WeForest commits to respecting the privacy of our contacts and protecting their personal data. In compliance with the EU General Data Protection Regulation (GDPR), this Privacy Policy sets out how the personal data you provide to us, and the system information we collect from you will be processed. Please read the following carefully to understand our practices related to your personal data.
1. Introduction
This website with url www.weforest.org (“Website”) is the property of and is managed by WeForest VZW, registered in the Banque Carrefour des Entreprises under number 0826.151.968, and having its registered seat at Cantersteen 47, 1000 Brussels, Belgium (“WeForest”, “we”, “us” “our”).
WeForest acts as controller for the processing of the personal data that we collect from you or that you provide to us when you or your organisation visits or uses the Website (“Website User”, “you” or “your”).
If you provide us with the personal data of other individuals, you guarantee that this individual was informed of this Privacy Policy, and that insofar as a certain processing requires the consent of this individual, you have obtained his or her consent for the processing of his or her personal data by us.
When using the Website, personal data may be processed by means of cookies and similar technologies. More info on the use of these technologies can be found in our Cookie Policy. Please read this document together with this Privacy Policy.
2. Personal data we may collect from you and why
Personal data is information that identifies you as an individual or relates to an identifiable person.
WeForest collects personal data that you provide, such as your name, organisation name (if applicable), email address, phone number, and in some instances postal address. For fundraising purposes, we will also collect bank or billing information.
WeForest collects this personal data when you subscribe to our newsletter, donate or sponsor us (either directly or through third party donation partners), contact us by email, phone or when you complete the form(s) on our website, with or without the use of cookies and similar technologies (for more information see our Cookie Policy), or meet us face to face at events, fairs, programmes or activities organised by WeForest.
Personal data may be provided directly by you or indirectly by third parties or obtained through publicly available reliable sources.
When we obtain personal data directly from you, you are in principle free to provide us with the personal data or not, except in case of a legal obligation. If you do not wish to provide your personal data, it is possible that you will not be able to use (parts of) the Website, that your questions cannot be answered and/or that you will not be able to enter into an agreement with us.
We process your personal data as a controller only for the purposes described below. For each purpose, the relevant legal basis is mentioned.
Purpose | Legal Basis |
|---|---|
Providing the Website – Your personal data will be processed for the purpose of making the Website available to you, communicate with you to raise awareness about our work and wider reforestation and environmental issue and providing support that you request from us, for example through the contact form on the Website.
| Processing is necessary for the conclusion or performance of the contract between WeForest and you.
In other cases, the processing will be necessary for WeForest’s legitimate interest in processing your personal data in the context of our contracts with your organisation.
Certain processing may also be necessary for a legal obligation applicable to us. |
Management of sponsorships and donations – In order to provide optimal experience, we process certain personal data for the management of sponsorships and donations, including sending transactional communications for fundraising purposes, as well as accounting and billing. | Processing is necessary for the conclusion or performance of the contract between WeForest and you.
In other cases, we carry out this processing on the basis of our legitimate interest in knowing our donors and sponsors and maintaining our relationship with you or your organisations, with a view to providing an excellent experience.
|
Providing technical support, answering and handling questions, communications or requests – Personal data may also be processed if you contact us by e-mail, by telephone [or communicate with us at meetings and seminars organised by us and/or our partners, or when you attend certain events, fairs, programmes or activities, …]. | When responding to your request under the GDPR: the Processing is necessary to comply with a legal obligation applicable to us.
In other cases: Processing is necessary for our legitimate interest to provide you with support and to answer questions or requests. |
To send you (personalized) marketing or commercial information via the Website, post or via email – We process personal data to manage your subscription to our newsletters and to provide you with communications about our work and invitations to events or promotional meetings which, if we have your prior and express consent to do so, may be personalised based on your area of expertise and professional interests | This processing is necessary for our legitimate interest in ensuring that you and your organisation are kept up-to-date with information about or in relation to the Website and our work and helping us understand your interests, personalize our interactions with you, and develop our business relationship, as this helps us to preserve our business operations or grow our business (also referred to as “soft opt-in”). |
Improving and maintaining the Website – For the purposes of managing, improving and maintaining the Website, identifying and resolving bugs and service errors, adding new features and optimising your user experience, personal data may be processed. This can include use of personal data you provided through surveys and/or statistical data collected through your use of the Website for this purpose. | Processing is necessary for our legitimate interest to analyse, report on, manage and improve the Website.
|
Complaint and dispute management and legal defence | Processing is necessary for our legitimate interest to collect personal data for use in resolving any disputes and/or to defend ourselves in and out court. |
Know your customer, fighting misuse, fraud and crime – Your data may also be used for the prevention or detection of fraud and illegal uses, abuse, spam, fraud, security incidents and other harmful activity. | Processing is necessary to comply with a legal obligation applicable to us.
In the absence of a relevant legal obligation: Processing is necessary for our legitimate interest to deal with misuse, fraud and crime. |
Comply with legal, regulatory and ethical obligations – Personal data may be processed to enable WeForest to conduct its business in accordance with best practice within the Forest and Landscape Restoration movement in terms of legal, regulatory and ethical requirements. | Where a legal obligation applies to us, the processing is necessary to comply with legal obligations applicable to us.
In the absence of a relevant legal obligation: Processing is necessary for our legitimate interest to conduct our business in a responsible manner and in accordance with best practices. |
In the context of a corporate transaction – To evaluate or carry out an acquisition, merger, demerger, restructuring, reorganisation, dissolution or other sale or transfer of some or all of our assets, whether by way of transfer of all or part of the business, or as part of a bankruptcy, liquidation or similar proceeding, where personal data held by us forms part of the transferred assets. | Processing is necessary for our legitimate interest in carrying out the said business transactions to implement our business strategies or grow our business. |
You have several rights regarding the personal data that we process. If the relevant conditions of the GDPR are met, you have the right:
If you have questions about your data protection rights, or if you would like to exercise one or more of your rights as a data subject, please submit your request by email to dataprivacy@weforest.org.
Furthermore, if you believe that WeForest did not act in accordance with the legislation concerning the processing of personal data, you have the right to file a complaint with the competent supervisory authority of your place of habitual residence or work or where an alleged infringement took place. For Belgium, this is the Data Protection Authority (www.dataprotectionauthority.be).
The contact details of the Belgian Data Protection Authority are:
Belgian Data Protection Authority
Drukpersstraat 35, 1000 Brussels, Belgium
Tel. +32 2 274 48 00
contact@apd-gba.be
For the purposes set out above, your personal data may be shared with:
Please note that some parties who receive your personal data may be located in a country outside the European Economic Area (EEA) of which the legislation does not offer the same degree of data protection. We will ensure that your personal data is only transferred to parties that apply an appropriate level of data protection (e.g. where the European Commission has issued an adequacy decision or by including the so-called EU standard contractual clauses in the agreement with the recipient and subject to an appropriate data transfer impact assessment). You can contact us to receive a copy of the appropriate safeguards that apply to the transfer of your personal data by using the contact details in section 6.
Your personal data will be saved no longer than necessary for the above-mentioned purposes, or as long as permitted or required by the applicable laws, taking into account the relevant statutory limitation or retention terms. We keep all personal data related to a financial transaction, securely saved in our accounting and contact database, for as long as we have an active relationship and thereafter, for as long as we are legally held to keep this information for auditing purposes. Fundraising and sponsorship contacts that have not materialised and are no longer active will be kept for three years for follow-up. Contacts wishing to receive our newsletter are asked to opt in and will remain in our database until they opt out, and professional networking contacts for our advocacy work will be kept in our database for two years after the last active contact. At the end of the retention period, your personal data will be deleted from our active systems.
WeForest reserves the right to change this Privacy Policy at any time. If WeForest makes material changes to this Privacy Policy, they will be notified to you. Changes to this Privacy Policy take effect at the time of publication. We recommend that you always consult the most recent version. The date of this version can be found on the bottom of this page.
7.1 WeForest
If you have any questions, comments or concerns regarding the Privacy Policy and/or practices to protect your data, please contact WeForest through the contact form on the Website or through the following contact details:
Address: Cantersteen 47, 1000 Brussels, Belgium
Email: dataprivacy@weforest.org
7.2 Data Protection Authority
You can also always contact the competent data protection authority. The relevant contact details for the Belgian Data Protection Authority can be found under Article 3 of the Privacy Policy.
This Privacy Policy was last updated on 13/09/2023.
HQ (BE): WeForest asbl/vzw
Cantersteen 47, 1000 Brussels, Belgium
VAT number BE0826.151.968
Incorporated May 26th 2010
WeForest is a supporting member of:
