Houston we have a problem
Looks like your browser needs to be updated. Please update your browser to properly view our website.
Take Back Your Privacy Foundation (hereinafter “the Foundation“) aims to promote the interests of natural persons who face privacy violations and/or a violation of their consumer rights, or violation of other fundamental or legal rights. You can read more about this in our articles of incorporation (in Dutch).
In order to promote these interests, we may process personal data, for example when you contact us, when you deliver products or services to us, when you visit our website www.stichtingtakebackyourprivacy.nl or when you participate as a participant in a collective action or other proceedings we initiate.
The term “personal data” means any information about an identified or identifiable natural person. When processing your personal data, the Foundation qualifies as the data controller within the meaning of the General Data Protection Regulation (EU) 2016/679 (“GDPR“).
For the processing of your personal data in the context of the collective action against TikTok, this Privacy Statement does not apply. Instead, a separate privacy statement applies which you can consult here.
The contact details of the Foundation can be found below:
Stichting Take Back Your Privacy
Keizersgracht 2411016 EA Amsterdam
+ 31 (0)20 8082064
When you contact us, the Foundation may process the following (categories of) personal data:
When you provide products or services to us, the Foundation may process the following (categories of) personal data of persons from whom the Foundation purchases products or services or who are employed by these suppliers:
When you visit our website, we may process the following personal data from you:
In order to protect our interests and more specifically in connection with the (preparation of the) legal proceedings we conduct, we may process the following personal data of those involved (which may also include children), counterparties and other third parties (e.g. journalists or representatives of those involved):
If you are a participant in the collective action against TikTok, a separate privacy statement applies which you can consult here.
The Foundation processes your personal data on the basis of one or more of the following legal processing grounds:
When the Foundation processes your personal data on the basis of your consent, the Foundation will ask you for it separately. You may withdraw your consent at any time. The Foundation reminds you that withdrawing your consent does not affect the lawfulness of the processing of your personal data before the withdrawal of your consent.
The Foundation uses the above personal data for the purposes set out below, indicating for each purpose on the basis of which basis (1 to 4 mentioned above) the Foundation does so. If the processing is based on the basis of the ‘legitimate interest’, we briefly explain this interest. If you have specific in this respect, please do not hesitate to contact us.
Purposes with corresponding processing grounds:
The Foundation does not provide your personal data to third parties (‘recipients’ within the meaning of the applicable privacy legislation), unless this is necessary for the proper performance of the purposes set out in this Privacy Statement, if the law requires us to do so or if you have provided your consent to this end. For example, in the event of a DDoS attack or other suspicious activity, our website administrator has access to your IP address and the corresponding time of your visit.
The third parties to whom the personal data is made available are obliged to treat your personal data confidentially. If these parties are classified as “processors” within the meaning of the privacy legislation, the Foundation will ensure that a processing agreement is concluded with these parties that meets the requirements defined in the GDPR. Third parties engaged by the Foundation who offer services as independent processors are themselves responsible for the (further) processing of your personal data in compliance with the applicable privacy legislation. These include accountants, lawyers and parties who are engaged to provide an expert opinion or expert report.
Personal data may be shared with:
The Foundation may need to transfer personal data to a recipient in a country outside the European Union that provides a lower level of protection of personal data than European law offers. In that case, the Foundation will ensure that such a transfer of personal data is in accordance with the applicable laws and regulations, for example by concluding a model contract drawn up and approved for that purpose by the European Commission, and will assess whether additional measures are still needed to ensure an adequate level of protection for your personal data. Please do not hesitate to contact us if you would like to receive further information on the appropriate or suitable safeguards in place for the transfer of your personal data outside the European Union or if you would like to receive a copy of them.
The Foundation does not retain your personal data in an identifiable form for longer than is necessary to achieve the purposes included in this Privacy Statement. More specifically, we apply the following retention periods:
The abovementioned specific retention periods can be extended if statutory retention obligations apply or will become applicable. The Foundation may also retain personal data for a longer period if this is necessary for the settlement of incidents and/or legal disputes (e.g. between you and the Foundation).
The Foundation has taken appropriate technical and organizational measures to secure your personal data against unauthorized or unlawful processing and against loss, destruction, damage, modification or publication. For questions about the security of your personal data, or if you suspect or see signs of misuse, please contact us at firstname.lastname@example.org.
For the exercise of your privacy rights in connection with your participation in the collective action against TikTok, please contact the Consumers’ Association (Consumentenbond). More information can be found here.
You have the following rights in respect of the processing of your personal data by the Foundation:
The Foundation does not use automated decision-making within the meaning of Article 22 GDPR.
To exercise your rights, please contact the Foundation at email@example.com or by post using the contact details set out at the beginning of this Privacy Statement.
In order to prevent that the Foundation discloses information to the wrong person, the Foundation can ask you for additional information to verify your identity. In principle, Hunter Legal will inform you of whether the Foundation can comply with your request, within one month after receipt. In specific cases, for example when it concerns a complex request, this term may be extended by two months. The Foundation will inform you of such an extension within one month after receiving your request. On the basis of the applicable privacy legislation, the Foundation can refuse your request under certain circumstances. If this is the case, the Foundation will explain to you why. You can find more information about your privacy rights on the website of the Dutch Data Protection Authority.
If you have a complaint about the processing of your personal data by the Foundation, the Foundation will try to resolve it with you. If this does not lead to the desired result, you have the right to submit a complaint to the competent supervisor. In the Netherlands this is the Dutch Data Protection Authority. If you live or work in another country of the European Union, you can submit a complaint to the supervisory authority in that country.
The Foundation reserves the right to amend this Privacy Statement. The most recent version of this Privacy Statement will always be posted on our website, www.stichtingtakebackyourprivacy.nl. If there are substantial changes that could significantly affect one or more data subjects, the Foundation will strive to inform those data subjects immediately. This Privacy Statement was last updated on June 22, 2021.