Privacy Statement

KBRSF – FRBSE - RBEF

Updated: 01.01.2025


  1. Why a Privacy Statement? 

The RBEF is committed to protecting your privacy and your personal data. 


We collect and process your personal data in accordance with the legal provisions on the subject, namely the Belgian law of30 July 2018 on the protection of natural persons with regard to the processing of personal data and the European General Data Regulation of 27 April 2016 (GDPR).


This Statement aims to inform you of all the details about the processing of your personal data and your rights.


We reserve the right to amend this Privacy Statement at any time. Important changes will always be clearly communicated to you or on our website. 


  1. Who processes your personal data?

The RBEF is the Controller of your personal data.


Contact details:

Royal Belgian Equestrian Federation asbl (RBEF)

Belgicastraat 9, 21930 Zaventem

BE0409.553.992

E-mail: info@equibel.be

Telephone: +32 2 478 50 56


The RBEF may also use or give further instructions to third-party Processors. A Processor may, at the request or instruction of or on behalf of the RBEF, further process your personal data whereby the RBEF will ensure that this Processor also undertakes to the same protection and confidentiality obligations regarding the processing of your personal data asset out in this Privacy Statement.


Specifically as regards the Equibel platform (FIPA) (https://competitions.equibel.be/), the RBEF relies on the following Processor:


Fipatech OÜ

Registered office: Fortuuna 35-21 Tartu 50603, Estonia

E-mail: martin.kiilo@fipatech.com


This Processor who is responsible for the design and management of the Equibel platform may in turn call upon various sub-processors who may only be used with the prior consent of the RBEF and whereby these sub-processors must guarantee an adequate level of protection of personal data in accordance with the GDPR. An overview of these sub-processors can be found as an annex to this Privacy Statement.


  1. What personal data do we collect?

The processing of your personal data is limited to what is strictly necessary to fulfil the purposes of the RBEF and concerns the following categories:


Persons:

  • Name, First name
  • Address
  • Date of birth
  • Gender
  • Language
  • Nationality
  • GSM/ Telephone/ Fax
  • E-Mail

Horses:

  • Chip
  • Name
  • Commercial name
  • Date of birth
  • Studbook number
  • Pedigree
  • UELN
  • FEI passport
  • Provincial group
  • Name and first name of the breeder

Billing details:

  • Name, Nationality and National Insurance Number (as a natural person)
  • Name, legal form and VAT number (as legal person)
  • Bank details
  • Address
  • Etc

Other:

  • In addition, data is collected and processed on licences (licence type, payment date), club membership (including date of joining or leaving the club), imposed suspensions and penalties (red cards, yellow cards, event suspensions, start date, end date, reason and comments), exams taken, professional qualifications, diplomas and certifications obtained, assigned roles, titles and functions in equestrian organisations and equestrian competitions, licenses and insurances. In cases determined by the RBEF, these data may be made public.
  • For athletes, horses and their competition horses (the horses with which competition was done), sport results are recorded and made public, including data on cash prizes, ranks in competitions, classification points, qualifications and handicapping points achieved. Results may also include data on withdrawals, non-participation or change of competition. All competition results (including detailed results or results such as eliminated, withdrawn, disqualified, invalidated, etc.) will be documented and published through Equibel. All suspensions and other penalties (yellow cards, red cards) will also be documented and stored in the system. As far as required by RBEF regulations, suspensions and penalties will be made public and/or announced to organisers and officials at equestrian events.
  • Username and password are collected for all users of the Equibel system for authentication and authorisation purposes.
  • IP addresses can be used to locate the problem or fault.
  • Name, legal form and VAT number (in the case of a legal entity).
  • In case the Help Desk services or feedback services are used, we collect, store and use personal data in order to use logs to discover the problem or defect and to communicate to solve the problem or answer the question.

  1. What purposes do we want to achieve?

The RBEF collects your personal data only to contribute to:

  • promoting and developing national and international activities of the different disciplines of equestrian sport in Belgium;
  • promoting the participation of Belgian athletes in national and international competitions;
  • promoting the organisation in Belgium of international-level competitions.

The processing of your personal data is therefore essential for the proper functioning of the RBEF. The RBEF undertakes to process your personal data only for this purpose.


When you visit our site, certain data is collected for statistical purposes. This data allows us to further improve your user experience on our site. This data includes your IP address, geographical area, the day and time of your visit and the pages visited. By visiting our site, you expressly accept that we collect this anonymised data for statistical and benchmarking purposes.


  1. On what legal basis are personal data processed?

The RBEF processes your personal data on the following legal grounds:

  • For the sake of the execution of your (membership) agreement with us and/or the leagues which may require you to be issued with a license as a rider or immatriculation of a horse;
  • Because of the contractual relationship you desire as a participant in a national or international equestrian event and the fact that paid services are associated with it.
  • Because of a possible legitimate interest on behalf of the RBEF to assist and inform you about the ins and outs of equestrian sports both internationally and regionally in Belgium.
  • For specific processing purposes requiring the transmission of your personal data to third parties or where we cannot invoke any of the legal grounds mentioned above, your informed consent will be requested in each case.

  1. Transfer of your data 

Your personal data is for internal use only unless explicitly stated otherwise and subject to your prior consent.

Therefore, except with your prior consent, your personal data will not be sold, transferred or transmitted to third parties, with the exception of the Ligue Equestre Wallonie Bruxelles asbl (www.lewb.be), the Paardensport Vlaanderen vzw (www.paardensport.vlaanderen) the regional and provincial groupings and the FEI Fédération Equestre Internationale (www.fei.org) or the competition organisers for which you may register through us. For more information on the processing of personal data by these leagues or competition organisers, please refer to the Privacy Statements of each of these leagues or competition organisers who are also responsible for the processing of your personal data.

The RBEF does not transfer your personal data to countries outside the European Union that do not guarantee an adequate level of protection within the meaning of the GDPR.

You can exercise control over the data you disclose. If the personal data relating to you is incomplete or incorrect, the RBEF reserves the right to interrupt or suspend, temporarily or permanently, certain operations.


  1. How long will personal data be kept by us?

THE RBEF stores your personal data:

(i)as long as this is necessary or relevant for the purposes set (e.g. as long as you remain an active member of our federation, a league, or participate in competitions and games through us);

(ii)for such length of time as we might be required by law (e.g. personal data necessary to fulfil our accounting obligations will be kept by us for at least 5 years);

(iii)until any legal dispute or investigation may arise (e.g. concerning the statutory limitation periods for legal claims)



  1. Cookies

When you visit our site, cookies may be stored on your computer's hard drive. We use cookies to offer our regular visitors the best possible user experience.

Please refer to our Cookies Policy for more information on the use of cookies.

If you visit our website, we recommend that you activate your cookies. If you wish, you can always disable them again via your browser settings. Please refer to our Cookies Policy for more details.


  1. What are your rights?

9.1Guarantee of fair and lawful processing

Your personal data will always be processed in accordance with the legal purposes described in section 4. They will be collected and processed in an adequate, relevant and not excessive manner and will not be kept longer than necessary to fulfil the intended purposes.

All technical and security measures have been taken to minimise the risks of unlawful or unauthorised access to or handling of your personal data. In the event of an intrusion into its computer systems or a possible data breach, the RBEF will immediately take all required measures to minimise damage and inform you accordingly.


9.2 Right of inspection

You have the right to obtain clarification as to whether or not your personal data are processed. For example, you have the right to know the processing purposes, the categories of personal data concerned, the categories of recipients to whom the personal data have been disclosed, the criteria used to determine the storage period of your data and the rights you can exercise in relation to your personal data.


9.3. Right of rectification

Incorrect or incomplete personal data can be corrected. In the first place, it is the user himself who makes the required changes in his 'user account', but you can also submit a written request to change something.


9.4. Right of data erasure (or 'right to oblivion')

In addition, you have the right to request that your personal data be deleted in the following cases:

  • Your personal data is no longer needed for the purposes for which it was collected;
  • You withdraw the consent on which the processing is based and there is no other legal basis for the processing;
  • You have legitimately exercised your right to object;
  • Your personal data has been unlawfully processed;
  • Your data must be deleted to comply with a legal obligation.

9.5. Right to restriction of processing

In certain cases, you have the right to obtain the restriction of the processing of your personal data such as in case of contestation of the correctness of the data, when the data have been unlawfully processed, the data are necessary in legal proceedings or for the required time to the RBEF to verify that your right of erasure was validly exercised.


9.6. Right of objection

You also have the right to object to the processing of your personal data at any time. The RBEF will stop processing your data unless it can provide compelling legitimate grounds for the processing which outweigh your interests.


9.7. Right to data portability

You have the right to obtain any personal data you have provided in a structured, common and readable form. At your request, this data may be transferred to another controller, unless this is technically impossible.


9.8. Right to withdraw your consent

You may withdraw your consent to the processing of your personal data at any time. The withdrawal of your consent does not affect the validity of previous processing operations.


  1. How can you exercise your rights?

To exercise your rights, send a registered request by post to the RBEF or email to info@equibel.be . We will reply as soon as possible, but no later than one (1) month after receiving your request.


  1. How can you file a complaint?

If you are not satisfied with the processing of your personal data by the RBEF we kindly ask you to first contact us yourself using the contact details under point 10 so that we can first offer you a solution ourselves. If you then still have complaints, you also always have the right to lodge a complaint with the Data Protection Authority), (https://www.gegevensbeschermingsautoriteit.be/)


Annex

List of approved sub-processors

Company name Contact details Contact details of DPO (if applicable) Nature of sub-processing (description of services) Other relevant information
Heroku Salesforce Inc Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA

Lindsey Finch, DPO, privacy@salesforce.com

Data Processing Addendum (rev. January 2023): link

A hosting platform with integrated data services for deploying and running apps. Heroku regularly performs audits and maintains PCI, HIPAA, ISO, and SOC compliance. When hosting data in Heroku, the region of where the data actually is, is specified as the EU.
New Relic New Relic Inc, San Francisco HQ. 188 Spear St., Suite 1000. San Francisco, CA 94105, USA Data processing policies: link New Relic provides real-time analytics and visibility. It provides detailed performance metrics, allows managing and optimizing mobile applications. Data hosted in the EU.
Sentry Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA

compliance@sentry.io

Data Processing Addendum: link

Error monitoring, code diagnosing, optimization of performance

Data hosted by Google Cloud Platform, USA

Data Processing Addendum automatically incorporates the SCCs.

Coralogix Coralogix Ltd., 156 Menachem Begin Rd. Tel Aviv, Israel

Security and Compliance: link

Data Processing Addendum: link

Log data collection, management, log clustering, anomaly detection and alerting.

Coralogix uses AWS for cloud hosting of data sent by customers. Selected location – Ireland (EU).

BI backend datastore hosted by AWS in EU.

Google Analytics Alphabet Inc, 1600 Amphitheater Parkway Mountain View, CA 94043, USA Data privacy and security: link Helps understand the users’ behaviour and uncover insights on how the services are performing. No personal data processed or stored. Google Analytics operates data centers globally, including in the United States. Before data is transferred to any servers in the United States, it is collected in local servers, where users' IP addresses are anonymized (when the feature is enabled by customers). Pseudonymisation applied. Data sent via reverse proxy.
SendGrid Twilio Inc, 375 Beale Street, Suite 300 San Francisco, CA 94105, USA

privacy@twilio.com

Data Processing Addendum: link

Email delivery. Cloud-based solution sends transactional e-mails supporting Platform operations. The EU Standard Contractual Clauses will apply to personal data that is transferred via the Services from the EEA either directly or via onward transfer, to any country or recipient outside the EEA that is not (a) recognized by the relevant competent authority as providing an adequate level of protection for personal data and (b) covered by the Twilio BCRs.
Holistics Holistics Software Ltd, Pte 14 Robinson Road, Far East Finance Building, #08-01A, Singapore 048545

Security and compliance: link

Data Processing Agreement: link

BI and data analytics solution. Will be used for reporting, statistics and dashboards. Data is hosted in Frankfurt, Germany
Help Scout

Help Scout

177 Huntington Ave, Ste 1703

PMB 78505

Boston, MA 02115-3153

Terms of service and privacy policy:

link

Help Desk service. Will be used as customer help desk service provider, main channels: e-mail, chat and knowledge base.

Data is hosted in Amazon Web Services (USA)

Data Processing Amendment automatically incorporates the EU GDPR .

Amazon Web Services Amazon Web Services, Inc. 410 Terry Avenue North, Seattle, WA 98109-5210, U.S.A. AWS Data Processing Addendum: link Storage of file uploaded to the system. Data hosted in Europe.
DigitalOcean DigitalOcean, New York, 101 6th Ave, United States Data Processing Agreement: link Storage of Equidata system archives Data hosted in Europe.
Stripe

Stripe Technology Europe, Limited

The One Building, 1, Lower Grand Canal Street, Dublin 2, Ireland


Privacy Policy: link


Payments processing and transactions
PDF Monkey

PDFMonkey

51 rue de Ponthieu

Lot 41

75008 Paris

tinymonkey@pdfmonkey.io

Privacy Policy: link Generation of pdf documents for LEWB licences Service from 2025
Passmeister

Christian Gierke

HH-X GmbH Heußweg 39

20255 Hamburg

Germany

info@hh-x.de

Privacy Policy: link Google Wallet and Apple Wallet passes for LEWB licences Service from 2025
Did this answer your question? Thanks for the feedback There was a problem submitting your feedback. Please try again later.