Privacy Notice


1. General Provisions

1.1. Introduction

This privacy notice ("Privacy Notice") applies to personal data we process about you as a natural person.

In the sections below you will find information about what happens to the personal data we collect, why we do it, how long we keep it, what your privacy rights are. and how you can exercise them.

International Post Corporation SCRL, with registered office at avenue du Bourget 44, 1130 Haren (Brussels), Belgium, VAT BE 0436.501.681 RPR/RPM Brussels ("IPC", "we", "us", or "our"), as data controller.

1.2. How to Contact Us

If you have any questions or concerns regarding this Privacy Notice, or if you wish to exercise any of the rights listed under section "Your rights" above, please send a written request to our address above or by e-mail to ’dpo@ipc.be’.

You must provide evidence of your identity in order to exercise any of the rights listed in the "Your rights" Section below.

Any communication from us in relation to your rights as detailed bellow will be provided free of charge. However, in case of requests that are manifestly unfounded or excessive, in particular because of their repetitive character, IPC may charge a reasonable fee considering the administrative costs of providing the information, or communication, or taking the action requested, or could refuse to act on the request.

You also have the right to lodge a complaint with the competent authority, in particular in the Member State of your habitual residence or place of work, of an alleged infringement of the GDPR.

1.3. Updates to this Privacy Notice

We regularly review our Privacy Notice and we will update it as necessary. The latest version is always available via our websites with the date of publication clearly denoted.


2. Processing of Personal Data

2.1. Personal Data We Collect, Lawfulness of processing, How we collect your personal data and The Purpose of Processing

2.1.1. Information collected

If you are a representative, employee or agent of IPC panel provider, Kantar, IPC collects your full name, knows and maintains your user-ID, furthermore IPC knows the name of your employer (that being Kantar).

2.1.2. Lawfulness of processing

The processing of your data is necessary for the performance of a contract between IPC and Kantar. (Article 6, 1, (b) of the GDPR)

2.1.3 How we collect your personal data

IPC registers the Kantar administrator and all subsequent registration is done by the Kantar administrator directly in our web-browser based service application.

2.1.4 Processing by or on behalf of IPC

IPC keeps the records of staff members registered by Kantar.

IPC will not disclose the panel provider details to any internal or external parties that is not engaged to manage the service or the technical infrastructure. IPC only uses such data for the maintenance of the contract and approach indirectly the panelists though the panel provider (Kantar).

2.1.5 Automated Decision Making

There is no automated decision making during the course of processing data of the panel provider.

2.1.6 Users of IPC's website

This website does not use any cookies and similar technologies that would make collection of further personal data by, or on behalf of IPC possible.

Please refer to our Cookie Notice.

2.2. Which 3rd Countries We Share Your Personal Data With

If IPC was to engage a service provider based outside of the European Economic Area for which country the EU does not have Adequacy Decision, IPC will sign the Standard Contractual Clauses adopted by the European Commission, and put in place measures to safeguard the person data being accessible by the service provider.

2.3. How We Protect Your Personal Data

IPC has a certified Information Security Management System (ISO27001) and within that framework designed controls are in place to protect data with measures proportionate to its sensitivity.

IPC also requires that any third party services providers and/or processors processing personal data on behalf of, or under the instructions of IPC takes − appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, accidental loss, misuse, unauthorized access, disclosure, alteration or destruction, and against any other unlawful form of processing of information as defined by applicable Data Protection Laws.

DISCLAIMER − "Absolut" security

Please note that information processing (in specific electronic transmission or storage of information) is never 100% secure. Therefore, despite the security measures that IPC and its (sub-)processors have put in place to protect personal data about you, we cannot prevent loss, misuse, or unauthorized alteration of data.

2.4. How Long We Keep Your Personal Data

Your details are kept as long as the Kantar administrator keeps your records.


Your Rights

You, as an individual whose personal data is processed as described in this Privacy Notice, have a number of rights which are summarized in broad terms as laid down in the following list. Please note that exercising these rights is subject to certain requirements and conditions as set forth by applicable laws. If you wish to access personal data about you or exercise any of the rights listed below, you should request so in writing through the contact details provided in section "1.2. How to Contact Us".

3.1. Right of access

You have the right to obtain from us confirmation as to whether or not we process your personal data, and where that is the case, you have the right to obtain a free copy of the processed data. We will also provide you information including the following details:

  • The purposes of processing
  • The categories of personal data that are processed
  • The persons or the categories of persons to whom your personal data have been or will be disclosed
  • For how long your personal data will be stored
  • The existence of your privacy rights, as explained further below
  • All available information we have about the origin of the data if they were not collected from you
  • The existence of automated decision making

We can request a reasonable fee to cover our administrative costs for every additional copy that you request.

3.2. Right to rectification

You have the right to obtain from us the rectification or completion of inaccurate or incomplete personal data concerning you.

3.3. Right to erasure(’right to be forgotten’)

You have the right to erasure of your personal data if one of the following grounds applies:

  • Your personal data are no longer necessary in relation to the purposes for which they were collected or processed
  • You withdraw your prior consent for the processing and there is no other legal basis that we can rely on for (further) processing
  • You have objected to the processing for direct communications
  • • You have objected to the processing which is based on our legitimate interest and there are no more serious, justified grounds for our (further) processing.

We are not obliged to comply with your request for erasure when the processing is necessary for the establishment, exercise or defence of legal claims.

3.4. Right to restriction of processing

You have the right to obtain restriction of the processing:

  • If you contest the accuracy of your personal data, we can restrict the contested processing for the period that we need to verify the accuracy of your personal data
  • If we no longer need your personal data, but you require them for the establishment, exercise or defence of legal claims
  • If you have objected to the processing based on our legitimate interests, we can restrict the objected processing for the period that we need to verify whether your legitimate grounds are valid.

3.5. Right to data portability

You have the right to seek the portability of your personal data processed by automated means, which you have communicated to us. This is only possible if the processing is based on your consent or contract performance. In all other cases you cannot exercise this right (for example when the processing of your data is performed on the basis of a legal obligation).

3.6. Right to object

You have the right to object to any processing based on our legitimate interest. However, we will continue the processing of your personal data if we can show that we have stronger legitimate grounds.

You have the right to object to any processing for direct marketing.

You have the right to withdraw your consent for the processing of personal data, to the extent that the processing of your personal data was initially based upon your consent.

3.7. Right to lodge (file) a complaint

You also have the right to lodge a complaint with the supervisory authority in the European member state of your habitual residence, place of work or of the alleged infringement of applicable data protection legislation:

In Belgium, the supervisory authority is:

Autorité de protection des données
Gegevensbeschermingsautoriteit
Rue de la presse 35, 1000 Brussels
contact@apd-gba.be
www.dataprotectionauthority.be