Privacy Policy

1. Introduction

Cura G. Foundation ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (curag.org) and use our services.

As a Belgian Private Foundation (Private Stichting) registered under enterprise number 0803.472.675, we are committed to maintaining the highest standards of data protection in compliance with the General Data Protection Regulation (GDPR) and Belgian privacy legislation.

By accessing or using our website, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the site.

2. Information We Collect

2.1 Personal Information

We may collect personally identifiable information that you voluntarily provide to us when you:

• Fill out a contact form on our website
• Subscribe to our newsletter
• Make a donation
• Participate in our programs or events
• Contact us via email or phone

This information may include:

• Name and surname
• Email address
• Phone number
• Mailing address
• Donation history (for donors)

2.2 Non-Personal Information

We automatically collect certain information when you visit our website, including:

• IP address
• Browser type and version
• Operating system
• Referring website
• Pages visited and time spent on each page
• Date and time of your visit

3. How We Use Your Information

We use the information we collect for the following purposes:

• Communication: To respond to your inquiries, send newsletters, and provide updates about our programs and activities.
• Donation Processing: To process and acknowledge donations, and provide tax receipts where applicable.
• Program Management: To manage and administer our charitable programs and initiatives.
• Website Improvement: To analyze usage patterns and improve our website and services.
• Legal Compliance: To comply with legal obligations and regulatory requirements.
• Security: To protect against fraud, unauthorized access, and other security threats.

4. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating our website and conducting our activities, provided they agree to keep this information confidential.
• Legal Requirements: We may disclose your information if required by law or in response to valid requests by public authorities.
• Partner Organizations: When you explicitly consent to sharing your information with partner organizations for specific programs or initiatives.
• Business Transfers: In connection with any merger, sale of assets, or acquisition, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Incident response procedures

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

6. Your Rights

Under the GDPR and Belgian privacy law, you have the following rights regarding your personal data:

• Right of Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request correction of inaccurate data.
• Right to Erasure: You have the right to request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You have the right to request restriction of processing of your personal data.
• Right to Data Portability: You have the right to request transfer of your data to another organization.
• Right to Object: You have the right to object to processing of your personal data.
• Right to Withdraw Consent: Where we rely on consent, you have the right to withdraw it at any time.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

7. Cookies

Our website uses cookies to enhance your experience. Cookies are small text files stored on your device that help us understand how you use our site.

Types of Cookies We Use:

• Essential Cookies: Necessary for the website to function properly.
• Analytics Cookies: Help us understand how visitors interact with our website.
• Preference Cookies: Remember your settings and preferences.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our website.

8. Children's Privacy

Our website is not directed to children under the age of 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

9. International Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions for recipient countries
• Binding Corporate Rules where applicable

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données):

www.dataprotectionauthority.be