Privacy Policy

1. Introduction

Stichting NotAid respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains:

• What information we collect
• Why we collect it
• How we use it
• Your rights regarding your data

This Policy is designed to comply with:

• EU General Data Protection Regulation (GDPR)
• UK GDPR
• Dutch privacy laws
• International privacy principles

2. Who We Are

Data Controller:

NotAid
Website: www.notaid.org

Email: campaigns@notaid.org

3. Information We Collect

Information You Provide

Including:

• Name
• Email address
• Phone number
• Organization name
• Project information
• Funding applications
• Fellowship applications
• Event registrations
• Uploaded documents

Information Automatically Collected

Including:

• IP address
• Browser information
• Device information
• Website activity
• Cookie data
• Usage analytics

Information Generated Through ClimaFinLex

Including:

• Impact assessments
• Project rankings
• Organizational profiles
• AI-generated analyses
• Due diligence indicators

4. Why We Process Data

We process personal data to:

• Operate the Website
• Manage user accounts
• Process applications
• Facilitate partnerships
• Conduct assessments
• Provide ClimaFinLex services
• Improve services
• Prevent fraud
• Meet legal obligations

5. Legal Basis Under GDPR

We process personal data based on:

Consent

Where you explicitly agree.

Contract

Where processing is necessary to provide requested services.

Legitimate Interests

Such as:

• Improving services
• Platform security
• Preventing abuse

Legal Obligations

Where required by law.

6. AI and Automated Processing

NotAid and ClimaFinLex may use AI systems to:

• Assess project information
• Generate recommendations
• Analyze risks
• Support decision-making

Important:

AI systems do not make legally binding decisions.

Human review may be applied where appropriate.

Users may request further information regarding automated processing.

7. Data Sharing

We may share information with:

• Service providers
• Technology partners
• Event organizers
• Funding partners
• Regulatory authorities

We do not sell personal data.

8. International Transfers

Because NotAid operates globally, personal data may be transferred outside the European Economic Area.

Where transfers occur, appropriate safeguards will be implemented, including:

• Standard Contractual Clauses
• Adequacy decisions
• Equivalent legal protections

9. Data Retention

We retain data only as long as necessary for:

• Service delivery
• Legal obligations
• Reporting requirements
• Legitimate organizational purposes

Retention periods vary depending on the type of data involved.

10. Your Rights

Under GDPR and applicable laws, you may:

Access Your Data

Request a copy of your personal information.

Correct Data

Request corrections.

Delete Data

Request erasure where legally permissible.

Restrict Processing

Request limitations on processing.

Data Portability

Receive your data in a portable format.

Object to Processing

Object to certain forms of processing.

Withdraw Consent

Where consent is the legal basis.

11. Cookies

We use cookies to:

• Improve website functionality
• Analyze traffic
• Remember preferences
• Enhance user experience

Users may manage cookie preferences through browser settings or our cookie banner.

12. Security

We implement reasonable technical and organizational measures to protect data.

However, no online system can guarantee absolute security.

Users should take reasonable precautions to protect account credentials.

13. Children’s Privacy

The Website is not intended for children under 16 years of age.

We do not knowingly collect data from children without appropriate consent.

14. Complaints

EU users may lodge complaints with their national data protection authority.

Dutch users may contact:

Dutch Data Protection Authority

15. Contact

Privacy Officer

Stichting NotAid

Email: campaigns@notaid.org

Website: www.notaid.org

NotAid Commitment

We believe that transparency, accountability, human dignity, and responsible innovation should guide all uses of data, artificial intelligence, climate finance, and community empowerment.