Privacy Policy

PEP strengthens civil-society organisations. Together we work towards greater connection within the community of The Hague. 

PEP advises and supports civil-society organisations and citizens undertaking a community initiative. We also advise businesses on establishing connections with these civil-society organisations. 

To fulfil this objective, PEP manages four websites: 

• www.denhaagdoet.nl – Dutch-language website for volunteer work 
• www.volunteerthehague.nl – English-language website for volunteer work 
• www.denhaagdoetacademie.nl – training courses for volunteers and informal carers in Dutch 
• www.pepdenhaag.nl – PEP's general website in Dutch for individuals, civil-society organisations, and businesses 

(Prospective) volunteers and organisations in The Hague may make use of these websites. To do so, they provide personal data to PEP. PEP considers the careful handling of personal data to be of great importance. The data of the persons concerned is processed and secured by PEP with due care. 

In processing this data, PEP complies with the requirements laid down by the General Data Protection Regulation (GDPR). Within the meaning of the GDPR, PEP is the controller responsible for the data processing. 

This entails that, at the very least, we: 

1. Process your personal data in accordance with, and solely for, the purpose for which it was provided. These purposes and the types of personal data are described in this Privacy Statement. 
2. Request your explicit consent where we require it for any processing of your personal data other than that referred to under point 1. 
3. Have taken appropriate technical and organisational measures to ensure the security of your personal data. 
4. Do not disclose personal data to other parties unless this is necessary for the fulfilment of the purposes for which it was provided. 
5. Are aware of your rights regarding your personal data, wish to draw your attention to them, and respect them. 

PEP Den Haag is responsible for the processing of your personal data. If, after reading our Privacy Statement, you have any questions about it or wish to contact us, whether in relation to this statement or more generally, you may do so using the contact details provided at the end of this statement. 

In this Privacy Statement, PEP explains which personal data it processes, for what purpose, and what rights you have as a data subject. PEP recommends that you read this Privacy Statement carefully and in advance, before sharing your personal data with PEP. 

1. To whom does this Privacy Statement apply?

This Privacy Statement applies to everyone who wishes to make use of PEP's services: 

• (Prospective) volunteers 
• Contact persons of civil-society organisations and businesses 
• Participants in training courses and events 
• Visitors to our websites (after completing a contact form) 

2. Which data do we process?

We process only the data necessary for our services, namely: 

• Name (first and last name) 
• Email address 
• Telephone number 
• Organisation and role 

3. Legal basis for processing personal data 

The legal basis for processing the personal data you provide is the consent you give to PEP Den Haag to process your personal data in accordance with this Privacy Statement.

4. Purposes of processing personal data 

In order to promote participation between citizens who wish to contribute as volunteers and civil-society organisations in The Hague, the three websites are used for: 

• Matching volunteers with suitable vacancies at civil-society organisations 
• Facilitating contact between volunteers and organisations 
• Registering for and organising training courses and events 
• Sending newsletters and mailings (from which you may unsubscribe at any time) 
• Maintaining contact and recording points of contact 

Where a data subject makes use of PEP's services and support, for example, by taking part in an advisory meeting, the personal data is stored in an internal CRM system. This contact-registration system serves the purposes of relationship management and the support of our services. 

5. Access to and processing of personal data

All PEP staff have access to the personal data referred to in this Privacy Statement.

6. Retention period for personal data 

PEP does not retain personal data for longer than is necessary for the purpose for which it was provided, or as required by law, but in no case longer than 7 years in respect of storage in the CRM system.

7. Disclosure to third parties 

We never disclose personal data to other parties with whom we have not concluded a data-processing agreement. 

With organisations with which we do share personal data (processors), we naturally make the necessary arrangements to safeguard the security of your personal data. Furthermore, we will not provide the data you supply to any other parties, unless we are legally required and permitted to do so. 

In the case of PEP's websites, a data-processing agreement has been concluded with an external party.

8. Outside the EU 

We do not disclose personal data to parties established outside the EU. 

9. Security 

PEP has taken appropriate technical and organisational measures to protect your personal data against unlawful processing. For example, we have taken the following measures: 

• Secure connections and access control 
• Role- and permission-based structures within our systems 
• Periodic security updates and checks 
• Confidentiality agreements for staff 
• All persons who have access to your data on behalf of PEP are bound by a duty of confidentiality. For this purpose, they sign a separate confidentiality agreement with PEP.  
• We apply a username and password policy across all our systems.  
• We make back-ups of personal data so that it can be restored in the event of physical or technical incidents. 

10. Data breaches 

Should a data breach occur that has consequences for data subjects, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) will be notified, and we will inform you as a data subject. The data breach will be recorded. 

11. Your rights regarding your data 

The General Data Protection Regulation grants you, as a data subject, a number of rights. These are: 

• The right to information 
• The right of access 
• The right to rectification, supplementation, erasure, or restriction 
• The right to object 
• The right to data portability 
• The right to be forgotten 
• The right to restriction of processing 

If you wish to exercise your rights, we ask that you submit a request (preferably in writing) to PEP's privacy officer. The privacy officer will take a decision on the matter as soon as possible, and no later than one month after your request is submitted. 

12. Complaints 

Should you have a complaint about the processing of your personal data, we ask that you contact PEP's privacy officer at [email protected]. 

You always have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), which is the supervisory authority in the field of privacy protection. See www.autoriteitpersoonsgegevens.nl. 

13. Questions 

If you have any questions or comments arising from this Privacy Statement, please contact us at [email protected]. 

The full text of the GDPR (General Data Protection Regulation) can be found on the government's website. See www.autoriteitpersoonsgegevens.nl. 

Contact details 

PEP Den Haag, 

Riviervismarkt 2, 

2513 AM The Hague 

Email address: [email protected] 

This Privacy Statement was adopted on 14 July 2026.