Data controller: Foundation 22, as the initiative determining the purposes and means of the website-related processing described here.
Privacy contact: privacy@foundation-22.org
This notice applies to foundation-22.org, direct enquiries, invitation and partnership discussions, event administration and related communications.
1. Personal data we may collect
- Identification and contact data, including name, title, organisation, postal address, email address and telephone number.
- Enquiry and relationship data, including invitation interests, table or sponsorship interests, partnership discussions, auction-lot information and correspondence.
- Event administration data, including attendance, guest preferences, dietary or accessibility requirements, accreditation and hospitality selections.
- Transaction and compliance data, including contracting details, invoices, payment status, due-diligence information and records required by law.
- Technical data, including IP address, device/browser information, security logs, requested pages and cookie preferences.
- Images, recordings or public professional information where relevant to an event, partnership or legitimate Foundation 22 communication.
2. Purposes and legal bases
| Purpose | Typical legal basis |
|---|---|
| Responding to enquiries and preparing invitations, participation, sponsorships or partnerships | Steps requested before a contract; performance of a contract; legitimate interests in developing and administering the initiative |
| Event, guest, hospitality and auction administration | Contract; legitimate interests; legal obligations; explicit consent where special-category information is voluntarily provided and required |
| News and relationship communications | Consent where required; otherwise legitimate interests for proportionate business-to-business follow-up, subject to the right to object |
| Website security, fraud prevention and service continuity | Legitimate interests and legal obligations |
| Optional analytics or marketing technologies | Prior consent |
| Accounting, tax, claims and regulatory records | Legal obligations and legitimate interests in establishing, exercising or defending legal claims |
3. Special-category information
Please do not provide medical or other sensitive information unless it is necessary—for example, a dietary, allergy, accessibility or emergency requirement connected with event attendance. Where such information is needed, it will be handled with restricted access and on an appropriate legal basis, including explicit consent where required.
4. Sources
Data is generally obtained directly from you, your organisation, an authorised host or introducer. Limited professional information may also come from public sources, event partners or service providers where lawful and relevant.
5. Recipients and processors
Data may be shared, on a need-to-know basis, with authorised Foundation 22 team members; the incorporated contracting entity identified in relevant documents; IT, hosting, email, CRM, payment and security providers; event venues, hospitality and logistics partners; professional advisers; auction or donation partners; and public authorities where required. Providers acting as processors are expected to follow documented instructions and appropriate data-protection terms.
6. International transfers
Some providers or recipients may be outside the European Economic Area. Where personal data is transferred internationally, Foundation 22 will use an applicable lawful transfer mechanism, such as an adequacy decision, Standard Contractual Clauses and supplementary safeguards where required.
7. Retention
Data is kept only as long as reasonably necessary for the relevant purpose. General enquiries are normally reviewed after 24 months of inactivity; event and relationship records after 36 months; consent records for the period needed to demonstrate the choice; unsuccessful proposals according to legitimate operational and claims needs; and accounting, contracting or compliance records for the statutory period that applies. Data may be retained longer where necessary for an active relationship, dispute, legal hold or legal obligation.
8. Your rights
Subject to applicable conditions, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent at any time without affecting prior lawful processing. You also have the right not to be subject to a solely automated decision producing legal or similarly significant effects; Foundation 22 does not currently use such decision-making through this website.
Send requests to privacy@foundation-22.org. We may ask for proportionate information to verify identity. You may also lodge a complaint with the Belgian Data Protection Authority or another competent supervisory authority.
9. Security and children
Reasonable technical and organisational safeguards are used to protect data, but no internet transmission is entirely risk-free. This website and its events are not directed at children. A parent or guardian should contact us before providing a child’s personal data.
10. Changes
This notice may be updated when the operating entity, services, providers or legal requirements change. Material changes will be identified through the updated date or an appropriate notice.
Version 1.0 · Last updated 18 July 2026