PoliciesPrivacy Policy
Last updated: January 2025
How BeSOMS (Belgian Section of Obesity and Metabolic Surgery) processes personal data when you visit the site, register for events, or create an account.
Data controller
BeSOMS (RBSS Section), Avenue W. Churchill 11/30, 1180 Brussels, Belgium. besoms.info@gmail.com
What we collect
- Identity and contact data: name, email, phone, institution, discipline.
- Account data: login email, hashed password, membership status, role.
- Registration data: ticket choice, pricing, add-ons, invoices, payment status.
- Abstract submissions: titles, authors, and uploaded files where applicable.
- Technical data: IP address and anti-bot signals for security (Turnstile), device/browser info.
Why we use your data (legal bases)
- Provide and manage event registrations and member accounts (contract).
- Issue invoices and keep financial records (legal obligation/contract).
- Secure the site and prevent abuse (legitimate interest; strictly necessary cookies/Turnstile).
- Send essential service emails (confirmations, invoices, password reset) (contract/legitimate interest).
- Optional analytics or marketing only with your consent (none active today).
Sharing and processors
We use trusted processors to run the service:
- Supabase: authentication, database, storage, and email delivery.
- Cloudflare Turnstile: bot protection for forms.
- Hosting/CDN (e.g., Netlify/Cloudflare) to serve the site securely.
- Payment/billing partners as needed for invoices and accounting.
Data is stored in the EU where possible; some technical processing may occur outside the EU with safeguards in place via our providers.
Retention
- Account and registration data: kept while your account is active and for a reasonable period after, or as needed for accounting/legal obligations.
- Invoices and financial records: retained according to Belgian/EU accounting requirements.
- Security logs and anti-bot signals: kept short-term to protect the service.
- Cookies: see the cookie policy for lifetimes.
Your rights
Under the GDPR you can request access, correction, deletion, restriction, or portability of your personal data, and you may object to processing based on legitimate interests. You may withdraw consent at any time for optional cookies or future analytics/marketing.
To exercise your rights, contact us at besoms.info@gmail.com. You also have the right to lodge a complaint with the Belgian Data Protection Authority.