Transparency · Care · Accountability
Privacy & data protection.
Our responsibility
Your information should be handled with care and clarity.
This notice explains how CIE collects, uses, shares, protects and retains personal data, and how you can exercise your rights. It applies to this website and to information handled through CIE’s programmes, events, publications, partnerships, fundraising and other organisational activities.
The organisation responsible for this processing is Stichting Centrum voor Internationale Erfgoedactiviteiten (Stichting CIE), Pieter Borstraat 32, 1065 AG Amsterdam, the Netherlands. KvK 34257403 · RSIN 817049605.
You are not legally required to provide personal data through this website. However, CIE needs basic contact information and the substance of your request in order to reply or provide a service you ask for. We may also receive professional contact details from project partners, public sources or people who introduce us, and will provide appropriate privacy information where required.
Privacy questions or requests
Contact CIE’s privacy officer
Purpose and legal basis
What we use—and why
CIE only processes personal data when it has a clear purpose and a lawful basis under the General Data Protection Regulation (GDPR).
Enquiries and correspondence
When you contact CIE, we may use your name, email address, organisation, topic and message to answer you, take requested steps and maintain relevant correspondence.
Programmes, events and partnerships
We may process professional contact details, registrations, participation records, project roles, contributions and consent choices to organise activities, work with partners and meet reporting obligations.
Publications and public stories
Names, roles, biographies, images, recordings or testimony may be used for agreed publications, project documentation and archives. CIE considers consent, contracts, legitimate interests and relevant research or archival purposes before publication.
Donations and administration
We may retain donor identity, contact information, payment references, allocation instructions and financial records to administer donations, provide accountability and meet Dutch legal, tax and accounting obligations.
Website operation and security
Our hosting and technical service providers may process limited device, IP address and server-log information needed to deliver, protect and maintain the website.
Lawful grounds
Depending on the activity, CIE relies on consent, a contract or requested pre-contractual steps, a legal obligation, or a legitimate interest such as responding to enquiries, operating CIE and protecting its systems.
Sharing and international work
Who may receive personal data
CIE does not sell personal data. We share it only when needed with trusted providers and partners, such as website hosting, email, IT, accounting, payment, event or project services, or when the law requires us to do so.
Because CIE works internationally, an activity may involve partners or service providers outside the European Economic Area. When personal data is transferred internationally, CIE will assess the transfer and use an approved legal mechanism and appropriate safeguards where required.
CIE does not use information submitted through this website for automated decision-making or profiling.
Storage limitation
How long we keep information
CIE keeps personal data only for as long as it is needed for the stated purpose, accountability and applicable legal requirements.
For the time needed to respond and follow up, unless the correspondence becomes part of an ongoing relationship or must be kept for a legal reason.
For the duration of the work and any later period needed for reporting, audit, contractual, research or legitimate archival purposes.
Until registration, participation and follow-up are complete, plus any period required for financial or legal accountability.
For the retention period required by Dutch tax, accounting and other applicable laws.
For as long as necessary to respect choices and demonstrate that CIE has met its data-protection responsibilities.
Potentially for a longer period where documentation, research or public-interest archiving is part of CIE’s purpose, subject to regular review and applicable rights.
Using the contact form
Your message stays in your email workflow.
The contact form on this website prepares an email in your own email application. It does not submit or save the form entries in a CIE website database. If you choose to send the email, the information is then processed in CIE’s email system so that we can respond.
Go to the contact form ↗Your GDPR rights
You can ask what CIE holds about you.
Depending on the circumstances, you may ask CIE to give you access to your personal data, correct it, delete it, restrict its use, provide it in a portable form, or stop certain processing. You may object to processing based on legitimate interests and withdraw consent at any time where consent is the legal basis.
To make a request, email Biljana Volchevska at biljacie@heritage-activities.nl. CIE may need to verify your identity before acting on a request.
If you believe CIE has not handled your personal data properly, please contact us first so we can investigate. You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.
Autoriteit Persoonsgegevens ↗Security
Proportionate safeguards
CIE uses organisational and technical measures appropriate to the nature of the information and the risks involved. Access is limited to people who need it for their work.
Children and sensitive stories
Extra care where it matters
Our public website is not directed at children. CIE applies additional care to children’s data, sensitive information, testimonies and images. Contact the privacy officer if you have a concern about material involving you or someone you represent.
Updates
A living notice
We will revise this page when CIE’s activities, technology or legal obligations change. Material updates will be identified here.
Last updated: 30 July 2026
Official guidance