Privacy Policy

Last updated: August 11, 2025

This privacy policy applies to the entire WeForward ecosystem: the general landing page and the sub-websites Forest Forward, Story Forward and Give it Forward (hereinafter collectively: WeForward, we, us or our). Unless otherwise stated, Forest Forward BV is the data controller for the processing described in this policy.

1. Identity and contact details

2. Scope and responsibilities within the ecosystem

This policy covers processing that takes place via:

• WeForward (organization),
• Forest Forward,
• Story Forward,
• Give it Forward.

As a rule, Forest Forward BV acts as data controller. Certain projects or events may involve joint responsibility with a partner; this is then communicated separately and clearly (e.g., in an event registration form). For processors acting on our behalf (hosting, email, analytics, payments), we conclude processor agreements.

3. Definitions (GDPR)

• Personal data: any information relating to an identified or identifiable natural person.
• Processing: any operation or set of operations performed on personal data (such as collecting, storing, consulting, transmitting, deleting).
• Data controller: the party that determines the purposes and means of processing.
• Processor: the party that processes personal data on behalf of the controller.
• Data subject: the person to whom the personal data relates.

4. What data do we process?

4.1 Data you provide directly

• Identification and contact: first name, last name, email, phone, postal address.
• Organization: company name, position, VAT number.
• Content: messages, questions or feedback you send; attachments you upload.
• Registration/enrollment: participation in events, workshops or programs; preferences and availability.
• Recruitment: CV, cover letter, portfolio, references, interview notes (see also § 11).

4.2 Data collected automatically

• Technical: IP address (anonymized where possible), browser type/version, device, operating system, timestamp.
• Usage: pages visited, referring URL, session duration, click behavior.
• Cookies and similar technologies: see our separate Cookie Policy.

4.3 Data from external sources

• Public sources and social media: business contact details, role/position, interests you share publicly.
• Partners and suppliers: when you come to us through a partner.

5. Purposes and legal bases

We process personal data exclusively for legitimate purposes and based on a valid legal basis according to art. 6 GDPR.

Legitimate interest is only invoked after a balancing of interests (LIA). You can object to processing based on legitimate interest (see § 13).

6. Minors

Our websites and services are not aimed at children under 16 years. If we do process personal data of minors, this is done exclusively with consent of parent/guardian or according to applicable legislation.

Contact