Data protection for non profit organisations