Data Processing

General policy

This Privacy Policy applies to this website: www.brugesepass.com and to our mobile application.

The controller responsible for processing your personal data is: MCL23 BV, established under Belgian law, with registered office at 2650 Edegem, Monseigneur Cardijnlaan 23 and company number 1027.068.365 (“Bruges E-pass”).

Bruges E-pass processes all personal data in accordance with Regulation (EU) 2016/679 (GDPR).

Bruges E-pass is the controller of the personal data you provide via email, through the website, the mobile application, and/or when ordering our services.

Personal Data We Collect

Contact details: name, address, email, telephone number, mobile number, date of birth.
Electronic identification and usage data: IP address, browser type, location data, etc. (via cookies and the mobile app).
Payment and invoicing data: card details, bank account numbers, invoices.
Other data provided by you: e.g., via email when relevant to the service.

Purpose of Processing

Your personal data is processed solely for providing our services and for contacting you when needed. Your email may also be used for newsletters, from which you may unsubscribe at any time.

We require your data for:

Service provision (registration, identification, helpdesk support)
Professional communication (telephone, email, WhatsApp, etc.)
Marketing activities (newsletter, printed materials, invitations)
Invoicing and administration

Legal Basis

Personal data is processed based on your consent, the performance of a contract, pre-contractual steps, legal obligations, or legitimate interests (Art. 6(1)(a)-(f) GDPR). Consent can be withdrawn at any time.

Cookies and Social Media

For information about cookies, please refer to the Cookie Policy below.

Bruges E-pass manages social media pages (Facebook, Instagram, LinkedIn). These platforms are used for communication only. We are not responsible for how these platforms process your personal data.

Please consult each platform’s privacy and cookie policies.

Transfer of Personal Data

We do not share your personal data with third parties for commercial purposes unless required by law or with your explicit consent.

We collaborate with partners such as Stripe, Adyen, Google Adsense, Google Analytics, Meta Ads, WhatsApp, Microsoft Clarity. Data shared with them is strictly minimized and for service-related purposes only.

If data is transferred outside the EEA, appropriate safeguards (Standard Contractual Clauses, adequacy decisions) are applied.

When working with processors, we conclude data processing agreements ensuring correct handling.

Retention Period

Contact form submissions: 12 months
Payment data: 7 years
Other data: retained only as long as necessary for the purpose collected

Your Rights

As a data subject, you have the following rights:

Right of access
Right to rectification
Right to erasure
Right to data portability
Right to object
Right to restriction of processing

We may request verification of your identity before fulfilling your request.

Requests are generally free of charge unless unfounded or excessive. Responses will be provided within four weeks.

You may lodge a complaint with the Belgian Data Protection Authority.

Questions or Comments?

MCL23 BV
Monseigneur Cardijnlaan 23,
2650 Edegem, Belgium

You may also contact the Data Protection Authority: www.gegevensbeschermingsautoriteit.be

Cookie Policy

Last updated: 28 November 2025

General

This Cookie Policy explains how cookies and similar technologies are used when visiting our website or mobile application.

What Are Cookies?

Cookies are small data files stored on your device when visiting a website or using an app. They optimise and enhance your user experience.

Cookies may be:

First-party or third-party
Session (temporary) or persistent

Which Cookies Do We Use?

1. Critical Cookies

Session cookies enabling core functionality, account protection, and preventing misuse.

2. Consent Cookies

Persistent cookies remembering whether you have accepted or rejected cookies.

3. Functional Cookies

Persistent cookies remembering choices such as login details or communication preferences.

4. Tracking / Marketing Cookies

These include:

Social media plugins (Facebook, Instagram, Twitter)
Tracking cookies enabling personalised advertising
Beacons, tags, and scripts used for analytics and ad optimisation

Your device may be recognised when visiting other websites in the same advertising network.

Deleting Cookies

You may adjust your cookie settings in your browser or delete cookies by clearing your browsing history.

Disabling cookies may cause some website functions to operate less effectively.

Changes

This Cookie Policy may be updated at any time. Updates are published on our website and take effect upon posting.

If you have questions, contact us at [email protected].

Use of the Website and Mobile Application

Website: www.brugesepass.com

Owner: MCL23 BV, 2650 Edegem, Monseigneur Cardijnlaan 23, Belgium

Email: [email protected]

Intellectual Property Rights

All content (brands, logos, designs, images, texts, etc.) is protected by intellectual property rights belonging to Bruges E-pass or licensed third parties. Copying, distributing, publishing or commercial use without written consent is strictly prohibited.

Liability

Bruges E-pass strives for accurate information but cannot be held liable for inaccuracies, website malfunctions, or damages resulting from website use.

Access may be restricted in cases of force majeure.

Privacy & Cookie Policy Bruges E-pass
Version 1.0 – November 2025