PRIVACY POLICY

I. INTRODUCTION

This privacy statement explains how KVC Westerlo BV handles the personal data of visitors to its website and describes how KVC Westerlo BV processes personal data. This Privacy Policy applies to processing activities that take place:

  1. in the stadium,

  2. through the use of the website (including the webshop and ticket sales), and

  3. through the use of the mobile/web application.

This privacy policy describes, among other things, the categories of personal data collected, the purposes for which the data is used, and the categories of recipients to whom the data may be disclosed. We value the protection of your privacy and personal data.
This version was last updated on 18 October 2021. We regularly update this policy, so we recommend checking this page from time to time.

II. INFORMATION ABOUT KVC WESTERLO

KVC Westerlo BV (hereafter “We”, “Us”, “Our” or “the Club”) is located at Merodedreef 189, 2260 Westerlo, Belgium, and is registered in the Belgian Crossroads Bank for Enterprises under number 0436.473.670.

KVC Westerlo acts as the data controller, unless stated otherwise and as defined by the GDPR, with respect to the processing of personal data for the purposes outlined in this Privacy Policy.

The data subject (hereafter also referred to as “you” or “your”) is the person about whom personal data is collected and who can be directly or indirectly identified by it.

For questions about this Privacy Policy, please email: privacy@kvcwesterlo.be. Additional contact information is available on the website: kvcwesterlo.be.

III. GENERAL DATA PROTECTION REGULATION (GDPR)

This refers to Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC, effective as of 25 May 2018.
It also includes:

  • The Belgian Data Protection Act of 30 July 2018

  • Any other current or future applicable laws relating to or affecting the processing of personal data

KVC Westerlo BV processes your personal data for the following purposes:

Products/Services

Through the website, it is possible to purchase products or services from KVC Westerlo BV. More information can be found on the relevant product/service pages.

When purchasing, personal data is processed as this is necessary to complete the transaction. The processing is lawful because it is necessary for the performance of the agreement with you.
Data is also stored to comply with legal accounting obligations. This falls under KVC Westerlo BV’s legitimate interests.
Personal data is deleted 10 years after the end of the agreement.

Personal Data Purpose(s) Legal Basis
First and last name Sale of tickets, subscriptions, webshop products Contract performance
Address
Date of birth
Email address (online) Sending direct marketing about Club/partner services/products Consent and opt-in
Stadium visits and safety (incl. mobility data – e.g., wheelchair access) Legal obligation (21/12/1998 law)

We will inform you beforehand if we plan to use your data for any purposes not listed in this policy or for which you did not give consent.

You grant consent by ticking the relevant checkbox during registration or ticket purchase. You may withdraw consent at any time, without affecting the legality of prior processing.

You may also object at any time, free of charge, to profiling or direct marketing, by emailing: privacy@kvcwesterlo.be.

Direct marketing may also be sent without prior consent if:

  • your email was obtained during a purchase,

  • and the messages concern similar products/services.
    You can unsubscribe at any time using the link in each message or by contacting: privacy@kvcwesterlo.be.

Some data is also processed based on legal obligations (e.g., football safety laws).

If you are under 13 years old, one of your parents or your legal guardian must consent to the data processing described in this policy.

Newsletter

If you subscribe to the newsletter (via the website), we will collect and process your email address to send updates about matches, tickets, webshop products, offers, promotions, and events. Some newsletters may be personalised.

You may unsubscribe at any time via the link in each email. Your personal data is only shared with the party responsible for managing our newsletter system.

Third Parties

We may share your data with the Pro League, its Official Partners (listed on RBFA.be), and club sponsors, but only if you have given prior consent by ticking the respective checkbox on the form. This consent can be withdrawn at any time.

With consent, you may receive:

  • Promotional messages (email, SMS, social media, phone)

  • Co-branded promotions (e.g., competitions)

  • Targeted advertising based on your interests

Analytics

This site uses cookies. Necessary cookies may be stored without consent. For all others, your permission is required.
Some cookies are placed by third parties. See our Cookie Policy for details.

V. USE OF PERSONAL DATA

We process:

  • All data you provide (e.g., via forms, emails, purchases, competitions, social media)

  • Website visit data (e.g., IP address, browser type, pages visited, duration)

  • Email interaction data (e.g., open rates, link clicks)

  • Ticket and fanshop purchase history

  • Stadium attendance

VI. RETENTION PERIOD

We keep your personal data:

  • For as long as required by law, or

  • For no longer than necessary to fulfil the purposes described above

VII. YOUR RIGHTS

You have the following rights under the GDPR:

  • Access (Art. 15): Request access to your personal data, purpose of processing, source, recipients, storage period, transfers outside the EU, and use of automated decision-making.

  • Rectification (Art. 16): Request correction or completion of inaccurate or incomplete data.

  • Erasure (Art. 17): Request deletion of data if the processing is unlawful or no longer necessary.

  • Restriction (Art. 18): Request restricted processing if data is inaccurate, unlawful, or under dispute.

  • Portability (Art. 20): Request to receive your data in a structured format or transfer it to another controller.

  • Objection (Art. 21): Object to processing based on legitimate interests, including profiling.

  • Complaint: You may file a complaint with the Belgian Data Protection Authority.

Request procedure:

  • Send your request to privacy@kvcwesterlo.be within 30 days

  • Include a copy of your ID (blur out photo, ID number, and national register number)

  • If the identity cannot be verified, we may request additional proof

VIII. SECURITY & CONFIDENTIALITY

8.1 We take appropriate technical and organizational security measures to prevent unauthorized access, loss, alteration, or disclosure of personal data.

8.2 KVC Westerlo is not responsible for the content or privacy practices of third-party websites linked from our site.

IX. PROCESSORS AND THIRD PARTIES

Data may be processed on behalf of KVC Westerlo by external processors and sub-processors. They act only under our instructions and may not use your data for their own purposes.

We may share your data with third parties where legally required (e.g., courts, authorities).

X. CHANGES

This privacy statement may be updated from time to time. The current version was last modified on 18 October 2021.

XI. CONTACT

Questions about this Privacy Policy or your rights? Contact:

KVC Westerlo BV
Merodedreef 189, 2260 Westerlo, Belgium
Email: privacy@kvcwesterlo.be

Or the Belgian Data Protection Authority:
Drukpersstraat 35, 1000 Brussels
Tel: +32 (0)2 274 48 00
Email: contact@apd-gba.be