3. Privacy Policy (GDPR)
Data controller
The non-profit P2P – People To People (BCE 1033.356.539), Rue Émile Féron 153, 1060 Brussels — contact@p2p-asbl.be.
Data collected and purposes
- Identity and contact details (name, email): managing accounts, sales and contact.
- Order data (items, amounts, chosen charity): carrying out transactions and donations.
- We do not store any banking data: payments are processed by Stripe.
Legal basis
Processing is based on the performance of the contract (the sale), compliance with legal obligations (accounting, tax) and, where applicable, your consent.
Recipients
Your data is only shared with the providers necessary for the service: Stripe (payments) and Combell (hosting). It is never sold.
Cookies and audience measurement
The site uses a privacy-friendly audience measurement (Cloudflare Web Analytics), with no tracking cookies and no advertising profiling. No intrusive consent banner is imposed for this measurement.
Retention period
Data is kept for as long as necessary to manage sales and comply with legal obligations (in particular accounting), then deleted or anonymised.
Your rights
You have the right to access, rectify, erase, restrict and object. To exercise them: contact@p2p-asbl.be. You may also lodge a complaint with the Data Protection Authority (APD, Belgium — www.autoriteprotectiondonnees.be).