What we collect, why, and what we don't.

Who we are

Stichting Dorna (KVK 96770831, RSIN 869480133), Alexander Boersstraat 18 H, 1071 KX Amsterdam, NL.

If you have any privacy question, write to info@dornafoundation.org.

What we collect

Donations: name, email, and the amount you give. Your card details are handled by Stripe, we never see them.

Volunteer signups: name, email, the skills you offer, and what motivated you to write.

Children's Magazine submissions: the child's first name, age and country; the work itself, whether written, drawn, photographed or filmed; and, if the child chose to send them, photographs or video of the child making the work. If other children worked on it too, their first names and ages. The submission is held privately and is never published before a parent or guardian has confirmed consent.

From the adult who gives that consent: their name, email address, their relationship to the child, an optional phone number, and the name they type as a signature. If they are neither the parent nor the legal guardian, we also ask in their own words who they are, and we check before publishing anything.

Contact and exhibition-proposal forms: name, email, and the message you send.

Registering your interest in the Book Programme: your email, optionally your name and a message, the country and optionally the town, the number of children, their age groups and the languages they read, and whether you would like printed or digital books. An organization also gives its name and kind and the contact person's name and role. We never ask for a child's name. A registration is not an order or a subscription.

Server logs: standard request logs (IP address, user agent, timestamp) used only to keep the site secure and debug errors.

Counting visits

We count page views on our own server, so we can see which pages are read, when, and roughly from where. The counts are aggregate only: one line per day, hour, page, language, country and referring site, with a number next to it. No cookie is set, no identifier is stored, and no IP address is kept, so two visits by the same reader cannot be told apart from two readers. That is why we are allowed to count everyone without asking, and why these numbers can never be traced back to you.

If Google Analytics is switched on, we ask you first, and nothing from Google loads until you say yes. Saying no thanks costs you nothing and the site works exactly the same. Your answer is remembered in a small cookie on your own device; clear this site's cookies and we will ask again. When it is on and you have accepted, Google receives your visit under our property with your IP address shortened, and with advertising features and Google signals switched off.

These are the only visitor statistics we keep, and they are deleted after about a year.

Children

A child's work is only ever published with their parent or legal guardian's consent, given through a link we email to that adult. Until they answer, the work is visible to our editors and to nobody else.

When we publish, we publish the work with the child's first name, age and country. Never a surname, never an address, never their school, and never a way for anyone to contact them.

Photographs and video of a child making their work are optional, are used only inside the editorial team to understand the piece, and are not published unless the guardian has agreed to that separately.

A guardian can withdraw consent at any time by writing to info@dornafoundation.org, and we will remove the work. If it has already been printed on paper we cannot recall the copies, but we will take it off the website and out of every later edition.

Who else handles it

We use a small number of suppliers to run the site, and they only ever act on our instructions. Stripe processes card payments, and we never see card numbers. Resend delivers our email. Google Workspace holds our documents, calendar and shared drive, which is where accepted work and our internal files live. Our website and database run on Fly.io, on servers in Amsterdam. A nightly encrypted backup of the database is stored with an S3-compatible provider. Google Analytics receives visit data only from readers who have said yes.

Several of these companies are based in the United States, so some data reaches the United States under the data protection terms in our contracts with them. Our own servers and database are in the Netherlands.

Audio we transcribe for meeting notes is transcribed on our own computers and is never sent to any transcription service.

What we don't collect

No marketing tracking. No advertising. No third-party analytics unless you accept it first. We do not sell or rent personal data, ever. We do not ask a child for a surname, an address, a school or a way to reach them.

Lawful basis

Donations and form submissions: contract / consent (you provided the data with the intent of taking that action).

Server logs: legitimate interest in keeping the site secure.

How long we keep it

Donation records: 7 years (Dutch tax-record retention requirement).

Volunteer applications: until you ask us to delete them, or 2 years of inactivity.

Book Programme interest registrations: until you withdraw (there is a link in the email we send), and at most 2 years.

Submissions we publish or accept for an edition: kept, because they are part of the magazine and of our record of what we printed.

Submissions we do not use: deleted automatically within 12 months, along with any file that came with them. For the last month of that period they sit in a restorable bin, in case an editor removed something by mistake.

Server logs: 30 days, then deleted.

Your rights

Under GDPR you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email info@dornafoundation.org and we'll respond within 30 days.

If you're unhappy with how we handle your data, you can file a complaint with the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).