Privacy Policy

IAO is a non-profit association under Belgian law, located at Bollebergen 2B Bus 15, 9052 Ghent, and registered with the Crossroads Bank for Enterprises under number 0459.285.397. We act as the data controller within the meaning of the GDPR.

• Students;
• Prospective students (including detailed information on entry requirements, tuition fees, and attention to the student);
• Alumni;
• Lecturers;
• Other contacts (e.g. cookie data through cookies (see our cookie policy)).

We use your personal data for the following purposes:

• Execution of the educational agreement (legal basis: contract performance – art. 6.1.b GDPR);
• Billing and administration (legal basis: legal obligation – art. 6.1.c GDPR);
• Communication about your training (legal basis: contract performance – art. 6.1.b GDPR);
• Newsletter and marketing communications (legal basis: consent – art. 6.1.a GDPR);
• Compliance with legal obligations, such as accounting legislation (legal basis: legal obligation – art. 6.1.c GDPR);
• Legitimate interest, such as fraud prevention (legal basis: legitimate interest – art. 6.1.f GDPR).

We may share your personal data with third parties only to the extent necessary:

• Partner universities and academic institutions for degree validation and academic collaboration;
• Payment processors for billing purposes;
• IT service providers who manage and support our systems;
• Government authorities when required by law.

We do not sell your personal data to third parties. Where we share data with processors, we ensure appropriate data processing agreements are in place.

We retain your personal data no longer than necessary for the purposes for which they are processed:

• Student records: 10 years after the end of training;
• Newsletter subscribers: until you unsubscribe;
• Financial data: 7 years (statutory accounting obligation).

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or misuse:

• Secure server infrastructure;
• Access controls and authentication;
• Regular security assessments.

Under the GDPR, you have the following rights:

• Right of access;
• Right to rectification;
• Right to erasure ('right to be forgotten');
• Right to restriction of processing;
• Right to data portability;
• Right to object;
• Right to withdraw consent at any time (where processing is based on consent).

To exercise your rights, please contact us at: privacy@osteopathy.eu. You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit – www.gegevensbeschermingsautoriteit.be).

We only send you newsletters and marketing communications if you have explicitly given your consent. You can withdraw your consent and unsubscribe at any time by clicking the 'Do not show this' link in our emails or by contacting us directly.

We do not knowingly collect personal data from children under the age of 16 (EU: 13) without prior verifiable parental consent. If you believe we have inadvertently collected such data, please contact us immediately at privacy@osteopathy.eu.

We may update this privacy policy from time to time to reflect changes in legislation or our processing activities. We will notify you of any significant changes via our website or by email. We recommend you review this page regularly.

Do you have questions about this privacy policy or about the way we process your personal data? Please contact us:

IAO vzw
Bollebergen 2B Bus 15
9052 Ghent, Belgium
Email: privacy@osteopathy.eu
Tel: +32 9 233 04 03