Privacy Policy

WeForest commits to respecting the privacy of our contacts and protecting their personal data. In compliance with the EU General Data Protection Regulation (GDPR), this Privacy Policy sets out how the personal data you provide to us, and the system information we collect from you will be processed. Please read the following carefully to understand our practices related to your personal data.

1. Introduction

This website with url www.weforest.org (“Website”) is the property of and is managed by WeForest VZW, registered in the Banque Carrefour des Entreprises under number 0826.151.968, and having its registered seat at Cantersteen 47, 1000 Brussels, Belgium (“WeForest”, “we”, “us” “our”).

WeForest acts as controller for the processing of the personal data that we collect from you or that you provide to us when you or your organisation visits or uses the Website (“Website User”, “you” or “your”).

If you provide us with the personal data of other individuals, you guarantee that this individual was informed of this Privacy Policy, and that insofar as a certain processing requires the consent of this individual, you have obtained his or her consent for the processing of his or her personal data by us.

When using the Website, personal data may be processed by means of cookies and similar technologies. More info on the use of these technologies can be found in our Cookie Policy. Please read this document together with this Privacy Policy.

2. Personal data we may collect from you and why

Personal data is information that identifies you as an individual or relates to an identifiable person.

WeForest collects personal data that you provide, such as your name, organisation name (if applicable), email address, phone number, and in some instances postal address. For fundraising purposes, we will also collect bank or billing information.

WeForest collects this personal data when you subscribe to our newsletter, donate or sponsor us (either directly or through third party donation partners), contact us by email, phone or when you complete the form(s) on our website, with or without the use of cookies and similar technologies (for more information see our Cookie Policy), or meet us face to face at events, fairs, programmes or activities organised by WeForest.

Personal data may be provided directly by you or indirectly by third parties or obtained through publicly available reliable sources. 

When we obtain personal data directly from you, you are in principle free to provide us with the personal data or not, except in case of a legal obligation. If you do not wish to provide your personal data, it is possible that you will not be able to use (parts of) the Website, that your questions cannot be answered and/or that you will not be able to enter into an agreement with us. 

We process your personal data as a controller only for the purposes described below. For each purpose, the relevant legal basis is mentioned. 

Purpose
Legal Basis
Providing the Website – Your personal data will be processed for the purpose of making the Website available to you, communicate with you to raise awareness about our work and wider reforestation and environmental issue and providing support that you request from us, for example through the contact form on the Website.
Processing is necessary for the conclusion or performance of the contract between WeForest and you. In other cases, the processing will be necessary for WeForest’s legitimate interest in processing your personal data in the context of our contracts with your organisation. Certain processing may also be necessary for a legal obligation applicable to us.
Management of sponsorships and donations – In order to provide optimal experience, we process certain personal data for the management of sponsorships and donations, including sending transactional communications for fundraising purposes, as well as accounting and billing.
Processing is necessary for the conclusion or performance of the contract between WeForest and you. In other cases, we carry out this processing on the basis of our legitimate interest in knowing our donors and sponsors and maintaining our relationship with you or your organisations, with a view to providing an excellent experience.
Providing technical support, answering and handling questions, communications or requests – Personal data may also be processed if you contact us by e-mail, by telephone [or communicate with us at meetings and seminars organised by us and/or our partners, or when you attend certain events, fairs, programmes or activities, …].
When responding to your request under the GDPR: the Processing is necessary to comply with a legal obligation applicable to us. In other cases: Processing is necessary for our legitimate interest to provide you with support and to answer questions or requests.
To send you (personalized) marketing or commercial information via the Website, post or via email – We process personal data to manage your subscription to our newsletters and to provide you with communications about our work and invitations to events or promotional meetings which, if we have your prior and express consent to do so, may be personalised based on your area of expertise and professional interests
This processing is necessary for our legitimate interest in ensuring that you and your organisation are kept up-to-date with information about or in relation to the Website and our work and helping us understand your interests, personalize our interactions with you, and develop our business relationship, as this helps us to preserve our business operations or grow our business (also referred to as “soft opt-in”).
Improving and maintaining the Website – For the purposes of managing, improving and maintaining the Website, identifying and resolving bugs and service errors, adding new features and optimising your user experience, personal data may be processed. This can include use of personal data you provided through surveys and/or statistical data collected through your use of the Website for this purpose.
Processing is necessary for our legitimate interest to analyse, report on, manage and improve the Website.
Complaint and dispute management and legal defence
Processing is necessary for our legitimate interest to collect personal data for use in resolving any disputes and/or to defend ourselves in and out court.
Know your customer, fighting misuse, fraud and crime – Your data may also be used for the prevention or detection of fraud and illegal uses, abuse, spam, fraud, security incidents and other harmful activity.
Processing is necessary to comply with a legal obligation applicable to us. In the absence of a relevant legal obligation: Processing is necessary for our legitimate interest to deal with misuse, fraud and crime.
Comply with legal, regulatory and ethical obligations – Personal data may be processed to enable WeForest to conduct its business in accordance with best practice within the Forest and Landscape Restoration movement in terms of legal, regulatory and ethical requirements.
Where a legal obligation applies to us, the processing is necessary to comply with legal obligations applicable to us. In the absence of a relevant legal obligation: Processing is necessary for our legitimate interest to conduct our business in a responsible manner and in accordance with best practices.
In the context of a corporate transaction – To evaluate or carry out an acquisition, merger, demerger, restructuring, reorganisation, dissolution or other sale or transfer of some or all of our assets, whether by way of transfer of all or part of the business, or as part of a bankruptcy, liquidation or similar proceeding, where personal data held by us forms part of the transferred assets.
Processing is necessary for our legitimate interest in carrying out the said business transactions to implement our business strategies or grow our business.

1. Your rights as a data subject

You have several rights regarding the personal data that we process. If the relevant conditions of the GDPR are met, you have the right:

  • to access your personal data and to receive a copy of it;
  • to ask us to rectify your personal data, at any time and free of charge if you think it is incorrect or incomplete;
  • to ask us to delete your personal data (“right to be forgotten”), for example, if you think that we do not (or no longer) have any legitimate basis to process it. Excluded from erasure are, inter alia, those data for which WeForest is legally obliged to keep;
  • to restrict the processing of your personal data if the applicable legal provisions are complied with;
  • to data portability or the right to receive your personal data in a structured, conventional and machine-readable form and to transfer it to another party (insofar the processing is based on consent or the performance of an agreement);
  • to object to the processing of your personal data for direct marketing purposes or to any processing which we carry out based on our legitimate interest;
  • to withdraw your consent for the processing of your personal data (insofar the processing is based on your consent). This withdrawal will however not affect the lawfulness of the processing of your personal data for the period prior to the time of this withdrawal and processing activities based on another legal basis.

If you have questions about your data protection rights, or if you would like to exercise one or more of your rights as a data subject, please submit your request by email to dataprivacy@weforest.org.

Furthermore, if you believe that WeForest did not act in accordance with the legislation concerning the processing of personal data, you have the right to file a complaint with the competent supervisory authority of your place of habitual residence or work or where an alleged infringement took place. For Belgium, this is the Data Protection Authority (www.dataprotectionauthority.be).

The contact details of the Belgian Data Protection Authority are:

Belgian Data Protection Authority 
Drukpersstraat 35, 1000 Brussels, Belgium
Tel. +32 2 274 48 00
contact@apd-gba.be

4. Sharing of personal data with third parties

For the purposes set out above, your personal data may be shared with:

  • WeForest’s staff, legal entities, subsidiaries;
  • External service providers that WeForest relies on to make available the Website, eg. IT service providers.
  • Companies with which WeForest collaborates in the joint development, distribution, promotion and/or marketing of certain products or services, or business partners (if applicable);
  • Law enforcement and public authorities, to, inter alia, ensure the security and safety of you and third parties or when obliged to do so in accordance with the applicable legislation;
  • External professional advisors (e.g. auditors, lawyers or consultants of WeForest).

Please note that some parties who receive your personal data may be located in a country outside the European Economic Area (EEA) of which the legislation does not offer the same degree of data protection. We will ensure that your personal data is only transferred to parties that apply an appropriate level of data protection (e.g. where the European Commission has issued an adequacy decision or by including the so-called EU standard contractual clauses in the agreement with the recipient and subject to an appropriate data transfer impact assessment). You can contact us to receive a copy of the appropriate safeguards that apply to the transfer of your personal data by using the contact details in section 6.

5. Storage of your personal data

Your personal data will be saved no longer than necessary for the above-mentioned purposes, or as long as permitted or required by the applicable laws, taking into account the relevant statutory limitation or retention terms. We keep all personal data related to a financial transaction, securely saved in our accounting and contact database, for as long as we have an active relationship and thereafter, for as long as we are legally held to keep this information for auditing purposes. Fundraising and sponsorship contacts that have not materialised and are no longer active will be kept for three years for follow-up. Contacts wishing to receive our newsletter are asked to opt in and will remain in our database until they opt out, and professional networking contacts for our advocacy work will be kept in our database for two years after the last active contact. At the end of the retention period, your personal data will be deleted from our active systems.

6. Changes to the Privacy Policy

WeForest reserves the right to change this Privacy Policy at any time. If WeForest makes material changes to this Privacy Policy, they will be notified to you. Changes to this Privacy Policy take effect at the time of publication. We recommend that you always consult the most recent version. The date of this version can be found on the bottom of this page.

7. Contact

7.1 WeForest

If you have any questions, comments or concerns regarding the Privacy Policy and/or practices to protect your data, please contact WeForest through the contact form on the Website or through the following contact details: 

Address: Cantersteen 47, 1000 Brussels, Belgium

Email: dataprivacy@weforest.org

7.2 Data Protection Authority

You can also always contact the competent data protection authority. The relevant contact details for the Belgian Data Protection Authority can be found under Article 3 of the Privacy Policy.

This Privacy Policy was last updated on 13/09/2023.