privacy
statement

1. General

In principle, you can browse the EPRiBEL website without providing any personal data. Exceptions include data relating to:

• the person acting as a contact or representative of a company or organisation, or acting as a natural person in the capacity of a producer or an authorised representative for extended producer responsibility (EPR);
• the person completing a contact form or otherwise communicating with EPRiBEL;
• the person involved in registrations, applications for authorisations and declarations in the national register, including the register provided for in Regulation (EU) 2025/40 (PPWR).

EPRiBEL is committed to protecting personal data and respecting privacy. Your data is processed in accordance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (known as the General Data Protection Regulation – GDPR);
• the Belgian Law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data, which implements and supplements the GDPR in Belgium.

2. Who will process your personal data?

Your personal data is processed under the responsibility of:

EPRiBEL – Interregional EPR Commission
Rue Gaucheret 92–94, 1030 Schaerbeek
Email: info@epribel.be
Tel: +32 (0)2 209 03 60

For questions relating to data protection, please contact: privacy@epribel.be

3. Purposes and legal basis of the processing

Your personal data is processed solely for specific, explicit and legitimate purposes, including:

• handling queries and requests;
• managing registrations, declarations and notifications;
• managing and monitoring the national register within the framework of extended producer responsibility, including the register provided for in Regulation (EU) 2025/40 (PPWR);
• fulfilling, monitoring and enforcing legal and regulatory obligations;
• sending informational communications (such as newsletters), where you have subscribed.

Processing is based on one or more of the following legal grounds:

• compliance with a legal obligation;
• performance of a task carried out in the public interest;
• your consent, where required (e.g. for newsletters).

4. Retention period

EPRiBEL does not retain personal data for longer than is necessary for the purpose for which it was collected:

• Newsletters and informational communications: for as long as you remain subscribed (you can unsubscribe at any time);
• Registrations, declarations and notifications: for as long as is required for legal obligations, supervision and enforcement;
• Contact data: for the period necessary to handle your request or file.

Personal data is not used for commercial purposes and is not disclosed to third parties, except where required by law.

5. Data subject rights

You have the rights provided for under the GDPR, including the right to:

• access;
• rectification;
• restriction of processing;
• erasure (where compatible with legal obligations);
• object to processing.

Where personal data is processed in the context of legal obligations, these rights may be limited insofar as this is necessary for the performance and enforcement of those obligations.

To exercise your rights, please submit a request outlining your reasons to: privacy@epribel.be.

For security and confidentiality reasons, EPRiBEL may request proof of your identity. Manifestly unfounded or excessive requests may be refused.

6. Use of the electronic identity card (eID)

When signing documents as a representative using your electronic identity card (eID), this is done by means of a qualified electronic signature.

The national register number included in the associated certificate:

• is used solely for signature validation;
• is not stored or processed for any other purpose;
• is technically protected against any other use.

7. Confidential treatment of company data

EPRiBEL guarantees that all business activity data that is communicated through its systems will be treated confidentially, within the bounds of Belgian and European law.

This guarantee of confidentiality does not apply to:

• publicly available data;
• data already in EPRiBEL’s possession without a confidentiality obligation;
• data obtained from third parties;
• data that EPRiBEL is legally required to provide to competent authorities;
• anonymised and aggregated data that cannot be traced to individual companies.

EPRiBEL may aggregate data from different companies for statistical purposes, ensuring that disclosure does not harm the companies concerned.

Everyone working at EPRiBEL is bound by strict confidentiality obligations, even after leaving the organisation. Access to data is restricted to authorised persons only.

8. Changes

This privacy statement may be updated to reflect legal or organisational developments. The most recent version is always available on the EPRiBEL website.