Privacy

Privacy Policy – SOMA Foundation

Introduction
SOMA Foundation is committed to protecting the privacy and personal data of its users, partners, and collaborators. This privacy policy explains how we collect, use, store, and protect your personal information, in accordance with applicable laws, including the General Data Protection Regulation (GDPR).

1. Information We Collect
We may collect the following types of data:

• Personal information: first name, last name, email address, phone number, date of birth;
• Usage data: information about your interactions with our websites, applications, or services;
• Additional information: data you voluntarily choose to share (e.g., preferences, feedback, comments).

In certain cases, we may collect sensitive data, such as information relating to your children's health (e.g., allergies). Such data is treated with the utmost confidentiality, and we take special precautions to ensure its security and privacy.

2. Use of Data
We use your data to:

• Provide and personalize our services;
• Communicate with you (invitations, newsletters, notifications);
• Improve our activities and content based on your feedback;
• Comply with our legal and administrative obligations.

3. Data Sharing
Your data is never sold to third parties. However, it may be shared in the following cases:

• With service providers acting on our behalf (e.g., data hosting, email delivery tools);
• If required by law or as part of legal proceedings.

All our partners adhere to privacy and security standards.

4. Data Retention
Your personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.

5. Data Security
We implement technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure. These measures include:

• The use of encryption technologies;
• Regular audits of our security systems;
• Staff training and awareness on confidentiality practices.

In the event of a personal data breach likely to affect your rights and freedoms, we are committed to notifying you without undue delay, in accordance with the GDPR. Notification will be made by email, and we will also take the necessary steps to mitigate the consequences of the breach.

6. Data Breach Notification
In the event of a personal data breach likely to affect your rights and freedoms, we commit to notifying you as quickly as possible, in accordance with applicable regulations.

7. Your Rights
Under applicable regulations, you have the following rights:

• Access your personal data;
• Request the correction or deletion of your data;
• Restrict or object to the processing of your data;
• Withdraw your consent at any time;
• Lodge a complaint with a data protection authority (in Belgium: the APD/GBA).

To exercise your rights, please contact us at: hello@soma.brussels.

8. Cookies and Similar Technologies
We use cookies to enhance your experience on our website and to analyze our traffic. Upon your first visit, a cookie banner will appear to inform you about our use of cookies. You can choose to accept or decline certain cookies. You may manage your cookie preferences at any time via your browser settings or by adjusting your choices through the cookie banner.

9. Changes to the Privacy Policy
This privacy policy may be updated to reflect changes in our practices or to comply with legal requirements. We will inform you of any significant changes.

10. Contact
For any questions or requests regarding this privacy policy, or to exercise your rights, please contact us at:
Email address: hello@soma.brussels