Privacy Policy
Who are we?
Belgian Parking Register (BPR), with its registered office at Kardinaal Mercierlaan 1a, 9090 Melle, Belgium, aims to enable cities, municipalities and concessionaires to oversee and manage the rights of on-street parking of vehicles within a given zone in Belgium through a central platform. BRP's platform collects on-street parking rights enabled by multiple digital and/or non-digital service providers for a given on-street parking zone and rate. It comprises a central database where multiple enforcement providers can consult the rights for a given parking zone.
If you have any questions about this, please contact us by sending an e-mail to support@bpr.be.
Preliminary remarks on this privacy policy
Scope - This Privacy Policy (hereinafter "Privacy Policy") applies when BPR processes your personal data as a data controller in accordance with applicable data protection laws and regulations, in particular in the following cases:
- You use our website (accessible via www.bpr.be),
- You use our products or services,
- We conclude a contract with you or your employer, or
- You communicate with us.
In certain cases, BPR may process your personal data as an end user in accordance with the instructions of one of our partners such as digital and/or non-digital service providers (e.g., the '4411' app), cities and municipalities, concessionaires, or enforcement providers. For example, an end user may request certain parking rights from a city or municipality through a service provider. The service provider then passes on these parking rights to the BPR platform. The city or municipality (or concession holder) in question can monitor and manage those parking rights on the same platform. Finally, an enforcement provider can monitor those parking rights via the platform. Our partners will inform you as data controller about how they process your personal data or have it processed. If you would like more information about the processing of your personal data by one of our partners, we recommend that you read the privacy policy of the partner concerned or contact them. If you have any questions about this, please contact us by sending an e-mail to support@bpr.be.
Changes - BPR may change this Privacy Policy at any time. In the event of material changes, BPR will use its best efforts, if possible, to notify you in a timely manner through an appropriate communication channel of these changes and from when the changes will apply.
Cookies - If you would like more information about how we process personal data through cookies you are kindly referred to our Cookie Policy.
1 What personal data do we process, for what purpose and on what legal basis?
1.1 We will only process your personal data:
- for the purposes specified in this Privacy Policy; and
- if we have a legal basis to do so.
1.2. The legal grounds on which we may rely are as follows:
- Contract - A contract with you that we are required to perform or to take steps to perform before entering into a contract with you.
- Consent - Your free consent where you are informed of what this consent means before you consent.
- Legitimate interest - A legitimate interest that we as an organization pursue, including to optimize our services.
- Legal obligation - A legal obligation that we must comply with.
1.3 Below we explain which categories of personal data we process, for what purposes we process your personal data and on what legal basis we do so.
| Processing activity | Categories of personal data | Legal basis and purpose |
|---|---|---|
| Products and Services - When you use our products or services, we process: | Identity Information - The identity information you provide to us, such as your name. Contact Information - The contact information you provide to us, such as your email address and phone number. Billing Information - The billing information you provide to us, such as your VAT number. | Contract - By using our products or services, you enter into a contract with us. We will only process your personal data for the purposes of performing this contract. Legal obligation - We are required to process billing information in accordance with applicable legal obligations. |
| Website - When you visit our website, we process: | Technical Information - The technical information about the device you are using to visit our website (such as your IP address) so that you can visit our website. Please note that we cannot identify you based on your IP address. | Legitimate interest - We rely on our legitimate interest to process your personal data so that you can visit our website. |
| Communications - When you communicate with us through any communication channel (including our contact form), we process: | Identity Information - The identity information you provide to us, such as your name. Contact Information - The contact information you provide to us, such as your email address and phone number. Professional Information - The professional information you provide to us, such as the organization for which you work. Content of communication - The content of your message, question or complaint. Technical Information - The technical information about your message, question or complaint, such as its date and time or the phone number you used to contact our support. | Legitimate Interest - We invoke our legitimate interest in responding to and following up on your message, question or complaint. |
| Requesting a demo - When you request a demo through our contact form, we process: | We process the same categories of personal data as under 'communications' above. | Legitimate Interest - We invoke our legitimate interest to process and further follow up on your request for a demo. |
| Events - When you participate in an event (e.g. webinar or physical event) of ours or if you present your business card to us, we will process: | Identity Information - The identity information you provide to us when you register for the event, such as your name. Contact Information - The contact information you provide to us, such as your email address and phone number. Professional Information - The professional information you provide to us, such as the organization you work for, your professional title, or your business card. Photo or image - If any photos or images are taken during the event, we will inform you at the time of the event. In any event, we will not distribute your photo or image (where you are identifiable) (e.g. via social media) without your permission. | Contract - By registering for an event, you are entering into a contract with us. We will only process your personal data for the purposes of performing this contract. Consent - To the extent that the processing of your personal data would not be necessary for the performance of the contract, we will seek your consent. This is the case for the distribution of your photo or image (in which you are recognizable). |
| Marketing emails - When you sign up to receive marketing emails (e.g. newsletter) from us, we process: | Contact Details - Your email address. | Consent - We process your email address to send you our marketing emails. You can withdraw your consent at any time by unsubscribing. |
1.4 We may also process the above categories of personal data to protect our legitimate interests or those of third parties, including fraud detection, if you compromise or threaten to compromise the security of our systems or those of third parties. In addition, we may process categories of personal data in the context of business transactions (e.g. an acquisition). For this, we rely on our legitimate interest.
1.5 We may be legally obliged to process or disclose the above categories of personal data to a competent (judicial) authority or their representatives as a result of their reasonable request or to the police on our own initiative if we have reasonable grounds to believe that your use of our products or services would constitute a criminal offence. We may also be legally obliged to process the above personal data in order to comply with any other legal obligation incumbent on us, such as accounting obligations.
2 From whom do we receive your personal data?
2.1 In most cases, we receive your personal data directly from you. In other cases, we receive your personal data from one of our partners, such as digital and/or non-digital service providers (e.g. the app '4411'), cities and municipalities, concession holders, or enforcement providers.
3 With whom do we share your personal data?
3.1 We may share your personal data with third parties to process your personal data for the purposes described above, for example:
- To provide you with our products, services and website (such as a hosting provider); or
- To provide you with our marketing emails (such as a marketing company); or
- To fulfil our contractual obligations towards our partners.
3.2 These third parties may only process your personal data in accordance with our instructions if they act as a processor, or in accordance with the instructions of our partner if we act as a processor. We also ensure that all such third parties are selected with due care and are committed to maintaining the security and integrity of your personal data.
3.3 We may be required by law to share your personal data with competent authorities or their agents, judicial authorities, government agencies or bodies, including competent data protection authorities, in order to comply with a legal obligation as set out above.
3.4 We do not share your personal data in any identifiable way with third parties other than those mentioned above without your consent. However, we may send anonymised and/or aggregated data to other third parties who may use this data to improve our services and for marketing purposes.
4 Where do we process your personal data?
4.1 In principle, we process your personal data within the European Economic Area (EEA).
4.2 In order to process your personal data for the purposes set out above, we may also transfer your personal data to third parties who process on our behalf outside the EEA. Any entity outside the EEA that processes your personal data is required to adhere to adequate safeguards in relation to the processing of your personal data. Such safeguards may result from:
- an adequacy decision by the European Commission; or
- contractual guarantees.
4.3 We may transfer anonymised and/or aggregated data to third parties outside the EEA. If such a transfer occurs, we will ensure that safeguards are in place to ensure the security and integrity of your data and any rights relating to your personal data that you might enjoy under applicable law.
5 How long do we process your personal data?
5.1 Your personal data will only be processed for as long as necessary to achieve the above purposes or, if applicable, until your consent is withdrawn.
5.2 We will de-identify your personal data when it is no longer needed for the purposes described above, except in the case of:
- an overriding interest of BPR, or another third party, to keep your personal data identifiable; or
- a legal or regulatory obligation or a court or administrative order that prevents us from de-identifying your personal data.
6 How do we secure your personal data?
6.1 We will take appropriate technical and organizational measures to protect your personal data against unauthorized access or theft, as well as against accidental loss, manipulation or destruction. You understand, however, that the protection of your personal data is a best-efforts obligation. Access to your personal data by our staff or third party personnel occurs only on a need-to-know basis and is subject to appropriate confidentiality obligations.
7 What are your rights?
7. 1 Based on the General Data Protection Regulation (GDPR), you have the right to access, rectification, deletion, restriction, objection and data portability and under the conditions stipulated in the GDPR.
7.2 If the processing of your personal data is based on your consent, you can always withdraw your consent.
7.3 To exercise any of your rights, please email us at support@bpr.be. We will notify you when we have received your request. If it appears that your request has been accepted, we will process your request as soon as reasonably possible and no later than thirty (30) days after receiving it.
8 Contact details and complaints
8.1 If you have any questions or complaints concerning the processing of your personal data by us, please contact us by sending an e-mail to support@bpr.be or by writing to BPR, Kardinaal Mercierlaan 1a, 9090 Melle, Belgium.
8.2 You always have the right to lodge a complaint with the competent data protection authority.