GDPR notice

Hasna Foundation handles personal data in connection with hasnafoundation.org and its work. This notice explains how we do that when the General Data Protection Regulation (GDPR) applies. It supplements the privacy policy for this site.

Who is responsible

When we process personal data covered by this notice, Hasna Foundation is the data controller. You can reach us at hello@hasnafoundation.org.

What we process and why

We process the following categories of personal data:

• Contact details and message content you send us, so that we can respond and keep a record of the exchange.
• Your email address, when you ask to receive foundation updates, so that we can send them.
• Basic technical data such as IP address, browser type, and pages requested, so that we can keep the site secure and available.

We do not ask for special categories of personal data, such as health information, and we ask that you do not send them through the contact channels on this site.

Legal bases

We rely on the following legal bases:

• Consent, for sending newsletter emails. You can withdraw consent at any time by unsubscribing.
• Legitimate interests, for responding to messages, maintaining records of our work, and keeping the site secure.
• Contract, where processing is necessary to enter into or perform an agreement with you.

Sharing and transfers

We use service providers for hosting and email delivery. They process personal data on our behalf and are required to protect it. If personal data is processed outside your country, we take steps to ensure it receives an appropriate level of protection. We do not sell personal data.

Retention

We keep correspondence for as long as needed to handle the matter and maintain a record of the foundation's work. Newsletter addresses are kept until you unsubscribe. Technical logs are kept for a short period unless needed to investigate a security issue.

Your rights

You have the right to access your personal data, correct it, request its deletion, restrict or object to its processing, and receive it in a portable format. You may also withdraw consent at any time. To exercise a right, email hello@hasnafoundation.org.

You have the right to lodge a complaint with the data protection authority in your country.

Automated decisions

We do not use personal data for automated decision-making that produces legal or similarly significant effects.

Changes and contact

We may update this notice as our work changes. The current version is always posted on this page. Questions can be sent to hello@hasnafoundation.org.