This privacy policy explains how Goal 3 B.V. (trading as GOAL 3) uses the personal data we collect from you when you use our website and services. GOAL 3 complies with the General Data Protection Regulation (GDPR) for all personal data processing.

‍

Goal 3 B.V., registered at Jufferlaan 106, 5692 WZ Son en Breugel, KVK 75834553, is the data controller responsible for your personal data.

‍

What data do we collect?

‍

GOAL 3 may collect the following personal data:

• Contact credentials (name, email address, company name)
• Job application submissions (CV, motivation letter and any other information you provide)
• Newsletter subscription details (name and email address)

‍

GOAL 3 does not currently collect research data that can be traced back to an individual. If this changes, this policy will be updated and all processing will be carried out in compliance with the GDPR.

‍

How do we collect your data?

‍

You directly provide GOAL 3 with the data we collect. We collect and process data when you:

• Visit or use our website (via cookies and similar technologies)
• Subscribe to our newsletter
• Submit a job application through our website
• Fill out our contact form

‍

How will we use your data?

‍

GOAL 3 collects and uses your data to:

• Respond to your enquiry or contact form submission
• Process and follow up on your job application
• Send you our newsletter (only if you have signed up)

‍

We do not use your personal data for any automated decision-making or profiling.

‍

Legal basis for processing

‍

Contact and application forms

When you submit a contact form or job application, we process your data on the basis of contract (to handle your request or application) and legitimate interest (to keep records for follow-up or in the event of a complaint).

‍

Newsletter

We only send the newsletter to people who have clearly and actively signed up for it. The legal basis is consent. You can withdraw your consent at any time by unsubscribing — there is an unsubscribe link in every newsletter.

‍

Cookies

Essential cookies are placed on the basis of legitimate interest or as strictly necessary for the service. Analytics and marketing cookies are only placed after you have given your consent through the cookie banner on our website.

‍

How do we store your data?

GOAL 3 stores your data securely on European servers with restricted access permissions for employees.

‍

We keep your data for the following periods:

• Contact form enquiries: up to 3 years from the date of the enquiry
• Newsletter data: until you unsubscribe, plus a short period in backups
• Job applications: 4 weeks after the position is filled. If you give explicit consent, we may keep your data for up to 2 years to contact you about relevant future openings. Once this period has expired, your data will be permanently deleted.

‍

Once the relevant retention period has passed, your data is deleted from our systems.

‍

Tools and third-party services

‍

GOAL 3 uses the following tools and services to operate the website and deliver our services. Where these tools process personal data on our behalf, they do so as data processors under a data processing agreement.

‍

• Cloudflare – security and performance (website infrastructure)
• Google Analytics – website analytics
• Google Ads – advertising and campaign tracking
• YouTube – embedded video content
• Odoo – newsletter management
• Zapier – form integrations and workflow automation
• Zoom – video communications (connected via Zapier)
• Meta – advertising and analytics
• Vimkit – video player and media embeds
• Embedly – rich media content embeds
• Netlify – website hosting and delivery

‍

We may use additional tools where necessary for service delivery, analytics, or communication. This policy will be updated accordingly when new tools are introduced that affect the processing of personal data.

‍

How do we share your data?

‍

GOAL 3 only shares your personal data with third-party service providers where necessary to operate our website and deliver our services, as listed above. We do not sell your personal data to any third party.

‍

Data outside the EEA

‍

Some of our service providers — including Google, Meta, Zapier, Odoo, and Vimkit — may process your data outside the European Economic Area (EEA). Where this is the case, GOAL 3 ensures that appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or equivalent mechanisms, to ensure your data is protected to the same standard as within the EEA.

‍

Cookies

‍

What are cookies?

Cookies are small text files placed on your device when you visit a website. They collect standard internet log information and visitor behavior data. For more information, visit allaboutcookies.org.

‍

Essential cookies

These cookies are necessary for the website to function and cannot be switched off. They are placed on the basis of legitimate interest or strict necessity. They include:

• Cloudflare – security and DDoS protection
• Core website functionality (goal3.org)
• Vimkit – video player functionality
• ‍

Analytics & marketing cookies

These cookies are only placed after you have given your consent via the cookie banner. They include:

• Google Analytics – understanding how visitors use the website
• Google Ads – measuring advertising effectiveness
• YouTube – embedded video content and tracking
• Meta – advertising and audience analytics

‍

How to manage your cookies

You can set your cookie preferences at any time using the cookie banner on our website. You can also configure your browser to refuse cookies, though this may affect the functionality of the website.

Your data protection rights

‍

Under the GDPR, you have the following rights:

• The right to access – you can request a copy of the personal data we hold about you.
• The right to rectification – you can ask us to correct inaccurate or incomplete data.
• The right to erasure – you can ask us to delete your personal data.
• The right to restrict processing – you can ask us to limit how we use your data.
• The right to object – you can object to our processing of your data.
• The right to data portability – you can ask us to transfer your data to another organisation or directly to you.
• The right to withdraw consent – where processing is based on consent, you can withdraw it at any time without giving a reason.

‍

If you would like to exercise any of these rights, please contact us at dataprotection@goal3.org. We will respond within one month.

‍

Data processing of minors

‍

This website is not intended for children under the age of 16. It is not our policy to intentionally process their personal data. If we become aware that we have done so, we will take steps to erase it promptly.

‍

Privacy policies of other websites

‍

Our website contains links to other websites. This privacy policy applies only to goal3.org. If you follow a link to another website, we encourage you to read their privacy policy.

‍

Changes to this privacy policy

‍

GOAL 3 reviews this privacy policy regularly and will post any updates on this page. This policy was last updated in April 2026.

‍

How to contact us

‍

If you have any questions about this privacy policy, the data we hold about you, or you would like to exercise one of your data protection rights, please contact us:

Email: dataprotection@goal3.org

Post: Goal 3 B.V., Jufferlaan 106, 5692 WZ Son en Breugel, The Netherlands

‍

How to contact the appropriate authority

‍

If you have a complaint about how we handle your data and we have not resolved it to your satisfaction, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

Phone: +31 (0)70 888 85 00

Postal address: PO Box 93374, 2509 AJ Den Haag

www.autoriteitpersoonsgegevens.nl

‍