBI purposes.
5. How long we keep your data
We keep data only as long as we need it, then delete it. We review what we hold once a year.
| Data | How long we keep it |
|---|---|
| Member list and what you told us when you joined | 7 years after you leave the community |
| Requests to join that we don't accept | 7 years |
| Event registrations | 7 years after the event |
| Survey answers | 7 years |
| Photos and quotes | 7 years, or sooner if you withdraw your consent |
| Volunteer records | 7 years after you stop volunteering |
| Donor and financial records | 7 years, as Dutch tax law requires |
| Board registration details | 7 years after leaving the board |
| Emails and messages | 7 years |
If you leave the WhatsApp community, we remove you from our member list. Messages you posted stay visible in the group unless you delete them yourself.
6. Keeping your data safe
- Only board members and named volunteers who need it for their role can see personal data.
- Our files are kept in CSN's own restricted Google Drive, not in personal accounts or public links.
- We review who has access regularly.
- Volunteers sign an agreement that includes keeping members' information confidential.
If something goes wrong with your data, we will tell you and, where required, the Autoriteit Persoonsgegevens within 72 hours.
7. Your rights
You have the right to:
- see the personal data we hold about you
- have it corrected or deleted
- limit or object to how we use it
- receive a copy to take elsewhere
- withdraw your consent at any time, without affecting anything we did before you withdrew it
Email info@cancersupportnetherlands.nl to use any of these rights. We may ask you to confirm who you are. We will respond within one month.
8. Complaints
If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
9. Cookies
Our website doesn't use cookies, and we don't use tracking, analytics or advertising. If that changes, we will ask for your consent first.
10. Children
Our community is for adults aged 18 and over. We don't knowingly collect data from children. Parents or carers who want support for their family can contact us directly.
11. Changes to this policy
We will update this policy when the way we use data changes. The latest version is always on our website.
Version 1.1 · 30 September 2026