Privacy Policy
Last updated: 05/11/2026
This policy explains how your personal data is processed when you visit the website https://stoppfas.eu, take part in the STOPPFAS campaign or contact its organisers.
1. Who is responsible for your data?
The data controller is:
- Name: The Bridge
- Address: Quai de Meuse 15, Namur 5100, Belgium
- Company number, if applicable: BE0804897981
- Contact for personal data matters: asbl.thebridge@gmail.com
2. What data do we collect?
Depending on how you use the website, we may process:
- your identification and contact details: first name, surname, email address, municipality, postcode, country, age, gender;
- information relating to your participation: signature, date, choices expressed, comments, registration for an event;
- your exchanges with the organisers;
- your consent choices and the information needed to keep proof of them;
- technical data needed for the operation and security of the website: approximate location, connection logs, connection path, connection duration.
This data is collected directly from you, except for technical data, which is collected automatically while you browse.
Mandatory fields are marked on the forms. Without this information, we cannot record your participation or respond to your request. All other fields are optional.
3. Why do we use your data?
We use your data solely for the following purposes, on the legal bases indicated:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Recording and managing your participation in the action | Your consent | Until 2037 |
| Publishing your name or testimonial, if you choose this option | Your separate consent | Until you withdraw your consent or until 2037 |
| Sending you news about the action | Your separate consent | Until you unsubscribe or until 2037 |
| Responding to your messages | Our legitimate interest in handling requests received | 2 years after the last exchange |
| Ensuring the operation and security of the website | Our legitimate interest in protecting the website and preventing abuse | 2 years after the last exchange |
When data is no longer needed, it is deleted or irreversibly anonymised.
Limited retention may be necessary to comply with a legal obligation or to defend a legal claim. It covers only the data required, for the duration of the obligation or proceedings concerned, on the basis of the applicable legal obligation or our legitimate interest in defending our rights.
4. Data that may reveal political opinions
Depending on its subject matter, your participation may reveal a political opinion, which is a special category of data under the GDPR.
We process this data on the basis of your explicit consent, in accordance with Article 9(2)(a) of the GDPR, in addition to the legal basis provided for in Article 6.
This consent is obtained through a specific affirmative action. You may withdraw it at any time by writing to asbl.thebridge@gmail.com. Withdrawal does not affect the lawfulness of processing carried out before it.
5. Who can access your data?
Only authorised people within The Bridge have access to the data they need for their duties.
The European Environmental Bureau (EEB) will also have access to the data.
We use the following service providers, to the extent necessary for the operation of the action:
- Hosting: GitHub, Cloudflare.
- Forms and participation management: Action Network (Action Squared, Inc.), United States.
- Email: Google, United States.
Where they act as processors, these providers process data on our instructions and under a contract that complies with the GDPR.
Delivery of the action: only anonymous statistics are sent to the recipients of the action.
Publication: we only publish the testimonials of people who have chosen this option, on our campaign channels, with the identifying details they have agreed to, until they withdraw their consent or the period stated in section 3 ends. No other personal data is published. If you agree to publication online, the data concerned may be viewed and copied by third parties.
We do not sell your data. Any other disclosure must have an appropriate legal basis, in particular where a competent authority legally requires certain information.
6. Is your data transferred outside the EEA?
Some providers process data in the United States, in particular Action Network and Google. These transfers are based on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework for certified providers and, where necessary, on the European Commission’s standard contractual clauses. You can obtain information about these safeguards and a copy of them by contacting us at asbl.thebridge@gmail.com.
7. What are your rights?
Under the conditions set out in the GDPR, you may request access to your data, its rectification or erasure, restriction of processing and, where the conditions are met, data portability.
You may object to processing based on our legitimate interest, on grounds relating to your particular situation. You may object at any time to the use of your data for direct marketing purposes.
Where processing is based on your consent, you may withdraw it at any time. For news emails, you can also use the unsubscribe link included in each message.
To exercise your rights, write to asbl.thebridge@gmail.com stating your request. If there is reasonable doubt about your identity, we may ask for the additional information strictly necessary to verify it.
We respond within one month of receiving your request. If the complexity or number of requests so requires, this period may be extended by two months; we will inform you within the first month and explain why.
You may lodge a complaint with the Belgian Data Protection Authority, or with the competent supervisory authority, in particular in the country where you habitually reside, where you work or where the alleged infringement took place.
8. Cookies and similar technologies
The website uses cookies to measure data about user journeys: length of visit, source of visit, approximate location of the user, path taken, technical information (browsers, screen size, etc.).
Cookies and trackers that require your consent are only activated once you have agreed. You can refuse them via the “Customize” button in the cookie banner, and change your choice at any time: Manage my cookie preferences .
9. Security and automated decisions
We implement technical and organisational measures appropriate to the risks in order to protect your data against unauthorised access, loss, alteration and disclosure.
No decision producing legal effects or similarly significantly affecting you is taken solely by automated processing.
10. Changes to this policy
This policy may be updated to reflect changes to the action, the website or the processing. The applicable version is published on this page with its date of update.
If we plan a new use of your data, we will inform you beforehand and obtain new consent where necessary.