Privacy notice

1. Controller

The controller is Stichting Afghan Altruistic Humanitarian Organisation (AAHO), a Dutch foundation (stichting) with its registered office at Rozengracht 174B, 1016 NK Amsterdam, the Netherlands. Chamber of Commerce (KVK) number: 82092427. RSIN: 862333325.

2. Contact for privacy requests

For privacy questions or to exercise your rights, email info@aahoglobal.org or use the contact form on this website. AAHO does not currently appoint a separate Data Protection Officer (DPO). Where a DPO is appointed later, this notice will be updated.

3. Scope

This notice covers personal data processed through aahoglobal.org public forms, volunteer and adviser applications, community registrations, job applications (when vacancies are published), and related website operations. It does not replace separate notices that may appear on a specific form. Website terms of use, if any, are published separately and are not part of this privacy notice.

4. Categories of data we process (by form)

• Contact form: first name, last name, email, subject, message, and technical metadata such as IP address used for abuse prevention.
• Volunteer expression of interest: name, email, optional phone, country of residence, area of interest, optional short note, optional CV, and consent. Does not create a volunteer appointment. Full street address is not required on this form.
• Education interest registration: name, email, optional phone, free-text answers, and consent record.
• Volunteer doctor / adviser application: account email and password, name, title, specialty, country, experience, languages, and consent record. Credential documents may be requested later through the doctor portal.
• Afghan community organisation registration: currently paused — no public submissions are accepted until due diligence and privacy controls are in place.
• Interest registration (individuals): name, email, Netherlands municipality, area of interest, and consent to be contacted. Nationality, religion, health data, ID documents and full address are not collected on this form.
• Expert volunteer expression of interest: contact details, country of residence, field of expertise, optional CV, and consent. Does not create employment, a volunteer appointment or authority to act for AAHO. Retention typically up to 24 months; deletion via info@aahoglobal.org. Medical/legal roles require separate qualification, registration, insurance and safeguarding checks.
• Job applications (only when a vacancy is published): identity and contact details, CV, cover letter, and optional portfolio or LinkedIn URL.
• Paused or offline services: online consultation booking and donation checkout are not currently offered on this website. If those services resume, this notice will be updated before personal data is collected again for those purposes.

5. Purposes and lawful bases

• Responding to enquiries and partnership requests (legitimate interests and/or steps prior to a contract; consent where a privacy checkbox is required).
• Assessing volunteer, adviser, community and job applications (legitimate interests and steps prior to a contract; consent where requested).
• Operating user accounts for approved doctor/adviser applicants (contract / legitimate interests).
• Securing the website, preventing abuse, and maintaining logs (legitimate interests).
• Meeting legal obligations that apply to a Dutch foundation (legal obligation), where relevant.

AAHO does not use website forms for marketing automation or advertising profiles. Where consent is the lawful basis, you may withdraw it at any time without affecting prior lawful processing.

6. Processors and service providers

Personal data is hosted on AAHO’s web hosting and database infrastructure used to run this Laravel application. Email delivery, if configured, may use an email service provider. Fonts may be loaded from fonts.bunny.net (Bunny Fonts). Payment processor Stripe is used only if donation or consultation payment flows are re-enabled; those flows are currently disabled or paused. AAHO does not currently use advertising pixels or analytics platforms on the public site.

7. International transfers

AAHO is established in the Netherlands. If a processor stores or accesses data outside the EEA, AAHO will rely on an adequacy decision or appropriate safeguards such as the EU Standard Contractual Clauses, and will update this notice with the relevant details.

8. Retention

Contact messages are kept as long as needed to handle the enquiry and for a reasonable follow-up period, then deleted or anonymised unless a longer period is required. Volunteer, community, education-interest and job applications are kept for assessment and a limited archive period (typically up to 24 months after the last relevant activity, unless a longer period is required for legal claims or statutory duties). Doctor/adviser account data is kept while the account is active and for a limited period after closure. Server and security logs are kept for a short operational period. Exact retention may vary by record type; you may ask info@aahoglobal.org for the period applying to your data.

9. Security

AAHO applies organisational and technical measures appropriate to the risk, including access controls, encrypted transport (HTTPS), and restricted administrative access. No method of transmission or storage is completely secure.

10. Your rights

Under the GDPR you may have the right to:

• Access your personal data
• Rectification of inaccurate data
• Erasure (“right to be forgotten”) in certain cases
• Restriction of processing
• Data portability where applicable
• Object to processing based on legitimate interests
• Withdraw consent where processing is based on consent

To exercise these rights, email info@aahoglobal.org. We may need to verify your identity before responding.

11. Complaints

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). See https://autoriteitpersoonsgegevens.nl for contact and complaint procedures.

12. Cookies

Cookie use is described in our separate Cookie notice.

13. Changes

We may update this notice when our processing activities change. The “Last updated” date at the top of this page will be revised accordingly.