The non-profit organization MEMISA Belgium, with its registered office located at Square de Meeus, 19, 1050 Brussels (Belgium) and registered with the Crossroads Bank for Enterprises under the number 0435.563.751, values very much the protection of personal data of the users of its website, as well as those of its donors and other contacts persons in the context of its activities.

Pursuant to the European General Data Protection Regulation No. 2016/679, MEMISA Belgium generally acts as the data controller of the personal data that it processes. MEMISA Belgium makes every effort to ensure that appropriate technical and organizational measures are taken to protect this data.

What data are we talking about and why process it?

The personal data collected and processed by MEMISA Belgium vary according to the purposes pursued.

Purposes

(Categories of) data

Legal grounds

Retention periods

(Categories of) recipients

To manage the operation, maintenance, and improvement of the website

Your IP address and your browsing data on the website, including cookies

– Consent for cookies that are not strictly necessary (Article 6.1.a of the GDPR)

– Legitimate interests (Article 6.1.f of the GDPR) in order to optimize user experience and ensure the website’s security to provide easy and safe access to information on our activities and services

See cookie retention periods IP addresses are retained for a period of 30 days

MEMISA Belgium’s IT providers to the extent necessary for the performance of their respective task

For sending our newsletter or other publications from MEMISA Belgium (including the brochure on bequests and donations) (“direct marketing”)

Your name, first name, address, email address, phone number, language, and as a donor, the bank account, date and amount of the donation, and the tax reference

– Consent in case of electronic sending (Article 6.1.a of the GDPR)

– Legitimate interests in case of postal sending (Article 6.1.f of the GDPR) in order to raise awareness of the projects pursued by MEMISA Belgium and encourage donations to achieve them. The frequency of these mailings remains reasonable, and recipients always have the option to object to the processing or unsubscribe from the newsletter/brochure

The retention period for personal data is not limited in time in order to be able to respond to any subsequent requests (including opt-out requests) unless the supporter requests its deletion and/or withdraws their consent

IT providers and/or communication agencies of MEMISA Belgium to the extent necessary for the performance of their respective tasks

To process your participation in the ‘Hospital for Hospital’ project, which allows MEMISA Belgium to create links between Belgian hospitals and African hospitals

Your name, first name, email, position, and the concerned hospital

Legitimate interests (Article 6.1.f of the GDPR) with the aim of improving healthcare quality in African hospitals through the sharing of expertise, resources, and best practices with Belgian partners

For the entire duration of participation in the concerned action and up to 10 years afterward unless the person concerned requests its deletion

The concerned hospitals and MEMISA Belgium’s IT providers to the extent necessary for the performance of their respective tasks

To process (an inquiry regarding) the organization of an event for the benefit of MEMISA Belgium

Your name, first name, address, email, phone number, date of birth, photos, videos, banking details, and possibly the company number of individuals making a donation in connection with this event

Legitimate interests (Article 6.1.f of the GDPR) with the aim of supporting MEMISA Belgium’s health initiatives through fundraising and raising public awareness during the organized event

For the entire duration of participation in the concerned action and up to 10 years afterward unless the person concerned requests its deletion

The partners associated with the concerned event and MEMISA Belgium’s IT providers to the extent necessary for the performance of their respective tasks

To process your participation in creating a solidarity birth list and/or when purchasing a gift online as part of the “Mother for Life” campaign (Maman pour la vie)

Your name and first name, email address, home address, date of birth, phone number, as well as for both the mother and the father, banking details, and the name, first name, address, email, phone number, date of birth, banking details, and possibly the company number of individuals making a donation as part of the concerned action

Legitimate interests (Article 6.1.f of the GDPR) with the aim of turning birth celebrations into solidarity actions to support MEMISA Belgium’s health initiatives and/or to improve maternal health in Africa

For the entire duration of participation in the concerned action and for the legal retention periods for accounting and tax purposes

The partners associated with the concerned action and MEMISA Belgium’s IT providers to the extent necessary for the performance of their respective tasks. Public, tax, and social security administrations, to the extent necessary for compliance with the legal, tax, and social obligations of MEMISA Belgium

To process your donation or bequest to support the action of MEMISA Belgium

Your name, first name, address, postal code, city, country, email address, account number, donation history, and if applicable, your affiliation with an organization.

Legitimate interests (Article 6.1.f of the GDPR) in order to effectively support the humanitarian and charitable missions of the organization

The retention period for personal data is 25 years

The partners associated with the concerned action and MEMISA Belgium’s IT providers to the extent necessary for the performance of their respective tasks.

Public, tax, and social security administrations, to the extent necessary for compliance with the legal, tax, and social obligations of MEMISA Belgium

To process your request to participate in a contest organized by MEMISA Belgiu

Your name, first name, email, address, and possibly a photo

Legitimate interests (Article 6.1.f of the GDPR) with the aim of promoting engagement and raising public awareness of our causes, while fundraising and expanding our support community

For the entire duration of participation in the concerned action and for the legal retention periods for accounting and tax purposes

The partners associated with the concerned action and MEMISA Belgium’s IT providers to the extent necessary for the performance of their respective tasks.

Public, tax, and social security administrations, to the extent necessary for compliance with the legal, tax, and social obligations of MEMISA Belgium

To follow up on (your request for contact to carry out) a partnership action with MEMISA (especially concerning sole proprietorships or individual entrepreneurs or contact persons of companies)

Your name, first name, address, email, phone number, date of birth, banking details, and the company number

Legitimate interests (Article 6.1.f of the GDPR) in order to develop strategic collaborations to strengthen our operational capacities and expand the impact of our humanitarian program

For the entire duration of participation in the concerned action and for the legal retention periods for accounting and tax purposes

The partners associated with the concerned action and MEMISA Belgium’s IT providers to the extent necessary for the performance of their respective tasks.

Public, tax, and social security administrations, to the extent necessary for compliance with the legal, tax, and social obligations of MEMISA Belgium

To process your request via our website, social media, or otherwise to ask for general information about our activities

Your email address, name, and first name, and optionally your phone number

Legitimate interests (Article 6.1.f of the GDPR) in order to provide information to interested parties to promote transparency, community engagement, and support for our humanitarian initiatives

For the duration of processing the request and up to 2 years afterward, unless the person concerned requests its deletion

The partners associated with the concerned action and MEMISA Belgium’s IT providers to the extent necessary for the performance of their respective tasks

To manage beneficiary data and communication and fundraising efforts, as well as to create anonymous statistics

Your name, first name, city, year of birth, photos, data related to health status, and employment history

Legitimate interests (Article 6.1.f of the GDPR) in order to ensure effective and responsible resource management, improve our communication and fundraising strategies, and evaluate the impact of our programs through the analysis of anonymized data

The retention period for personal data is not limited in time to be able to respond to any subsequent requests unless the beneficiary requests its deletion

The partners associated with the concerned action and MEMISA Belgium’s IT providers to the extent necessary for the performance of their respective tasks. Public, tax, and social security administrations, to the extent necessary for compliance with MEMISA Belgium’s legal, tax, and social obligations

For managing contacts with the press or partners and any potential subcontractors or external collaborators

Your name, first name, position, address, email, phone number, photo

Consent in certain cases (Article 6.1.a of the GDPR) or legitimate interests (Article 6.1.f of the GDPR) in order to transparently inform the public about the composition and members of the Board of Directors and General Assembly, as well as the identity of the relevant collaborators

For the entire duration necessary for this management, unless the person concerned requests its deletion

The partners associated with this management and MEMISA Belgium’s IT providers to the extent necessary for the performance of their respective tasks

 

Most of the time, this data comes directly from the individuals involved, either through corresponding forms, social media, or other (electronic) communication means used.

You are under no obligation to provide us with your personal data, but you should be aware that certain services cannot be provided if you object to the processing of this data

Furthermore, the reorganization or total or partial transfer of MEMISA Belgium’s activities, in which it would reorganize, transfer, or cease its professional activities, or the bankruptcy of MEMISA Belgium, could mean the transfer of your personal data to new entities or new third parties conducting all or part of MEMISA Belgium’s professional activities. If applicable, MEMISA Belgium will reasonably attempt to inform you in advance that it will transfer your data to a third party, but you acknowledge that this may not be technically or commercially feasible in all situations.

MEMISA Belgium is a member of the Association for Ethical Fundraising and does not sell, rent, share, or commercially make available your personal data to third parties, except as provided above or with your prior consent.

In exceptional cases, MEMISA Belgium may be required to disclose your personal data pursuant to a court order or to comply with mandatory regulations or legislation. If applicable, MEMISA Belgium will reasonably attempt to inform you in advance, subject to the limits provided by law

What rights do the individuals concerned have?

Each individual concerned may exercise their legal rights of access and correction free of charge. It is also possible to request the correction or deletion of data that is inaccurate, incomplete, or not relevant, or to request the restriction of processing. Similarly, it is possible to object to the processing of personal data for direct marketing purposes. Finally, in certain cases, it is possible to receive the personal data provided to MEMISA Belgium in a structured, commonly used, and machine-readable format, and to transmit this data to another data controller.

To exercise any of these rights, a written request, signed and dated, with a copy of proof of identity, must be sent by regular mail to MEMISA Belgium or by email to [email protected]

Furthermore, each individual concerned has the right to lodge a complaint with the Belgian Data Protection Authority, located at 35 Rue de la Presse, 1000 Brussels, www.autoriteprotectiondonnees.be.

In general, the data concerned is not transferred outside of the European Union member country. If this were to be the case, MEMISA Belgium will ensure to implement other appropriate safeguards, which concerned individuals can inquire about to learn more.

Last updated: January 2024