Association privacy statement — free template (Word)
Last updated: 23 July 2026
In short
Is a privacy statement mandatory for an association?
Yes. GDPR requires you to clearly inform data subjects (members, parents, volunteers) about what personal data you process and why. A privacy statement on your website or at sign-up is the standard way to meet that duty.
A privacy statement is mandatory as soon as you process personal data of members, parents or volunteers. This free model text meets GDPR and works for any membership-driven organisation.
Fill in the [ ] blocks and publish the statement on your website. All mandatory elements are included — including data-subject rights and the complaint route to the Dutch DPA.
Downloads
The files are in Dutch — they follow the Dutch rules for associations and foundations.
What's inside?
- Who you are, what data you process and for what purpose
- Legal bases, sharing with third parties and retention periods
- Security and data-subject rights (access, rectification, erasure, objection, portability)
- Provision for minors (< 16) and cookies
- Complaint route to the Dutch Data Protection Authority
Stay current when regulations change
Leave your email address and receive the updated version whenever the rules change (such as WBTR or ANBI amendments). A few emails per year at most, no newsletter.