Stichting Extra Extra
About how we process personal data of our users
Version: August 2021
Stichting Extra Extra, hereinafter called “we”, “us”, “our”, are committed to protecting your privacy. This Privacy Policy describes how we process your personal data when you use or contribute to our services, such as donating to our foundation, subscribing to our newsletter or magazine, visit our Website (www.extraextramagazine.com) or visit our events (“Services”). Please find below more information about why we process personal data, how we do it and what rights you have relating to your personal data.
In order to properly carry out the Services, it is necessary to process your personal data. We find it important that the processing of personal data is executed in a manner that is in accordance with the existing safeguards for the protection of privacy. In this, we follow legislation regarding the protection of personal data, such as the General Data Protection Regulation (GDPR).
The legal entity Foundation Extra Extra (in Dutch: “Stichting Extra Extra”) (“Extra Extra”) will be the controller of your data. This entity is seated in Rotterdam, the Netherlands, and is registered at the Dutch Chamber of Commerce under number 61848654. In case of any questions relating to the processing of your personal data, please contact us via the contact details below.
What personal data does Extra Extra process?
Personal data are data that can identify you, such as your name, address, e-mail address, IP address, telephone number and age. In particular, we process the following categories of personal data:
Service |
Categories of personal data |
Donation to our foundation, incl. account for our Website |
Contact details, such as name, e-mail address and (home) address incl. country (phone number is optional);Age;Bank account information (for payment);Information put on the gift agreement. |
Subscription to our news letter |
Email address, name and city. |
Ordering our magazine (or subscribing to our magazine) |
Contact details, (home) address, country, phone and email address;Age;Bank account information (for payment).Please note that our magazine is distributed by our printing firm, Bruil & Van de Staaij. |
Visiting our Website |
We automatically collect cookies when you visit our Website. If you accept those cookies, we can see what mobile device you are using, such as the MAC address of your device, and your IP address. Please find more information about cookies below. |
If you contact us, e.g. via phone, email, Facebook or Instagram |
Any information you may include in your messages to us, that may be used to identify you. |
Mentioning you on our A/Z webpage |
Name, place, description of your work. |
How does Extra Extra obtain your personal data?
Extra Extra can get access to your personal data in various ways, but mainly because you provide us with such data when subscribing for or contributing to one of our Services, using our Website or otherwise contact us.
On what grounds and for what purposes does Extra Extra process your personal data?
The personal data that we collect are necessary for the provision of our Services and improving these. Without this personal data, we cannot properly provide our Services and/or communicate with you. We process your personal data because you gave us permission to use your personal data to provide our Services to you, because we have entered into an agreement or because we have a legitimate interest.
We process personal data in particular for the following purposes and only to the extent necessary for those purposes:
● To provide you with (one of) our Services;
● To send you relevant information in relation with the Services and to otherwise communicate with you, inter alia, when answering you questions;
● To provide functionality, analyse performance, fix errors, monitor safety, generate statistical data on visitor’s use of our Website, collect information of the user and his/her movement on our Website and improve usability and effectiveness of our Website;
● To comply with laws and regulations.
Children’s personal data
Our Services do not address anyone under the age of 18. We do not knowingly collect personal identifiable information from children under 18. In case we discover that a child under 16 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to perform necessary actions (please find our contact details below).
Cookies
Our Website uses cookies to measure performance and to improve your experience. Therefore, :
1 – Necessary Cookies
Necessary cookies are needed for our Website to function properly. These cookies are used to make the Website more user-friendly by enabling basic functions and storing certain preferences.
2 – Analytical cookies
Analytical cookies are used to collect (anonymous) statistics about the use of our Website. We use Google Analytics. For more information please read the privacy policy of Google Analytics.
● We use Google Analytics to measure how many visitors come to the Website, where they come from and which pages they visit. To minimise the impact on your privacy and to ensure that your personal data is only processed by Google to measure the visit and use of our Website, we have taken the following measures:
i. we have entered into a processing agreement with Google, which includes agreements on the use of your personal data;
ii. we have taken measures which ensure that only a very limited part of your IP address is provided to Google;
iii. we have taken measures which ensure that your personal data will not be shared with Google and may not be processed by Google for its own purposes or used to serve you with targeted ads;
iv. we have taken measures to ensure that Google will not be able to combine your surfing behaviour from different devices and multiple sessions;
v. we do not use other Google services in combination with the analytical cookies of Google (except for what is mentioned herein).
● Do you not want your behaviour to be tracked by Google Analytics? Please download a plugin from Google which prevents this kind of tracking. This plugin is available for Microsoft Edge, Google Chrome, Mozilla Firefox and Apple Safari. This setting will apply to all websites you visit, not just this one. The plugin can be installed via the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
3 – Marketing cookies
The marketing cookies will be saved for a maximum of 2 years after your Website visit. The personal data collected will in some cases be stored outside. If this happens, we ensure a proper level of protection for your personal data. We do this, for example, by concluding the standard contractual clauses of the European Commission that have been made available for this purpose. In addition, we apply technical and organisational measures to ensure that your personal data is processed under the safeguards required by the GDPR.
You can also choose to block or delete marketing cookies via your web browser. Most parts of our Website will then remain visible.
Specifically, this concerns the following cookies:
Name |
Provider |
Purpose |
Retention period |
Type |
_ga |
extraextramagazine.com |
Registers a unique ID that is used to generate statistical data on how the visitor uses the Website. |
2 years |
http |
_gat |
extraextramagazine.com |
Used by Google Analytics to throttle request rate. |
1 day |
http |
_gid |
extraextramagazine.com |
Registers a unique ID that is used to generate statistical data on how the visitor uses the Website. |
1 day |
http |
Chid |
Mixcloud.com |
Implements audio-files on the Website, and determines how many and who have listened to these files. |
session |
http |
Mx_t |
Mixcloud.com |
Implements audio-files on the Website, and determines how many and who have listened to these files. |
10 years |
http |
P |
scorecardresearch.com |
XXXXXXXXX |
Session |
Pixel |
Previmpr |
Mixcloud.com |
Implements audio-files on the Website, and determines how many and who have listened to these files. |
Session |
http |
P2 |
scorecardresearch.com |
Registers user data, such as IP address, geographical location, visited websites, and what ads the user hasclicked, with the purpose of optimising ad display based on the user’s movement on websites that use the same ad network. |
Session |
Pixel |
UID |
scorecardresearch.com |
Collects information of the user and his/her movement, such as timestamp for visits, most recently loadedpages and IP address. The data is used by the marketing research network, Scorecard Research, to analyse traffic patterns and carry out surveys to help their clients better understand the customer’s preferences. |
2 years |
http |
Access to your personal data
Except if otherwise indicated below, only the employees of Extra Extra who need access to your personal data to perform activities for the aforementioned purposes have direct access to your personal data to perform their work. Employees who have access to personal data are bound by confidentiality. In this way (in combination with the security measures mentioned below) we ensure that the personal data are only accessible to persons who are authorized to do so by virtue of their position and that the personal data is only used for the purposes for which the personal data were obtained.
Exchange of personal data with third parties and/or other countries
In principle, Extra Extra does not make the personal data available to third parties. However, for certain purposes we may communicate your personal data to third parties, (e.g. our distributor of our magazine or other parties who will send goodies to, for example, our donors). These third parties are based within the European Economic Area for regular business activities and administration. Our processors (e.g. software and cloud providers and IT assistants) could be based outside the European Economic Area.
Extra Extra enters into written agreements with these parties, by which they are obligated not to disclose or use the information for any other purpose and bound to security and other requirements. In principle, we do not share personal data with parties outside the European Economic Area. However, in case we do so, we do ensure compliance with applicable legislation (such as GDPR, if applicable) and take appropriate security measures and (other) safeguards to ensure an adequate level of protection of your personal data.
In some cases, we are required by law to provide personal data to (other) institutions or authorities. We always look at how we can respect your privacy as much as possible. The sharing of your personal data occurs where reasonably possible in anonymous or otherwise pseudonymized form.
Security of personal data
Extra Extra handles the personal data with the utmost care and takes appropriate and commercially acceptable means of organizational and technical security measures to protect your personal data against unauthorized access or changes, disclosure or destruction of personal data. Therefore, we comply with the applicable security standards.
Remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security. If, despite the security measures we have taken, there is a security incident that is very likely to have an adverse effect on your privacy, we will inform you as soon as possible about the incident. We therefore inform you about the measures we have taken to limit the consequences and to prevent any recurrence in the future.
If you unexpectedly encounter a security breach or you suspect that the security of your personal data is not properly guaranteed, please contact Extra Extra immediately. We have procedures in place to handle these reports adequately and carefully in accordance with applicable legislation. Please find our contact details below.
Retention periods
Extra Extra does only store personal data as long as necessary for the purpose for which it has been processed or for any longer period we are required for by law
External links
The Extra Extra Website may contain links to other websites. We are not responsible for the practices of third-party applications, websites or services that are linked to or from our Website. Our privacy policy does not apply when you use a link to switch from our Website to another application, website or service. Your conduct on a third-party application, website or service, including those who have a link on our Website, is subject to their own rules and policies. We are not responsible for the processing activities, privacy policy or the content or other practicing of these other websites and/or services.
Your rights with regard to the processing of personal data
You have the following rights with regard to the processing of your personal data:
● You can request information about and/or access to the personal data that we process about you. This means that you can request which personal data has been registered and for what purposes that personal data is used;
● You can object to the processing of your personal data, for example if you believe that the use of your personal data is not necessary for the performance of our activities or to comply with a legal obligation;
● You can request us to have your personal data changed/corrected and/or to limit the processing of your personal data;
● You can also ask us to remove your personal data from our systems;
● You can also ask us to ensure that your personal data is transferred to another party.
In case of processing activities for which your consent is required and granted, you can always withdraw your consent, e.g. by unsubscribing for our newsletter.
Requests regarding the exercise of the aforementioned rights can be submitted via the contact details below. We will update you on the status of your request within one (1) month after receiving your request. We will comply with your request, unless we have a compelling and legitimate interest not to delete data that outweighs your privacy interest or when fulfilling your request is otherwise not required by law and/or in case we could then no longer perform our Services. If we have deleted the data, for technical reasons we cannot immediately remove all copies of the data from our systems and backup systems. We may refuse to comply with the aforementioned requests if they are made unreasonably often, require unreasonable technical efforts, or have unreasonable technical consequences for our systems or endanger the privacy of others. If Extra Extra has complied with a request to improve, supplement or delete personal data, we will also inform third parties to whom this personal data has been provided of the changes made. Please note that we may ask you to verify your identity before taking further action on your request, for security purposes.
If you are not satisfied with the way in which we have dealt with your request or objection or otherwise with the processing of your personal data by Extra Extra, you can also submit a complaint about the use of your personal data to the competent Data Protection Authority (“DPA”) in your countryhere
Contact details
If you want to exercise your abovementioned rights, or you have any questions that are not answered by this privacy policy, as well as in case of complaints or suggestions, you can contact us in writing by using the following contact details:
Stichting Extra Extra
Vredenoordlaan 10D
3061 RL Rotterdam
The Netherlands
Email: info@extraextramagazine.com
Privacy Policy changes
Extra Extra may adjust or update this privacy policy from time to time. Adjustments to this privacy policy take effect the moment these have been published. We therefore recommend you to regularly consult this privacy policy so that you are aware of any changes to this privacy policy. If these adjustments are of significant importance to you, we will always inform you about this.