Privacy Policy

1. General information

EBIA respects your privacy and processes your personal data in line with the General Data Protection Regulation (GDPR) and Belgian data protection legislation.

We may use cookies or similar technologies on our Website. For further details, please consult our Cookie Policy.

We may amend this Policy when necessary. Updates will be published on this Website, with the revision date clearly indicated.

Last update: 15 September 2025

2. What data we process and why

When you use the Website and/or EBIA services, we may collect and process the following personal data:

• • Identification and contact details (name, email, telephone, address, organisation, function)

• Professional information (company details, membership status, job applications)

• Technical data (IP address, browser, device information, cookies)

Purposes of processing (with legal grounds):

• Responding to contact requests via forms or email (consent / legitimate interest)

• Managing EBIA membership and services (contract)

• Processing event registrations and participation (contract / consent)

• Sending newsletters, updates, or invitations (consent – with opt-out possibility)

• Performing statistical analyses to improve the Website and services (legitimate interest)

• Complying with legal obligations (legal requirement)

3. With whom we share data

We do not sell or disclose your data to third parties without your consent, except when necessary to provide EBIA services.

We may use carefully selected external processors (e.g., IT, mailing providers) who process your data only on our behalf and under written instructions.

Data may be shared with authorities if legally required.

Only anonymised and aggregated data may be shared for research or statistical purposes.

4. Where we process data

EBIA and its processors will process identifiable personal data only within the European Economic Area (EEA).

Anonymised or aggregated data may be transferred outside the EEA under appropriate safeguards.

5. How we safeguard data

We apply appropriate technical and organisational measures to protect your data from unauthorised access, loss, misuse, or alteration.

Only authorised EBIA staff or service providers can access your personal data under strict confidentiality obligations.

Data will be stored only as long as necessary for the purposes stated in this Policy or until consent is withdrawn.

6. Retention periods

• Personal data linked to membership or contractual obligations: kept as long as necessary for the contractual relationship and statutory obligations.

• Event-related data: kept up to 3 years after the event.

• Newsletter subscriptions: until you unsubscribe.

• Job applications: up to 1 year after the recruitment process, unless you agree to a longer period.

7. Your rights

You have the following rights under GDPR:

• Access: request access to your personal data.

• Rectification: request corrections of inaccurate or incomplete data.

• Erasure: request deletion of your data, subject to legal obligations.

• Restriction: request limited processing of your data.

• Objection: object to processing based on legitimate interest or for direct marketing.

• Portability: request your data in a machine-readable format when processing is based on consent or contract.

• Withdrawal of consent: withdraw your consent at any time (without affecting prior lawful processing).

To exercise your rights, please contact: info@europeanbedding.eu.
We will respond to your request within 30 days.

If you are dissatisfied with our response, you can file a complaint with the Belgian Data Protection Authority:
Rue de la Presse 35, 1000 Brussels – www.dataprotectionauthority.be

8. Data Protection Officer (DPO)

If EBIA appoints a Data Protection Officer, the contact details will be published here.

Until then, please direct all privacy-related questions to info@europeanbedding.eu.