Home / Privacy Statement
LegalPrivacy Statement
How Stichting Joods Nationaal Fonds (JNF Nederland) processes your personal data when you take part in the 72nd JNF Lottery — transparent, secure and compliant with the GDPR.
Stichting Joods Nationaal Fonds attaches great importance to the protection of your personal data. In this privacy statement we explain which data we collect when you take part in the 72nd JNF Lottery or visit our website, what we use that data for, how long we retain it and which rights you have under the General Data Protection Regulation (GDPR).
1. Who we are
The controller within the meaning of the GDPR and also the organiser of the lottery is:
- Stichting Joods Nationaal Fonds (JNF Nederland)
- KvK number: 41200972
- Establishment number: 000000105139
- RSIN / ANBI number: 002955659
- Registered address: Van Leijenberghlaan 197D, 1082 GG Amsterdam
- Postal address: Stichting JNF, Antwoordnummer 47200, 1070 VC Amsterdam
- Email: info@jnfloterijactie.nl
- Website: jnfloterijactie.nl
We organise a one-off lottery under licence 25110, valid from 24 June to 16 December 2026, granted by and under the supervision of the Netherlands Gaming Authority (KSA).
Number (licence): 25110
Data Protection Officer (DPO)
We have appointed a Data Protection Officer who oversees compliance with privacy legislation. You can reach the Data Protection Officer:
- by email at info@jnfloterijactie.nl, marked for the attention of «Data Protection Officer / DPO»;
- by post: Stichting JNF, for the attention of the Data Protection Officer, Antwoordnummer 47200, 1070 VC Amsterdam.
2. Which data we collect
We process only data that is necessary for your participation in the lottery, for compliance with legal obligations or for the operation of our website.
| Category | Examples | Purpose |
|---|---|---|
| Name and address details | First and surname, address, postcode, town/city | Identification of the participant, awarding of prizes, verification that you reside in the Netherlands |
| Date of birth | Day, month, year | Age verification: participation is permitted only from the age of 18 |
| Email address | Your email address | Confirmation of your order, sending of ticket numbers, winner notification, (with consent) newsletter |
| Phone number (optional) | Mobile or landline number | Quick contact in the event of a prize win or questions about your participation |
| Payment details | IBAN, payment method, transaction reference | Settlement of your payment via our payment service provider; any refund |
| Ticket numbers and purchase history | Assigned ticket numbers, number of tickets, purchase date | Conducting the draw, determining winners, checking the maximum of 500 tickets per person |
| Technical data and cookies | IP address, browser type, cookie preference | Security and proper functioning of the website; statistics and advertising only with your consent |
3. What we use your data for and on what basis
We process your personal data solely on the basis of the following legal grounds set out in Article 6 GDPR:
- Performance of the contract — processing your ticket purchase, assigning and sending ticket numbers, conducting the draw and paying out prizes.
- Legal obligation — obligations arising from the Betting and Gaming Act and our licence conditions, the fiscal retention requirement for payment data and the mandatory age verification (18+).
- Legitimate interest — fraud prevention, including the detection of multiple accounts per person and monitoring of the maximum number of tickets, as well as the security of our systems.
- Consent — sending our newsletter and placing non-essential cookies (analytical and advertising). You may withdraw your consent at any time.
No automated decision-making with legal effect: the draw is carried out using a certified Random Number Generator under independent supervision, but decisions on the payment of prizes, blocking or exclusion are always reviewed by a member of staff.
4. With whom we share your data
We never sell your personal data to third parties. We share data only in so far as necessary with:
- Payment service providers — for the processing of payments via iDEAL, credit card (Visa/Mastercard), PayPal and bank transfer. The payment service provider processes your payment data in accordance with the PCI DSS security standard.
- Email service provider — for the sending of confirmation and winner emails. We work with an email service provider within the EU/EEA or with appropriate safeguards within the meaning of the GDPR.
- Hosting provider — for hosting the website and the participant administration.
- Auditor and supervisory authority — where legally required, we provide data to our auditor or to the Netherlands Gaming Authority (KSA).
With all parties that process personal data on our behalf we have concluded data processing agreements, so that your data is also processed securely and solely for the agreed purposes with them.
5. Retention periods
We do not retain your data for longer than necessary for the purpose for which it was collected, or for as long as the law requires.
| Data | Retention period | Reason |
|---|---|---|
| Payment and bank details | 5 years | Fiscal retention obligation (Dutch Tax Administration (Belastingdienst)) |
| Participants' personal data | 1 year after the draw | Settlement of prizes, complaints and accountability |
| Audit logs | 1 year | Security, fraud prevention and monitoring |
| Cookie preference | 12 months | Remembering your choice in the cookie banner |
After the retention period has elapsed, data is securely deleted or irreversibly anonymised.
6. Your rights
Under the GDPR you have the following rights in respect of your personal data:
- Right of access — you can request which data we process about you.
- Right to rectification — you can have inaccurate or incomplete data corrected.
- Right to erasure («right to be forgotten») — you can request the erasure of your data, in so far as no statutory retention obligation applies.
- Right to restriction — you can request that the processing be temporarily restricted.
- Right to object — you can object to processing based on legitimate interest.
- Right to data portability — on request you will receive your data in a structured, machine-readable format (export in JSON or CSV).
How to submit a request: send an email to info@jnfloterijactie.nl. We respond within 30 days. To prevent misuse, we may ask you to prove your identity before we carry out a request.
Are you dissatisfied with the way we handle your data or your request? Then you have the right to lodge a complaint with the Dutch Data Protection Authority (AP) via autoriteitpersoonsgegevens.nl.
7. Security
We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access, including:
- TLS encryption of all traffic between your browser and our website;
- encrypted storage of personal data in our systems;
- access restriction: only authorised staff have access to participant data, solely in so far as necessary for their task;
- logging and auditing of access to and actions involving personal data.
Payment data is processed by our payment service provider in accordance with the PCI DSS standard; we do not store full card details ourselves.
8. Minors
Participation in the lottery is permitted only for persons aged 18 and over. We therefore deliberately do not process personal data of minors. At registration we check the date of birth provided.
If we establish that a participant is younger than 18, the account is immediately blocked, the participation is declared invalid and the stake is refunded. The associated data is then deleted, except for data that we are legally required to retain.
9. Cookies
Our website uses essential cookies for its basic operation and — solely with your consent — analytical and advertising cookies (Google Analytics and Google Ads). Your cookie preference is retained for 12 months and you can adjust it at any time via the «Cookie settings» button in the footer. A full overview of all cookies, their purpose and their validity period can be found in our cookie policy.
10. Changes to this statement
We may amend this privacy statement, for example in the event of changes in legislation or in our services. The current version is always available at jnfloterijactie.nl, showing a version number and date. In the event of significant changes affecting your rights, we will inform registered participants by email. We advise you to consult this statement periodically.
Questions about this privacy statement? Please contact us at info@jnfloterijactie.nl or by post: Stichting JNF, Antwoordnummer 47200, 1070 VC Amsterdam.