École du Bonheur (ASBL Dames de Marie Vergote) is committed to protecting the personal data of students, parents and visitors to its website. This policy describes what data we collect, why we collect it, how long we keep it and what your rights are in accordance with the General Data Protection Regulation (GDPR) and the Belgian law of 30 July 2018.

Data Controller

ASBL Dames de Marie Vergote
École du Bonheur
38-40A, Rue Vergote, 1200 Bruxelles
Phone : 02.733.60.42
Email : directions@ecoledubonheur.eu

Data Protection Officer (DPO)

  • Last name : Hafida Otman
  • Company : Basic+
  • Phone : 04/297-32-66

Data Collected

We collect the following categories of data, depending on the service used:

  • Contact form: name, email address, phone, message. No data is stored on our server for the contact form — messages are transmitted by email only.
  • School enrolment: child’s data (last name, first name, date of birth, level) and parents/guardians (name, email, phone, address).
  • Online shop (Fancy Fair): payment data is processed directly by Stripe; we do not store card numbers.
  • Photos: pictures of students only with signed parental consent.

Legal Basis

Data processing is based on:

  • Public interest mission (educational mission — art. 6(1)(e) GDPR) for school and administrative data.
  • Consent (art. 6(1)(a) GDPR) for publication of children’s photos and sending optional communications (newsletter).
  • Performance of a contract (art. 6(1)(b) GDPR) for payments and enrolments.

Data Retention

  • School records: kept for the legal duration imposed by the Fédération Wallonie-Bruxelles.
  • Contact form messages: kept for a maximum of 1 year in the school management’s inbox, then deleted.
  • Photos with consent: kept until consent is withdrawn by the parent or adult child.
  • Payment data: managed by Stripe according to their retention policy.

Data Processors

We use the following processors, who process your data on our behalf in compliance with the GDPR:

  • Hostinger — website hosting, data kept within the European Union (GDPR-compliant).
  • Stripe — online payment processing (PCI-DSS certified, GDPR-compliant).
  • Brevo — sending transactional emails (GDPR-compliant, EU-based servers).

Cookies

Our site currently does not use any tracking or advertising cookies. Only strictly necessary technical cookies for the site to function (session, language preference) may be placed. A consent banner will be added later if non-essential cookies are introduced.

Your Rights

In accordance with articles 15 to 22 of the GDPR, you have the following rights:

  • Right of access — obtain confirmation that your data is being processed and receive a copy (art. 15).
  • Right to rectification — have inaccurate or incomplete data corrected (art. 16).
  • Right to erasure — request deletion of your data under certain conditions (art. 17).
  • Right to restriction — restrict the processing of your data (art. 18).
  • Right to data portability — receive your data in a structured, machine-readable format (art. 20).
  • Right to object — object to processing based on legitimate interest or public interest mission (art. 21).
  • Right to withdraw consent at any time, without affecting the lawfulness of prior processing.

How to Exercise Your Rights

To exercise any of your rights, contact the school management by email at directions@ecoledubonheur.eu or our Data Protection Officer (DPO). A response will be provided within a maximum of one month, in accordance with article 12 of the GDPR. We may ask for identification to verify your identity before processing the request.

Supervisory Authority

If you believe that the processing of your personal data does not comply with the GDPR, you have the right to lodge a complaint with the Belgian supervisory authority:

Data Protection Authority (DPA / APD)
Rue de la Presse 35, 1000 Brussels
Phone: +32 (0)2 274 48 00
Email: contact@apd-gba.be
Website: www.autoriteprotectiondonnees.be

Last updated : 16/04/2026