Privacy Policy

Who We Are

This website is operated by EPICENTER, located at The Library Ambiorix Square Ambiorix 10, 1000, Brussels. For the purposes of the GDPR, we are the data controller responsible for your personal data. If you have any questions about this Privacy Policy or how we handle your personal data, you can contact us at:

Email: info@epicenternetwork.eu
Address: The Library Ambiorix Square Ambiorix 10, 1000, Brussels

What Data We Collect

We collect the following categories of personal data when you visit our website:

• Technical data — including your IP address, browser type and version, operating system, referring URLs, pages visited, and time and date of your visit. This data is collected automatically by our hosting infrastructure and security services.
• Usage data — including information about how you navigate and interact with our website, such as pages viewed and time spent on each page. This data is collected only if you consent to Analytics cookies.
• Cookie data — including your cookie consent preferences and session identifiers. Please refer to our Cookie Policy for full details of the cookies we use.
• Contact data — including your name, email address, and any other information you voluntarily provide when you contact us through any contact form or email address listed on this website.

How We Use Your Data

We use your personal data for the following purposes:

• To operate and secure the website — We process technical data and IP addresses to protect the website from malicious traffic, prevent fraud, and ensure its availability and integrity. The legal basis for this processing is our legitimate interest (Article 6(1)(f) GDPR).
• To analyse website performance — With your consent, we use Google Analytics 4 to understand how visitors use our website and to improve its content and performance. The legal basis for this processing is your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time via the cookie settings in the footer of this website.
• To respond to enquiries — If you contact us, we process your contact data to respond to your message. The legal basis for this processing is our legitimate interest in handling communications (Article 6(1)(f) GDPR), or the performance of a contract where applicable (Article 6(1)(b) GDPR).
• To remember your preferences — We store your cookie consent choices so that you are not prompted repeatedly on return visits. The legal basis for this processing is compliance with our legal obligations under the ePrivacy Directive and GDPR (Article 6(1)(c) GDPR).

Third-Party Service Providers

We work with the following third-party service providers who may process your personal data on our behalf as data processors. We have ensured that each provider offers appropriate safeguards for the protection of your data.

• Cloudflare, Inc. — Provides content delivery, DDoS protection, and bot management services. Cloudflare processes visitor IP addresses and request metadata to protect this website from malicious traffic. Cloudflare is certified under the EU-U.S. Data Privacy Framework. For more information, visit cloudflare.com/privacypolicy.
• WP Engine, Inc. — Provides website hosting services. WP Engine processes data as a data processor on our behalf and stores website data on servers within the European Economic Area or under appropriate transfer safeguards. For more information, visit wpengine.com/legal/privacy.
• Defiant, Inc. (Wordfence) — Provides website security and firewall services. Wordfence processes IP addresses and HTTP request data to identify and block malicious activity. For more information, visit wordfence.com/privacy-policy.
• Google LLC (Google Analytics 4) — With your consent, we use Google Analytics 4 to collect anonymised usage statistics. Data may be transferred to Google servers in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework. You may opt out of Google Analytics at any time by adjusting your cookie preferences. For more information, visit policies.google.com/privacy.

International Data Transfers

Some of our third-party service providers are based outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we ensure that appropriate safeguards are in place in accordance with GDPR Chapter V, including reliance on adequacy decisions, Standard Contractual Clauses (SCCs), or participation in the EU-U.S. Data Privacy Framework.

Specifically, Google LLC and Cloudflare, Inc. are both certified under the EU-U.S. Data Privacy Framework, which has been recognised by the European Commission as providing an adequate level of protection for personal data transferred from the EU to the United States.