Legal
Privacy Policy
How Impact Brussels (ASBL) collects, uses and protects personal data.
Impact Brussels (ASBL)
Registered address: Rue Emile Feron 153, 1060 Saint-Gilles, Brussels, Belgium.
Email for privacy inquiries: hello@impact.brussels
Impact Brussels acts as data controller for the personal data described in this policy.
1. Who we are
Impact Brussels (ASBL) is a non-profit organisation registered in Belgium.
2. What data we collect
We collect and process:
a) Data you provide directly
- Name and contact details (email address, phone number, organisation, role).
- Information you provide in contact forms, emails or meeting requests.
- Information you provide when you sign up for newsletters, reports or events.
- Information you provide when you apply to join projects, programmes or our platform.
b) Data collected automatically when you use our website
- IP address and approximate location.
- Device type, browser type and version, operating system.
- Date, time and duration of visits.
- Pages viewed and actions taken on the site.
- Cookies and similar technologies (see Cookie Policy).
c) Project and collaboration data
- Information related to EU projects, consortia and pilots where you or your organisation participate.
- Professional profile information (expertise, organisation, focus areas) relevant for matchmaking and project development.
- Communication history related to projects, proposals and partnerships.
d) Newsletter and marketing data
- Your newsletter subscription preferences.
- Records of emails opened and links clicked, where permitted and technically measured.
We do not knowingly collect or process special categories of personal data unless you provide them voluntarily and they are strictly necessary for a specific project, and only with an appropriate legal basis.
3. Why we process your data and legal bases
We process your personal data for the following purposes and on the following legal bases:
a) To respond to your inquiries and contact requests
- To answer questions sent by email or via forms.
- To schedule and conduct calls and meetings.
Legal basis: Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.
b) To build and manage EU projects, consortia and pilots
- To assess potential collaboration and fit with projects.
- To design and submit project proposals.
- To manage funded projects, including communication with partners and stakeholders.
Legal basis: Article 6(1)(b) GDPR and Article 6(1)(f) GDPR.
c) To provide you with newsletters, reports and updates
- To send you news, events, invitations and insights that you subscribe to.
Legal basis: Article 6(1)(a) GDPR or Article 6(1)(f) GDPR where permitted.
d) To maintain and improve our website and services
- To ensure security and performance of the website.
- To understand aggregated usage and improve content.
Legal basis: Article 6(1)(f) GDPR.
e) To comply with legal and regulatory obligations
- To keep records required by Belgian or EU law.
- To respond to lawful requests from public authorities.
Legal basis: Article 6(1)(c) GDPR.
4. How long we keep your data
- Contact and inquiry data: normally up to 3 years after last meaningful contact, unless a longer period is required for project, legal or reporting reasons.
- Project and consortium data: for the duration of the project and the retention period required by the funding authority and applicable law.
- Newsletter data: until you unsubscribe or we stop sending the newsletter.
- Technical and log data: for a limited period needed for security, troubleshooting and analytics, typically up to 13 months for cookies and logs, depending on the tool and legal requirements.
When data is no longer needed, we delete or anonymise it.
5. Who we share your data with
- Project partners and consortium members, when needed to prepare or deliver joint projects and pilots.
- Service providers that support our activities under data processing agreements.
- Public bodies and funding authorities when required in the context of EU or national projects.
- Advisors such as legal and accounting professionals when needed and bound by confidentiality.
We do not sell your personal data.
If we transfer personal data outside the European Economic Area, we do so only where there is an adequate level of protection or appropriate safeguards in place.
6. Your rights under GDPR
- Right of access.
- Right to rectification.
- Right to erasure.
- Right to restriction of processing.
- Right to data portability.
- Right to object to processing based on legitimate interests or direct marketing.
- Right to withdraw consent at any time.
To exercise your rights, contact us at hello@impact.brussels. We may need to verify your identity before responding.
You also have the right to lodge a complaint with the Belgian Data Protection Authority: Rue de la Presse 35, 1000 Brussels, Belgium. Website: https://www.dataprotectionauthority.be
7. Security
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
8. Updates to this Privacy Policy
We may update this Privacy Policy when our processing changes or when required by law. The latest version is always available on our website.
Last updated: 23 January 2026.