Privacy statement

This privacy statement explains how ALK Positive Belgium handles your personal data, in line with the General Data Protection Regulation (GDPR) and the Belgian law of 30 July 2018 on the protection of personal data.

The data controller is:

The association is run entirely by volunteers. For any question about this statement or about your data, email us at info@alkpositivebelgium.be.

When you use our contact form, we process:

To run that check, Cloudflare processes your IP address and technical signals from your browser, and verifies the one-time Turnstile token your browser generates. We do not store your IP address or the token.

This website uses no analytics or advertising cookies and does not track your browsing. You can read more in our cookie policy.

You do not have to give us your details. Without your name, email address and message, however, we cannot reply to you.

We do not ask for health information, and you do not need to share any: we give no medical advice, so questions about your diagnosis or treatment belong with your doctor.

Messages to a patient association often touch on health all the same. Information about someone's health is special-category data under Article 9 of the GDPR. If you include it, we process it solely on the basis of the explicit consent you give by ticking the box on the form (Article 9(2)(a) GDPR), and:

If you share information about someone else's health — a partner or relative, for example — please only do so with their agreement.

You can withdraw your consent at any time by emailing info@alkpositivebelgium.be. This does not affect the lawfulness of processing carried out before you withdrew it.

We use your data for no other purpose. We do not make automated decisions about you or build profiles; the only automated step is the anti-bot check, which only decides whether a submission comes from a person rather than a bot.

Your message is read only by the authorised volunteers who manage our mailbox. We use the following processors and service providers:

We never sell your data and do not share it for commercial purposes.

Cloudflare, Make.com, Microsoft and Vimeo may process data on servers outside the European Economic Area (EEA), in particular in the United States.

These transfers are protected by recognised transfer mechanisms under Chapter V of the GDPR, such as the EU–U.S. Data Privacy Framework and the European Commission's Standard Contractual Clauses (SCCs).

Microsoft 365 is provided to us by Microsoft Ireland Operations Limited, a company based in Ireland. Where data is transferred to its parent company, Microsoft Corporation, in the United States, that transfer is covered by both the European Commission's Standard Contractual Clauses and the EU–U.S. Data Privacy Framework.

To find out more about these safeguards, email us at info@alkpositivebelgium.be.

We keep contact-form submissions, the correspondence that follows and the related enquiry logs for 2 years from the date we receive them, so that we can handle any follow-up. After that, they are securely deleted or anonymised.

You can ask us to delete your data sooner — see "Your rights" below.

Under the GDPR you have the following rights:

To exercise your rights, email us at info@alkpositivebelgium.be. We reply within one month. We may first ask you to confirm your identity, so that your data never reaches anyone else.

Our site links to external organisations and to our private Facebook group. Once you visit those sites, their own privacy policies apply. Facebook processes data under its own terms.