Privacy Policy

Last updated: 10/09/2026

1. Purpose of this policy

Préhistomuseum ASBL attaches particular importance to the protection of personal data.

This policy explains how we collect and process the personal data of visitors and users of the website www.prehisto.museum (hereinafter the “Website”), as well as persons who contact us, subscribe to our communications or use the services offered on the Website.

Processing is carried out in accordance with:

Regulation (EU) 2016/679 of 27 April 2016, known as the “General Data Protection Regulation” or “GDPR”;
the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data;
and other applicable Belgian and European provisions.

2. Data controller

The controller responsible for the processing activities described in this policy is:

Préhistomuseum ASBL

Registered office: Rue de la grotte 128, 4400 Flémalle, Belgium
Company number (BCE/KBO): BE 0452.017.921
VAT number: BE 0452.017.921
Telephone: +32 4 275 49 75
Email: info@prehisto.museum

For any questions regarding the processing of your data or to exercise your rights, you may use this email address or write to us at the postal address indicated above.

3. Data processed, purposes and legal bases

Depending on your use of the Website, we may process the following categories of data:

Processing: Requests submitted via a form or by email
Data that may be processed: Surname, first name, position, organisation, email address, telephone number, content of the message
Purpose: To respond to and follow up on the request
Legal basis: Legitimate interest in responding to requests or pre-contractual measures taken at the request of the individual

Processing: Newsletter subscription
Data that may be processed: Surname, first name, email address, organisation, language or thematic preferences
Purpose: To send the communications to which the individual has subscribed
Legal basis: Consent

Processing: Professional communications sent to members and partners
Data that may be processed: Identity, position, organisation, professional contact details
Purpose: To provide information about activities, services, events and news related to the professional relationship
Legal basis: Performance of the contractual relationship or the legitimate interests of the Préhistomuseum

Processing: Technical data and connection logs
Data that may be processed: IP address, date and time of connection, pages visited, browser or device type, technical logs
Purpose: To ensure the operation, security and maintenance of the Website
Legal basis: Legitimate interest relating to the operation and security of the Website

Processing: Personalisation cookies and audience measurement
Data that may be processed: Selected visitor profile, activities added to favourites, online identifiers, IP address and browsing data
Purpose: To personalise the browsing experience, remember certain preferences and measure the use of the Website in order to improve its content, operation and usability
Legal basis: Consent where legally required

Processing: Compliance with legal obligations and management of disputes
Data that may be processed: Data necessary for the relevant case
Purpose: To comply with our obligations, establish evidence and defend our rights
Legal basis: Legal obligation or legitimate interest

We only collect data that is adequate, relevant and necessary for the purposes pursued.

Where a form contains mandatory fields, these must be clearly identified. If you do not provide this information, we may be unable to process the relevant request, registration or service.

4. Source of the data

Data is primarily collected:

• directly from you when you use a form, contact us, create an account or register for an activity or communication;
• automatically when you browse the Website, in particular through technical logs and, subject to your choices, cookies or similar technologies;
• where applicable, from your employer, organisation or a partner, where such disclosure is necessary for the management of a membership, registration or activity.

Where data is not collected directly from you, the information required by the GDPR will be provided to you within the applicable time limits, unless a legal exception applies.

5. Recipients and processors

Within the scope of their respective responsibilities, data may be accessible to:

• authorised members of Préhistomuseum staff;
• service providers responsible for hosting, maintaining, securing or developing the Website;
• professional advisers, insurers, public authorities or courts where required by law or where necessary to defend our rights.

These recipients only receive the data necessary to perform their duties. Service providers that process data on our behalf are contractually required to protect it and use it only in accordance with our instructions.

We do not sell personal data.

6. Transfers outside the European Economic Area

Certain technical service providers may process data outside the European Economic Area.

Where such a transfer takes place, we ensure that it is based on a mechanism recognised under the GDPR, including:

• an adequacy decision by the European Commission;
• the standard contractual clauses adopted by the European Commission, supplemented, where necessary, by additional safeguards;
• or any other legally recognised mechanism.

Further information about the applicable safeguards may be requested using the contact details provided in Article 2.

7. Retention periods

Data is not retained for longer than necessary:

Data: Contact requests
Retention period or criterion: For the time necessary to process the request

Data: Technical and security logs
Retention period or criterion: Maximum of 3 months

Data: Cookies and associated data
Retention period or criterion: According to the periods specified in the Cookie Policy

Certain data may be retained for longer where required by law or where necessary for the establishment, exercise or defence of legal claims.

8. Cookies and similar technologies

The Website uses cookies and similar technologies that are necessary for its operation, as well as cookies that allow certain choices to be remembered and your browsing experience to be personalised.

In particular, the Website uses:

• a cookie that remembers the visitor profile you have selected and allows the information presented to you to be personalised;
• a cookie that remembers the activities you have added to your favourites;
• subject to your consent, Google Analytics to measure traffic to and use of the Website and to improve its content, operation and usability.

Cookies that are not strictly necessary are only placed or read after your consent has been obtained, where such consent is legally required.

You can accept, refuse or change your preferences in accordance with the options provided on the Website.

9. Security

The Préhistomuseum implements appropriate technical and organisational measures to protect data against destruction, loss, alteration, unauthorised disclosure or unauthorised access.

Access to data is limited to persons who require it in the course of their duties. However, no IT system or method of transmission can guarantee absolute security.

10. Your rights

Subject to the conditions and limitations provided for by the GDPR, you have:

• the right to access your data;
• the right to rectify inaccurate or incomplete data;
• the right to erasure;
• the right to restriction of processing;
• the right to object, in particular to processing based on legitimate interests and to direct marketing;
• the right to data portability where processing is based on your consent or on a contract and is carried out by automated means;
• the right to withdraw your consent at any time;
• the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you.

These rights are not absolute. Their exercise may be restricted where processing is necessary to comply with a legal obligation, perform a contract or establish, exercise or defend legal claims.

You can exercise your rights by writing to:

info@prehisto.museum

or to:

Préhistomuseum
Rue de la grotte 128
4400 Flémalle
Belgium

We may request additional information where necessary to confirm your identity. A response will be provided within the time limit laid down by the GDPR, in principle within one month of receiving your request. The Belgian Data Protection Authority provides further information about these rights and the applicable time limits on its official website.

11. Complaint to the supervisory authority

If you believe that your data is being processed in breach of applicable regulations, you have the right to submit a request for mediation or lodge a complaint with:

Belgian Data Protection Authority
Rue de la Presse 35
1000 Brussels
Belgium
www.dataprotectionauthority.be

Nevertheless, we invite you to contact us beforehand so that we can examine your request.

12. Automated decision-making

Unless otherwise stated at the time of collection, the Préhistomuseum does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect the individuals concerned.

13. Changes to this policy

This policy may be amended to reflect legal, technical or organisational developments.

The applicable version is the version published on the Website. In the event of a significant change, the individuals concerned will be informed by appropriate means.