As soon as you visit our website https://ahava-malawi.com/ or get in touch with us, we receive information about you. In this privacy statement, we explain what we do with that information. We always handle your information carefully and store it securely. If you have any questions or want to know what information we have about you, please contact us. We may adjust this privacy statement if necessary, so we recommend checking it regularly to stay informed about any changes. This privacy statement was last modified on April 17, 2023.

Table of Contents:

1. When do we apply this privacy statement?

2. Who uses your data?

3. Whose data do we use?

4. How do we obtain your data?

5. What data do we use from you?

6. What do we use your data for?

7. How long do we retain your data?

8. With whom do we share your data?

9. Where do we store your data?

10. How secure are your data with us?

11. What can you ask from us?

12. Which rules apply to this privacy statement?

13. Which cookies do we use?

14. What do we do with data from minors?

15. Do you have a question about this privacy statement?

16. When do we apply this privacy statement? This privacy statement applies to all personal data we process and to all domains related to us. This includes the personal data of anyone who has ever contacted us or visited our website, such as visitors, customers, and business contacts. Personal data includes any data that can be traced back to you as an individual, such as your name, phone number, IP address, customer number, or browsing behavior. If you want to know more about personal data, please visit the website of the Dutch Data Protection Authority.

17. Who uses my data? Stichting Ahava Malawi is responsible for the website https://ahava-malawi.com/en and, therefore, the data controller for the use of your personal data as described in this privacy statement. The complete contact details are as follows:

Stichting Ahava Malawi Hoge Rijndijk 40 2382 AT Zoeterwoude Chamber of Commerce (KvK) number: 28098094

3. Whose data do we use? We process the personal data of anyone who has contacted us or visited our website. This includes visitors, private customers, business customers, and contacts of our partners.

4. How do we obtain your data? We receive the data directly from you when you:

• Fill in your details on our website.

5. What data do we use from you? We use the following data:

• Name
• Email address
• Payment details

6. What do we use your data for? We only use your personal data for the purpose for which we are allowed to use it:

• We have received your consent to use your personal data.

7. How long do we retain your data? We keep your personal data for as long as required by law and as long as necessary for the purpose for which we use your data. For example, if you are a customer, we keep your data for the statutory retention period of seven years. After that, we only keep your data for statistical purposes and to handle any complaints or legal matters. If you want to know more about how long we retain specific data about you, please contact us.

8. With whom do we share your data? We only use your personal data ourselves and will never share your personal data with others.

9. Where do we store your data? We process your data within the European Economic Area (EEA), meaning we store your data within the EEA as well. If you have any questions about this, please feel free to contact us.

10. How secure are your data with us? We have taken many measures to secure your data both organizationally and technically. We have secured our systems and various communication channels to ensure that your data does not end up in the hands of others. Your data is safe with us, and we ensure that only authorized personnel has access to it. If you have any questions about our specific security measures, please contact us.

11. What can you ask from us? As we use your personal data, you have different rights. We list these rights for you below:

• Right to information: We must explain to you in a clear and understandable way what we do with your data and what control you have over it. That is why we extensively explain in this privacy statement what data we collect from you and how we handle your data.

• Right of access: You can always ask us to provide you with the data we have about you.

• Right to rectification: You can ask us to correct your data if it is incorrect or incomplete.

• Right to object: You can object to the processing of your data if you disagree with the way we handle your personal data. This right applies to data we use for direct marketing purposes, such as personalized recommendations on our website.

• Right to data portability: If you are a customer or have given us permission to use your data, you can ask us to send you the digital data we have about you. This way, you can transfer this data to another organization if you wish.

• Right to restriction: You can ask us to restrict the use of your data. This means that in certain cases, we may only keep your data but not use it.

• Right to be forgotten: You can ask us to delete all data we have about you. In some cases, we may not be able to delete your data yet or cannot delete it due to legal obligations. For example, we must keep certain data for seven years for tax purposes.

• Right to lodge a complaint: You can file a complaint about the way we handle your data. If you have a complaint, we will be happy to resolve it for you. You can contact us for this. You can also file your complaint with the Dutch Data Protection Authority. Of course, we hope it doesn’t come to that, but in extreme cases, you can also go to court. In that case, the court in the location of Stichting Ahava Malawi will handle your complaint.

12. How do I submit a request or complaint? Send your request or complaint to us via stahavamalawi@gmail.com. We will process your request or complaint within 30 days. If it concerns multiple requests or complaints or if your request or complaint is complex, it may take longer. In that case, we will contact you within 60 days at the latest. We may ask you to identify yourself. In that case, we will request your information to ensure that you are the correct person whose personal data we have.

13. Which rules apply to this privacy statement? Our privacy statement must comply with various conditions. You will find these conditions mainly in the General Data Protection Regulation (GDPR). In addition, the general rules that apply according to Dutch law are also applicable to our privacy statement.

14. Which cookies do we use? You can indicate which data we may use from you. If you have given us permission to personalize your profile based on your browsing and search behavior, we can tailor our website to your needs, making it easier and more personalized to use. We do this using cookies. A cookie is a small text file that is placed on your device when you visit our website. We use the following types of cookies on our website:

• Functional cookies, such as session and login cookies to keep track of session and login information.

15. What do we do with data from minors? Our website or organization does not specifically target minors. This means that if you are under 18 years old, you need permission from a parent or guardian to use our website. If you are a minor and visit our website or webshop, we assume that you have obtained this permission before your visit.

16. Do you have a question about this privacy statement? If you have a question about our privacy statement, please feel free to contact us by sending an email to stahavamalawi@gmail.com. We are happy to help.