Privacy policy
Privacy policy LOV2030
LOV2030 is the project's call sign to become the European Capital of Culture 2030. LOV2030 is a project of KU[N]ST Leuven vzw.
1. General
This privacy policy (‘Privacy Policy’) regulates the processing of your personal data as part of your use of our Website (the ‘Website’) and the associated services (jointly referred to hereinafter as the ‘Services’). This processing is performed by KU[N]ST Leuven vzw as data controller, with registered office at Professor Roger Van Overstraetenplein 1, 3000 Leuven, Belgium (‘we’, ‘us’), registered in the Crossroads Bank for Enterprises under number 0848.195.912, in accordance with the applicable legislation relating to the protection of personal data.
By using our Website and/or our Services, you acknowledge that you have carefully read this Privacy Policy and that you agree to it without reservation. We reserve the right to regularly change the Privacy Policy as we see fit. Such changes will be communicated via the Website.
By clicking the checkbox that states: ‘I declare that I have fully read and understood the Privacy Policy and that I agree to it without reservation. I give permission to process my personal data as set out in this Privacy Policy’, you declare that you have indeed read this Privacy Policy and agree to it. You declare that you understand the purposes for which your personal data are processed. You also agree that your continued use is understood as continued permission. You may withdraw your consent at any time by ADDING.
Please note that we may use so-called ‘cookies’ or similar technology as part of the Website and/or the Services. Cookies are small text files that are placed on the hard drive of a device and contain certain information, which sometimes includes personal data. For more information about our use of cookies, please read our cookie policy.
This Privacy Policy was last updated on 14 March 2025.
2. What, why and how long we process data
1. When you use the Website and/or Services, we process personal data relating to you. Such personal data includes:
- When? Use of Services, contacting us, use of Website
- Which? Identification data
- Why (purpose)? Processing of request
- ENTER SCHEDULE
In principle, we obtain the aforementioned personal data directly from you. However, if you choose to register via a social media account (e.g. Facebook or Google Plus), this data is collected via your social media profile. We recommend that you consult the privacy policy of your social media service provider to determine which data is processed by your social media service provider when you use the social media login function. We do not send any of the personal data you provide via the Website to social media providers, unless you agree to this. In addition to the aforementioned purposes, we may also process your personal data:
- To provide you with the information about products and services you request in a personalised and efficient manner, either via the Website, email, telephone or social media channels.
- To process your personal data so that we can provide the Services.
- For direct marketing purposes, i.e. to be able to provide you with targeted communications, promotions, offers and other advertisements from us or our selected partners. We will ask for your prior consent for this.
- To perform statistical analyses to improve our Website and/or Services, or to develop new products or services.
- To provide to a financial institution or payment service provider, to enable your financial institution and the payment service provider to fulfil their legal obligations.
- To transfer to the police or judicial authorities as evidence of possible crimes or if there are founded suspicions of an unlawful act or crime committed by you through your registration with or use of the Website or the Services.
- In the context of a possible merger with, acquisition of/by or demerger by a third party, even if that third party is located outside the EEA.
3. If and when your registration on the Website or your use of the Website or Services can be considered (a) a violation of the terms and conditions or the intellectual property rights or any other right of a third party, (b) a threat to the security or integrity of the Services, (c) a danger to the Website or Services or systems of us or our subcontractors as a result of viruses, Trojan horses, spyware, malware, or any other form of malicious code, or (d) in any way whatsoever illegal or unlawful, discriminatory or offensive, we may process your data in the interest of ourselves, our partners or third parties.
3. With whom we share data
1. We do not send your personal data to third parties in an identifiable manner if this is not required to provide the Services, without your explicit consent.
2. We may use external processors to offer you the Website and/or Services. We ensure that third-party processors may only process your personal data on our behalf and according to our written instructions. We guarantee that all external processors are selected with due care, so that we can count on the security and integrity of your personal data.
3. We may transfer anonymised and/or aggregated data to other organisations that can use these data to improve products and services and to tailor the marketing, presentation and sale of products and services.
4. Where we process data
We and our external processors will only process your identifiable personal data in the EEA.
We may transfer your anonymised and/or aggregated data to organisations outside the EEA. If such a transfer takes place, we will ensure that there are appropriate safeguards to guarantee the security and integrity of your personal data, and that all rights relating to personal data are guaranteed that you might enjoy under applicable mandatory law.
If your personal data and/or anonymised and/or aggregated data is transferred, the following legal protection mechanism will be implemented:
- Google
- Transfer to the United States
- Legal protection mechanism via model clauses
- MailChimp
- Transfer to the United States
- Legal protection mechanism via model clauses
5. How we process data
1. We will do our utmost to only process the personal data that is necessary to achieve the objectives stated in this Privacy Policy. We will process your personal data in a legal, honest and transparent way. We will do our utmost to keep the personal data accurate and up to date.
2. Your personal data will only be processed for as long as is necessary to achieve the purposes stated in this Privacy Policy or until such time as you withdraw your processing consent. Please note that withdrawing your consent may imply that you are no longer able to use the Website and/or Services in whole or in part. If you have registered on our Website, we will remove your personal details if you remove your profile, unless we are prevented from doing so by a statutory or regulatory obligation or a court or administrative order.
3. We will take the appropriate technical and organisational measures to keep your personal data safe from unauthorised access or theft and from accidental loss, manipulation or destruction. Access by our personnel or the personnel of our external processors is only possible on a need-to-know basis and is subject to strict confidentiality obligations. However, you understand that ensuring safety and security are best-effort obligations, the fulfilment of which can never be guaranteed.
6. Your rights
You have the right to request access to all personal data that we process about you.
You have the right to request that any personal data about you that is incorrect or inaccurate be corrected free of charge. If you have registered on our Website, you can correct much of this information yourself via your profile. If such a request is submitted, you must also enclose proof that the personal details for which you request correction are incorrect.
You have the right to withdraw previously granted permission for the processing of your personal details. You can withdraw your consent at any time by sending an email to email hidden; JavaScript is required or by deleting your profile (if applicable).
You have the right to request that personal data relating to you be deleted if it is no longer needed in the light of the purposes set out in this Privacy Policy or if you withdraw your consent for it to be processed. However, you should be aware that a request for deletion will be evaluated by us in the light of legal or regulatory obligations or administrative or judicial orders that may prevent us from deleting the relevant personal data.
Instead of requesting erasure, you can also request that we restrict the processing of your personal data if (a) you dispute the accuracy of the data, (b) the processing is unlawful or (c) the data is no longer needed for the purposes stated, but you need it to defend yourself in judicial proceedings.
You have the right to oppose the processing of personal data if you can demonstrate that there are serious and justified reasons relating to special circumstances that warrant such opposition. However, if the intended processing is considered direct marketing, you have the right to oppose such processing free of charge and without justification.
If your personal data is processed on the basis of consent or on the basis of a contract and the processing is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and, where technically feasible, you have the right to directly transmit those data to another service provider. The technical feasibility of this will be exclusively judged by us.
If you wish to submit a request to exercise one or more of the above-mentioned rights, you can send an email to email hidden; JavaScript is required. This request must clearly state which right you wish to exercise and why. It must also be dated, signed and accompanied by a digitally scanned copy of your valid identity card showing your identity. We will notify you immediately when we have received this request. If the request appears to be founded, we will comply with the request as soon as reasonably possible and no later than thirty (30) days after receipt of the request.
If, in the exercise of your rights or the processing of your requests for access, we determine that these are apparently being submitted with a view to causing us inconvenience or damage, we reserve the right not to process them. If you contact us to exercise your rights, we will respond within one month. In exceptional cases, it may take longer, but we will let you know why within one month. Whether or not you can exercise your rights depends on the processing and the legal basis for the processing.
If you have a complaint about our processing of your personal data, you can always contact us at the following email address email hidden; JavaScript is required. If you are still not satisfied with our answer, you are free to file a complaint with the competent data protection authority. For more information, go to https://www.gegevensbeschermingsautoriteit.be/burger.