Privacy Policy

November 4, 2024

This privacy notice applies to the collection and processing of personal data by bpost within the framework of the End of Year Photo Contest (“Contest”) and contains specific information on how bpost processes your personal data.

The Controller is bpost (“we”, “us”, or “our”), limited company under public law, with its registered office at Multitower, Anspach Boulevard 1, box 1, 1000 Brussels, listed in the Brussels business register and with VAT number BE 0214.596.464. We are committed to protecting and respecting your privacy. We are obliged to comply with the obligations provided for by the General Data Protection Regulation (“GDPR”) and by national law.

1. What personal data do we collect, to what ends and on what legal bases?

In order to participate in the Contest, we will collect and process the following categories of personal data:

Identification data: name, first name
Contact details: personal email address, work email address, company name
Online and technical information: information on the use of the Contest website, IP addresses and information on the device used to access the Contest website, language preference on the website and website behaviour
Pictures: pictures submitted in context of the Contest

We collect and process your personal data for the following purposes:

To administer and manage the Contest (e.g., accepting submissions, announcing winners, contacting winners)
To support marketing, branding, and communication efforts.

We process your personal data for these purposes based on your consent (Art. 6(1)(a) GDPR), which you provide by submitting your information and participating in the Contest. You can withdraw your consent at any time to [email protected].

2. How long do we keep your personal data?

The personal data collected and processed within the framework of the Contest are kept for one year.

3.1 bpost group

Bpost SA/NV carries out activities in several countries and, as a parent company, together with its affiliated companies, forms the bpost group. The companies within bpost group work together with a view to their organization and the services to be provided.

We ensure that such transfer only takes place on the basis of clear agreements, such as the applicable Intra-Group Agreement for Data Transfers, and in compliance with applicable international and national law, including the local law applicable to the affiliates.

3.2 Third parties

Your personal data will be shared with Mortier Brigade as our third-party data processor for the purpose of operating the Contest website. Mortier Brigade will only process your data according to our instructions and within a contractual framework.

4. How do we keep your personal data secure?

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it from unauthorized access, loss, or misuse.

5. What are your rights in relation to your personal data?

Under the GDPR, you have the following rights:

Right of access - You have the right to access the personal data that bpost processes about you and to obtain a copy of these personal data (subject to certain exceptions)
Right to rectification and erasure - You have the right at any time to have your personal data rectified or erased by us free of charge, provided that the legal conditions for doing so are met.
Restriction of processing - You can require bpost, subject to compliance with the applicable legal provisions, to restrict the processing of your data.
Right to data portability - Under certain conditions, you have the right to portability of the personal data you have provided.
Withdrawal of consent – you have the right to withdraw your consent to the processing of your data at any time. However, this withdrawal will not affect the lawfulness of the processing of your personal data for the period prior to the time of withdrawal and for processing activities base on another legal basis;
Lodge a complaint to the competent authority. You always have the right to contact the data protection supervisory authority of the Member State of the European Economic Area where you normally reside, where you have your place of work (if applicable) or where the alleged breach has taken place, and to lodge a complaint if appropriate. For Belgium, this is the Data Protection Authority (www.dataprotectionauthority.be)

6. How can you contact us?

You can contact us with any question or complaints you may have or to exercise your rights:

Online by means of the corresponding webform;
By post to: bpost, attn. Data Protection Office, Multitower, Anspach Boulevard 1, box 1, 1000 Brussels.
Via email at: [email protected].

For security reasons, we ask you to provide your full contact details and proof of your identity (for example a copy of the front and back of your identity card or your driving licence on which your photo and national register number have been masked). As applicable, bpost reserves the right to request additional supporting documents.

bpost may reject requests that it deems excessive or that constitute an abuse of the applicable right.

7. Amendments to this privacy notice

bpost reserves the right to amend this privacy notice in order, among other things, to reflect a change to a service or the legal and/or regulatory requirements. The amendments to the privacy notice come into effect when they are published. We recommend that you always check the most recent version. The date of the most recent version is stated at the top of the present privacy notice.