This statement explains how Pulse Foundation handles personal data on pulsefoundation.be
and its website review version, new.pulsefoundation.be. It covers browsing, enquiries,
newsletter registration and the optional services described below. Separate program websites,
recruitment services and event platforms can have their own notices. Check the notice on the
form or service you use for information about that activity.
Who is responsible?
Pulse Foundation, a foundation of public utility, is the controller for the website’s processing: Avenue Louise 251, 1050 Brussels, Belgium, enterprise number BE 0845.697.369. For privacy questions or requests, email [email protected].
What we use and why
Browsing and security
Cloudflare hosts and protects the website and serves its documents. Delivering a page involves technical information such as your IP address, requested URL, request time and browser information. We use this processing to provide a reliable site, detect abuse and investigate faults. The legal basis is our legitimate interest in operating and protecting the website, taking account of visitors’ rights.
Cloudflare Web Analytics provides aggregated traffic and performance statistics. It does not use analytics cookies, local storage or visitor fingerprinting. We do not use Google Analytics or advertising pixels on this site. See our cookie statement for the distinction between analytics and optional external content.
Contacting Pulse
If you send an enquiry, we process your name, email address, message, any subject you give and the language of the form. The involvement form also records whether you selected volunteering, mentoring, partnership or donating, so we can route your enquiry. Cloudflare Email Sending delivers contact-form messages to our Google Workspace mailbox. Your email becomes the reply address. Direct email enquiries also reach our mailbox.
We use this information to answer and follow up on your request. The legal basis is our legitimate interest in communicating with people who contact us, or steps at your request before entering a contract where that applies. Required fields let us answer your enquiry; the subject is optional. You can contact us by email instead. Please do not send passwords, identity documents or sensitive information that is not needed for your request.
Newsletter
If you subscribe, Mailchimp processes your email, the name fields you provide, your chosen language and subscription/confirmation status. Registration uses double opt-in: you confirm through an email before joining the mailing list. The legal basis is your consent. You can unsubscribe using the link in a newsletter or by contacting us. Withdrawal does not affect processing that was lawful before withdrawal. The website’s cookieless analytics statement does not describe technologies that an email provider may use inside newsletter campaigns.
Program forms and external content
Tally forms, YouTube videos and Google Maps load only when you choose to open them. Loading them sends technical information to that provider. A form also sends the information you choose to submit. For an enquiry through a Pulse program form, we use those details to assess and respond to your request, based on our legitimate interest in handling enquiries, or steps you request before a contract where applicable. Any separate marketing permission is optional. Consult the form’s notice for an application or a later program relationship.
You can use the rest of a page without opening its external content. External websites and ticket shops are separate services, not forms hosted by this website. Their own notices describe their processing. Links to social networks do not load a social tracking widget here.
First Lights and Lumi
Lumi is an optional AI information service. Sending a message passes its content and a conversation identifier through the website to the First Lights assistant service hosted on Vercel. That service uses AI processing to generate a response. It is not a private conversation with a person. Avoid sharing health details, passwords, national register numbers or confidential information about other people. Use the direct human contact route for information you do not want processed by an AI service.
This processing serves your request for information, based on our legitimate interest in providing the service you choose to use. Lumi’s replies are general information, not legal, accounting or medical advice. The website does not use the assistant to make decisions about you with legal or similarly significant effects. Contact Pulse for information about conversation access, retention and the assistant’s service providers before sharing details that require special protection.
Website review feedback
The feedback tool is available on the review website, not the public apex or www site. If you submit feedback, we receive the name/email you give, your comment and its page or selected element context. This is stored in Pulse’s Cloudflare feedback service and used by authorised reviewers and technical contributors to resolve the issue. The legal basis is our legitimate interest in reviewing and improving the site. Do not include private information in a screenshot or comment. The tool can remember your reviewer details in your browser; see the cookie statement.
Who receives data and where
Authorised Pulse team members and technical contributors can access data needed for their role. The relevant service providers are Cloudflare (hosting, protection, analytics, email delivery and feedback), Google Workspace (email), Mailchimp (newsletter), Tally (forms), and the providers of optional external content and the First Lights assistant described above. We may also disclose information where required by law or needed to establish, exercise or defend legal claims. We do not sell website visitor data.
These providers can process data outside Belgium or the European Economic Area, including in the United States. The website is not guaranteed to use EU-only infrastructure. International transfers must be covered by an applicable adequacy decision or appropriate safeguards, such as the European Commission’s standard contractual clauses. Contact us to request information about the safeguards applicable to your data.
Provider information: Cloudflare, Google, Mailchimp, Tally and Vercel.
How long data is kept
Retention depends on the purpose, not a single period for every service. Enquiries and related correspondence are kept while needed to answer and follow up, and where necessary for a legal obligation or claim. Newsletter data is used while your subscription is active; a limited record of withdrawal may remain to honour an unsubscribe request. Review feedback is kept while needed to resolve and document the reported issue. Technical and delivery logs follow the relevant service’s retention settings and may be needed to investigate an incident. Program or assistant records depend on the service and your request.
The contact website has no separate message database or retry queue. That does not mean a delivered email is deleted from the mailbox or from the provider’s delivery systems. Ask us for the retention details that apply to your enquiry or for deletion where you have that right.
Security and your rights
We use encrypted website connections, restricted administrative access and server-side credentials. No system can guarantee absolute security.
Under the GDPR, and subject to its conditions, you can request access, correction, deletion, restriction and portability of your personal data. You can object to processing based on legitimate interests, and to direct marketing at any time. You can withdraw consent where processing relies on it. Send a request to [email protected]. We may ask for information needed to verify your identity. We normally respond within one month; if the law permits an extension, we will explain it.
You can complain to the Belgian Data Protection Authority or the competent authority where you live or work. You do not have to contact us first.
We update this statement when the website’s processing changes. The date above identifies this version.