Legal
Privacy Policy
This website sets no cookies and uses no analytics. This policy explains the small amount of personal data the foundation does handle, why, for how long, and what your rights are.
1. Who we are
This website is run by the Stichting ter Bevordering van Toegepaste Transpersoonlijke Psychologie (English: Foundation for the Advancement of Applied Transpersonal Psychology), known as the Applied Transpersonal Psychology Foundation (ATPF). The foundation is a not-for-profit stichting (foundation) under Dutch law.
The foundation is the controller for the personal data described in this policy. That means it decides why and how this data is used, and it is responsible for handling it lawfully.
- Address: Balkerweg 83, 7739 PT Vinkenbuurt, The Netherlands
- Dutch Chamber of Commerce (KvK) number: 68329857
- Email: info@atp-foundation.org
The foundation is run by an unpaid board and has no staff. It has not appointed a data protection officer, because an organisation of its size is not required to. Questions about privacy go to the board at info@atp-foundation.org.
2. What this policy covers
This policy covers:
- visits to this website, https://atp-foundation.org;
- donations made through the PayPal button on this website;
- email sent to the foundation.
The foundation is based in the Netherlands, so the General Data Protection Regulation (GDPR) applies. In Dutch it is called the AVG (Algemene verordening gegevensbescherming).
Other websites, including PayPal, have their own privacy policies. This policy does not cover them.
3. Visiting the website
This website consists of static pages. It has no user accounts, no comment function, no newsletter and no contact form. It uses no analytics, no advertising and no social-media plugins. The fonts are served from this website itself, so reading a page does not contact a font service.
Like almost every web server, the server that hosts this site keeps ordinary access logs. For each request, the log records:
- your IP address;
- the date and time;
- the page or file requested;
- the referring page (referrer), if your browser sends it;
- your browser and operating system (user agent).
The hosting provider keeps these logs to operate the website and to keep it secure, for example to detect and block attacks. They are kept for a limited period and used only for these purposes.
4. Cookies and similar technologies
This website sets no cookies. It does not use local storage or any similar way of storing information in your browser.
If you click the Donate button, you leave this website and go to PayPal. PayPal sets its own cookies on its own domain (paypal.com). Those cookies are governed by PayPal's own cookie and privacy statements, not by this policy.
5. Donations through PayPal
The Support page has a PayPal Donate button. Clicking it takes you to PayPal's website, where you make the payment. The foundation does not receive your card or bank details.
For the payment itself, PayPal is the controller and its own privacy statement applies. For users in the European Union this is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
After a donation, the foundation receives the following from PayPal:
- your name;
- your email address;
- the amount and currency;
- the date;
- the PayPal transaction ID;
- your postal address and a message, if you provided them.
The foundation uses this information to process and record your donation, to keep the accounts that Dutch law requires, and to send you a confirmation of receipt if you ask for one. The foundation has no newsletter or mailing list, so a donation does not put you on one.
6. Contacting us by email
If you email the foundation, it processes your name, your email address and the content of your message in order to answer you.
The correspondence is kept as long as needed to deal with your message and, where relevant, as part of the foundation's records.
The foundation does not provide therapy or advice and does not need health information or other sensitive details to answer you. Please do not include them in your email.
7. The library catalogue
The library catalogue lists published works: authors, titles, publishers and years of publication. This is public bibliographic information.
Using the catalogue involves no personal data about you beyond the server logs described in section 3. If you are an author listed in the catalogue and notice an error, you can ask the foundation to correct it.
8. Legal bases
The GDPR only allows personal data to be used on a legal basis. The foundation relies on these:
- Legitimate interest (Article 6(1)(f) GDPR): running the website and keeping it secure, which includes the server logs, and answering your emails. The foundation's interest is a working, secure website and being able to reply to people who write to it.
- Performance of a contract, or steps taken at your request before one (Article 6(1)(b) GDPR): processing your donation.
- Legal obligation (Article 6(1)(c) GDPR): keeping donation records for the period that Dutch bookkeeping and tax law requires.
The foundation does not use automated decision-making and does not build profiles of visitors or donors.
9. How long we keep data
| Data | Kept for | Reason |
|---|---|---|
| Server access logs | A limited period | Operation and security of the website |
| Donation records received from PayPal | 7 years | Dutch bookkeeping and tax law: Article 2:10 of the Dutch Civil Code and Article 52 of the General Tax Act (Algemene wet inzake rijksbelastingen) |
| Email correspondence | As long as needed for the correspondence; longer only where it belongs in the foundation's records | Answering you and keeping the foundation's records |
10. Sharing and international transfers
The foundation does not sell personal data and does not share it for marketing. Personal data reaches others only in these cases:
- PayPal, which handles the payment when you donate, as described in section 5;
- the hosting provider, which keeps the server logs described in section 3;
- public authorities, only where Dutch law requires the foundation to disclose information.
Personal data is transferred outside the European Economic Area (EEA) only in so far as PayPal does so for payments, under its own safeguards. PayPal's privacy statement describes them.
11. Security
The website is served over an encrypted connection (HTTPS). It has no accounts, forms or database, so the website itself holds no personal data beyond the server logs.
The board takes appropriate measures to protect donation records and correspondence against loss and unauthorised access.
12. Your rights
Under the GDPR you have the right to:
- access: ask which personal data the foundation holds about you and receive a copy;
- rectification: have incorrect data corrected;
- erasure: have your data deleted;
- restriction: ask the foundation to limit how it uses your data;
- portability: receive the data you provided in a common, machine-readable format, or have it sent to another organisation;
- objection: object to use of your data that is based on legitimate interest.
Some rights have limits. For example, donation records cannot be deleted before the legal retention period of 7 years has ended.
To use any of these rights, email info@atp-foundation.org. The foundation will reply within one month, as the GDPR requires, and may ask you to confirm your identity first.
You also have the right to complain to the Dutch supervisory authority, the Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl). If you live in another EU country, you can also complain to the supervisory authority there. The foundation would welcome the chance to resolve your concern first.
13. Children
This website is not aimed at children. The foundation does not knowingly collect personal data from anyone under 16. If you believe a child under 16 has sent the foundation personal data, please let us know and it will be deleted.
14. Changes to this policy
The foundation may update this policy when the website or the law changes. The date at the top of this page shows when the current version took effect.
15. Contact
For any question about this policy or about your personal data, write to the board:
- Email: info@atp-foundation.org
- Post: Applied Transpersonal Psychology Foundation, Balkerweg 83, 7739 PT Vinkenbuurt, The Netherlands
See also the Legal Notice.