Privacy Policy

IAO is a non-profit association under Belgian law, located at Bollebergen 2B Bus 15, 9052 Ghent, and registered with the Crossroads Bank for Enterprises under number 0459.285.397. We act as the data controller within the meaning of the GDPR.

• Students;
• Prospective students (including information requesters and open day attendees);
• Teachers, assistants, employees;
• Visitors to our website;
• Individuals who share their data with us through other channels.

We only process personal data that are relevant for our purposes:

Identification and contact details

• Name, address, phone/mobile number, email address.

Electronic identification

• IP address, information collected through cookies (see our cookie policy).

Financial data

• Bank account number;
• Payment history.

Personal characteristics

• Gender, date of birth, nationality.

Education and occupation

• Professional data, degrees.

Other

• Any other information you voluntarily provide to us.

We clearly indicate when data is mandatory or optional.

We process your data for the following purposes:

• Execution of a contract (e.g. course registration, access to the learning platform);
• Management and optimization of our website and services;
• Marketing purposes (e.g. newsletters, subject to your consent);
• Our legitimate interests (e.g. responding to inquiries, promotion).

The legal basis depends on the purpose:

Contract: for education and access to the eCampus (HUB);

Consent: for electronic newsletters (opt-in, can be withdrawn at any time);

Legitimate interest: for general communication, promotion, and client management.

Your data may be shared with:

• IT, marketing, and accounting service providers (processors);
• Professional advisors (e.g. lawyers, accountants);
• Buckinghamshire New University (for master’s degree programs);
• Government authorities if legally required.

For transfers outside the EEA, we provide appropriate safeguards (such as EU standard contractual clauses).

Your data will never be sold or rented to third parties for marketing purposes without your explicit consent.

We do not retain your personal data longer than necessary:

• Accounting records: 10 years (invoices: 7 years);
• Data related to education: up to 10 years after the relationship ends;
• Website visitor data: see cookie policy.

In exceptional cases, data may be retained longer if legally required or for legal purposes.

We take appropriate technical and organizational measures, including:

• SSL encryption for the HUB platform and our website;
• Secure servers;
• Data processing agreements with service providers;
• Confidentiality obligations for staff and instructors.

Under the GDPR, you have the following rights:

• Right of access;
• Right to rectification;
• Right to erasure;
• Right to restriction of processing;
• Right to data portability;
• Right to object to processing and direct marketing.

You can exercise your rights by contacting us at info@osteopathy.eu. We may request proof of identity. Exercising your rights is generally free of charge, except in cases of excessive or repetitive requests.

You may subscribe to our newsletter. Each marketing email includes an opt-out link. You can also unsubscribe by contacting info@osteopathy.eu.

In the context of practical training, we manage patient data electronically via CROSSUITE. This data is only accessible to relevant students and clinical supervisors. Data is only shared with third parties upon explicit patient consent.

This policy may be updated. The most recent version is always available on our website. The date at the top will be updated when changes are made.

For questions, you can contact us at info@osteopathy.eu.

If you wish to file a complaint, please contact:

Data Protection Authority Drukpersstraat 35, 1000 Brussels contact@apd-gba.be www.gegevensbeschermingsautoriteit.be