Legal
Privacy Statement
Last updated: March 2026 · Project Benevolence · Amsterdam, Netherlands

Project Benevolence takes your privacy seriously. This statement explains what personal data we collect, why we collect it, how we use it, and what your rights are. We operate under the General Data Protection Regulation (GDPR) as a data controller based in the Netherlands.

1. Who We Are

Data controller: Project Benevolence
Location: Amsterdam, Netherlands
Contact: contact@projectbenevo.com

 

If you have any questions about how we handle your personal data, contact us directly at the email above. We will respond within 30 days.

2. What Data We Collect

We collect only the personal data that is necessary for the purposes described in this statement. This includes:

 

  • Contact form data — your name, company name, email address, and any message you choose to submit via our website contact form 
  • Email correspondence — any information you share with us directly via email
  • Engagement data — for corporate partners who proceed to a programme, we collect relevant business information necessary to deliver the engagement
  • Community data — for programmes conducted in the field, we collect community member data (names, testimonials, images) with full informed consent in accordance with our community consent protocol

 

We do not collect data through cookies, tracking pixels, or analytics tools. We do not use advertising technology of any kind. This website contains no third-party trackers.

3. Why We Collect It and Our Legal Basis

We collect and process personal data only for specific, legitimate purposes:

Privacy Table
PURPOSE LEGAL BASIS
Responding to enquiries Legitimate interest — you contacted us and expect a response
Delivering an engagement Contract — necessary to perform the services agreed
Community documentation Consent — freely given, documented, and revocable at any time
Legal obligations Legal obligation — financial records required by Dutch law

4. How We Use Your Data

Your data is used solely for the purpose for which it was collected:

 

  • Contact form submissions are used only to respond to your enquiry
  • Engagement data is used only to deliver and document the programme you commissioned
  • Community data is used only within the verified impact report and cinematic deliverables for the specific programme — never for marketing, advertising, or any commercial purpose beyond the agreed deliverables

 

We never sell, rent, or share your personal data with third parties for commercial purposes. We do not use your data for automated decision-making or profiling.

5. Who We Share Data With

We share personal data only where strictly necessary: 

 

  • Advisory board specialists — receive engagement-relevant data necessary to review and sign their specific report layer. They operate under professional confidentiality obligations.
  • NGO partners — receive project-relevant information necessary to co-design and deliver the initiative. They are contractually bound to handle data responsibly.
  • Post-production team — receives visual and audio material necessary for editing. Amsterdam-based. GDPR compliant.
  • Legal or regulatory authorities — only where required by Dutch law or a valid legal request.

 

All parties who receive personal data from Project Benevolence are required to handle it in accordance with GDPR and our data processing agreements.

6. How Long We Keep Your Data

  • Contact form enquiries that do not proceed to engagement: deleted within 12 months of last contact
  • Engagement data for completed programmes: retained for 7 years in accordance with Dutch financial record-keeping requirements, then securely deleted
  • Community consent records: retained for the lifetime of the programme’s associated impact report — these records must be available for verification at any time
  • Community visual and audio material: retained as part of the certified impact record for the duration agreed with the corporate partner and community — minimum 5 years

7. Your Rights Under GDPR

As a data subject under GDPR, you have the following rights. To exercise any of them, contact us at contact@projectbenevo.com. We will respond within 30 days.

 

  • Right of access — you can request a copy of the personal data we hold about you
  • Right to rectification — you can ask us to correct inaccurate data
  • Right to erasure — you can ask us to delete your data where there is no legitimate reason to retain it
  • Right to restriction — you can ask us to restrict how we use your data in certain circumstances
  • Right to portability — you can ask for your data in a structured, machine-readable format
  • Right to object — you can object to processing based on legitimate interest
  • Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing

 

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Dutch data protection authority: Autoriteit Persoonsgegevens — autoriteitpersoonsgegevens.nl

8. Community Members

We take the privacy and dignity of community members with the utmost seriousness. Community members whose image, voice, or testimony appears in any Project Benevolence deliverable have: 

 

  • Given freely provided, informed consent in their own language before any filming or documentation began
  • Been clearly informed of how their image and testimony will be used, by whom, and for how long
  • The right to withdraw consent at any time — and if they do, their image and testimony will be removed from all future use of the material
  • Not been compensated in exchange for consent — participation is voluntary and uncoerced

 

Consent documentation is held securely and forms part of the governance layer of every Verified Impact Report.

9. Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. Our website is served over HTTPS. Personal data shared via email or form is handled with care and stored securely.

 

In the event of a personal data breach that is likely to result in risk to individuals, we will notify the Autoriteit Persoonsgegevens within 72 hours and inform affected individuals where required by law.

10. Changes to This Statement

We may update this privacy statement from time to time. The date at the top of this page reflects when it was last revised. Significant changes will be communicated to active partners directly.

11. Contact

For any privacy-related questions or to exercise your rights: contact@projectbenevo.com

Project Benevolence · Amsterdam, Netherlands

OUR NETWORK

Over the past five years, our Impact Director has travelled continuously  self funded, self directed, building a verified network across four continents. Not from an office. Through presence. Through showing up in the same communities until the trust was earned.

 

We have active network in: Mexico, Guatemala, Peru, Brazil, Colombia, Ethiopia, Mauritius, Tanzania, Kenya, Ghana, Namibia, South Africa, Egypt, Nepal, India, Sri Lanka, Indonesia, Philippines, Fiji, Vanuatu, Australia.

That network is why we only operate in countries where we have legitimate on-the-ground experience in. Verified NGOs. Known community leaders. Established relationships.