Privacy Policy | Y'abal ASBL

Last updated: July 2025

1. Introduction

Y'abal ASBL ("we", "our", "us") is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store, and protect your personal information when you visit our website (yabal.be), contact us, or interact with our programmes and services.

We comply with the European Union's General Data Protection Regulation (GDPR) and Belgian data protection legislation (Belgian Act on the Protection of Natural Persons with regard to the Processing of Personal Data of 30 July 2018).

2. Data Controller

The data controller responsible for your personal data is:

Y'abal ASBL
Villerspark 4/6
3500 Hasselt, Belgium
Enterprise Number: 0665.759.401
Email: ouajoa2@gmail.com
Phone: +32 470 12 34 56

3. Information We Collect

We may collect and process the following categories of personal data:

Contact information: Name, email address, phone number, postal address
Programme participation data: Information related to your participation in Y'abal programmes, including enrolment details and progress
Donation information: Name, email, and payment details processed through secure third-party payment processors
Website usage data: IP address, browser type, pages visited, and time spent on our website (collected via analytics tools)
Communication data: Content of emails, messages, or form submissions you send to us

4. How We Use Your Data

We use your personal data for the following purposes:

To respond to your inquiries and provide information about our programmes
To manage your participation in Y'abal programmes and services
To process donations and provide donation receipts
To send you newsletters and updates about our work (with your consent)
To improve our website and services
To comply with legal obligations

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Consent: Where you have given us explicit consent to process your data (e.g., subscribing to our newsletter)
Contractual necessity: Where processing is necessary for the performance of a contract with you (e.g., programme enrolment)
Legitimate interest: Where processing is necessary for our legitimate interests (e.g., improving our services) and does not override your rights
Legal obligation: Where we need to process data to comply with legal requirements

6. Data Sharing

We do not sell or rent your personal data to third parties. We may share your data with:

Service providers who assist us in operating our website and programmes (under data processing agreements)
Government authorities when required by law
Partner organisations, with your explicit consent, for programme delivery purposes

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Programme participant data is retained for a maximum of 5 years after the end of programme participation. Donation records are retained for 7 years in compliance with Belgian tax and accounting regulations.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access: Request a copy of the personal data we hold about you
Right to rectification: Request correction of inaccurate personal data
Right to erasure: Request deletion of your personal data ("right to be forgotten")
Right to restriction: Request restriction of processing of your personal data
Right to data portability: Request transfer of your data in a structured, machine-readable format
Right to object: Object to processing of your personal data based on legitimate interests
Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at ouajoa2@gmail.com.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption of data in transit (HTTPS), secure storage, access controls, and regular security assessments.

10. Cookies

Our website uses essential cookies to ensure proper functionality. We use privacy-respecting analytics to understand how visitors interact with our website. We do not use tracking cookies or share analytics data with third parties for advertising purposes. You can control cookie settings through your browser preferences.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

12. Contact & Complaints

If you have any questions about this privacy policy or our data practices, please contact us at ouajoa2@gmail.com.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit):

Authorité de protection des données
Rue de la Presse, 35
1000 Brussels, Belgium
www.dataprotectionauthority.be