Legal

GDPR Policy

Last updated: February 2026

1. Our Commitment to GDPR

SPAR (Society for Participatory Action and Reflection) is committed to complying with the General Data Protection Regulation (GDPR) for all individuals within the European Economic Area (EEA) and the United Kingdom. This policy outlines how we handle your personal data in accordance with GDPR requirements.

2. Data Controller

SPAR is the data controller for any personal data collected through this website. Our contact details are:

  • Organisation: SPAR – Society for Participatory Action and Reflection
  • Address: House 170, Road – 3, Mohakhali DOHS, Dhaka-1216, Bangladesh
  • Email: info@sparproject.org
  • Phone: +880 1611 586 107

3. Lawful Basis for Processing

We process personal data on the following lawful bases:

  • Consent: When you voluntarily provide data (e.g., newsletter sign-up, contact forms)
  • Contractual Necessity: To process and acknowledge your donations
  • Legitimate Interest: To improve our services and prevent fraud
  • Legal Obligation: To comply with tax, accounting, and regulatory requirements

4. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Request your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interest or direct marketing
  • Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing

5. International Data Transfers

As SPAR operates from Bangladesh, personal data from EEA/UK residents may be transferred outside the EEA. We ensure appropriate safeguards are in place, including standard contractual clauses approved by the European Commission, to protect your data during such transfers.

6. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

7. Cookies & Tracking

We use essential cookies for website functionality and analytics cookies (with your consent) to understand site usage. You can manage your cookie preferences through your browser settings. We do not use cookies for targeted advertising.

8. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence. You may also contact us directly at info@sparproject.org and we will endeavour to resolve your concern.