Privacy Policy

1. Introduction

Y'abal (hereinafter "we", "us", or "our") is a Belgian non-profit association (ASBL) registered under enterprise number BE0665.759.401. We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR - Regulation 2016/679) and the Belgian Data Protection Act of July 30, 2018.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, use our services, or otherwise interact with us.

2. Data Controller

The data controller responsible for your personal data is:

3. Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Data You Provide to Us

• Contact information: Name, email address, phone number, postal address
• Communication data: Any information you provide when contacting us via email, contact forms, or other communication channels
• Program participation data: Information related to your participation in our programs and activities
• Volunteer information: Details provided when registering as a volunteer

3.2 Data Collected Automatically

• Technical data: IP address, browser type and version, operating system, device information
• Usage data: Pages visited, time spent on pages, click patterns, referring URLs
• Cookie data: Information collected through cookies and similar technologies (see our Cookie Policy)

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: Where you have given us explicit consent to process your data for specific purposes
• Contractual necessity: Where processing is necessary for the performance of a contract or to take steps at your request before entering into a contract
• Legal obligation: Where processing is necessary to comply with a legal obligation
• Legitimate interests: Where processing is necessary for our legitimate interests (or those of a third party), provided your rights and interests do not override those interests

5. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your inquiries and provide the information you request
• To manage your participation in our programs and activities
• To send you communications about our activities, events, and services (with your consent where required)
• To manage volunteer relationships and activities
• To comply with legal and regulatory obligations
• To improve our website, services, and programs
• To maintain records and ensure organizational governance
• To process donations and manage donor relationships

6. Data Sharing

We do not sell your personal data to third parties. We may share your data with:

• Service providers: Trusted third-party service providers who assist us in operating our website and conducting our activities, subject to appropriate data processing agreements
• Legal authorities: Where required by law, regulation, or legal process
• Partner organizations: With your explicit consent, for collaborative program delivery
• Belgian authorities: As required for compliance with Belgian ASBL regulations and reporting obligations

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Contact inquiry data: Up to 2 years from last communication
• Program participation data: Duration of program plus 5 years for reporting
• Donor data: As required by Belgian fiscal law (7 years)
• Volunteer data: Duration of volunteer engagement plus 2 years
• Website analytics data: Up to 26 months

8. Your Rights

Under the GDPR and Belgian data protection law, you have the following rights:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data ("right to be forgotten")
• Right to restriction: You can request restriction of processing of your data
• Right to data portability: You can request to receive your data in a structured, commonly used format
• Right to object: You can object to processing based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at ouajoa2@gmail.com.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

10. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). If we need to transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Cookies

We use cookies and similar technologies on our website. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

12. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Contact & Complaints

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

If you are not satisfied with our response, you have the right to lodge a complaint with the Belgian Data Protection Authority: