Privacy Policy

Privacy Notice pursuant to Articles 13–14 of EU Regulation 2016/679 (GDPR)

Data Subjects

Users.

Data Controller

C.R.E.A. — Complex and rare Epilepsies alliance (AISBL in Belgium)
Business Number: 1022.054.059
Registered office: Avenue Winston Churchill 11/30, 1180 Brussels, Belgium
Email: info@epilepsyplus.org
Website: www.epilepsyplus.org

Introduction

C.R.E.A., in its capacity as Data Controller (the “Controller”), pursuant to EU Regulation 2016/679 (“GDPR”), informs you that the GDPR safeguards data subjects with regard to the processing of personal data. Your data will be processed lawfully, fairly, and transparently, with respect for your privacy and rights.

Purposes and Legal Bases of Processing

We process your personal data for the following purposes:

• to manage requests sent via the contact form and to provide the technical management of the website and related services (Art. 6(1)(b) GDPR — contract/pre‑contract);

With your prior consent, which you can withdraw at any time, we also process your data to:

• send you updates and information by email or SMS (Art. 6(1)(a) GDPR — consent).

Providing data for the purposes described in the first bullet may be necessary to handle your request. Providing data for marketing communications is optional; refusal will not affect the rest of the service.

Methods of Processing and Security

Data are processed predominantly by electronic means in accordance with Articles 6 and 32 GDPR and with appropriate technical and organisational security measures.

Authorised Personnel

• Administration office
• Marketing office

Recipients

For the proper management of the relationship, data may be communicated to external providers (acting, where applicable, as processors), such as web‑hosting, maintenance and platform‑management providers.

Disclosure

Personal data are not disseminated.

Retention

We retain data only for as long as necessary to fulfil the above purposes, meet legal obligations and protect our rights in the event of disputes, in line with Article 5 GDPR.

Your Rights

• access your data and obtain a copy (Art. 15);
• obtain rectification and, where appropriate, completion (Art. 16);
• obtain erasure (“right to be forgotten”) and restriction (Arts. 17–18);
• receive your data in a structured, commonly used and machine‑readable format and transmit it to another controller (portability, Art. 20);
• object to processing, including for direct marketing (Art. 21);

You also have the right to lodge a complaint with the competent Supervisory Authority.