Effective date: 1 August 2025
Website: https://cepti.eu

This Privacy Policy and Data Protection Notice explains how Conseil Européen pour les Professionnels et les Thérapies Intégratives – CEPTI, a Belgian non-profit association / ASBL, collects, uses, stores and protects personal data in connection with its website, membership activities, accreditation procedures, institutional communications, events, donations and professional services.

CEPTI is committed to protecting personal data and to processing it in a lawful, fair and transparent manner, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation, and other applicable European data protection rules.

This notice applies to visitors of the CEPTI website, persons contacting CEPTI, applicants for membership or accreditation, representatives of member organisations, participants in CEPTI events or programmes, donors, subscribers to CEPTI communications and other persons who interact with CEPTI.

The data controller is:

Conseil Européen pour les Professionnels et les Thérapies Intégratives – CEPTI
Legal form: ASBL
Registration number: 1025842504
Registered office: Square de Meeûs 35, 1000 Brussels, Belgium
Website: https://cepti.eu
Email: contact@cepti.eu
Telephone: +32 465 75 84 84

For any questions regarding this Privacy Policy or the processing of personal data, you may contact CEPTI at:

Data Protection Contact:
Cătălin Costache
Vice-President for External Relations
Email: contact@cepti.eu

CEPTI has not appointed a Data Protection Officer at this stage. Data protection enquiries may be addressed to CEPTI through the contact details indicated in this notice.

If CEPTI appoints a Data Protection Officer in the future, this notice will be updated accordingly.

Depending on your interaction with CEPTI, we may process the following categories of personal data:

a. identification data, such as name and surname;
b. contact data, such as email address, telephone number, postal address and country;
c. professional data, such as professional title, occupation, organisation or institution name, professional qualifications, diplomas, certificates and accreditation-related information;
d. identity verification data, such as a copy of an ID document or passport, where required for membership, accreditation, certification or compliance purposes;
e. membership and accreditation data, such as application forms, supporting documents, evaluation records, membership status, accreditation decisions and institutional correspondence;
f. communication data, such as messages submitted through website forms, Google Forms, email or other communication channels;
g. event and programme data, such as registration details, participation records, attendance information, photographs, video recordings and related communications;
h. payment and administrative data, such as payment confirmations, payment references, invoices, billing details and accounting records;
i. donation-related data, where a person makes a donation or voluntary contribution to CEPTI;
j. newsletter and communication data, such as subscription status, consent records, email preferences and unsubscribe records;
k. technical website data, such as IP address, browser type, device information, cookies, analytics identifiers, advertising identifiers and website usage data.

CEPTI does not intentionally collect special categories of personal data through its website, such as health data, religious or philosophical beliefs, political opinions, trade union membership, genetic data, biometric data or data concerning minors, unless such data are voluntarily provided by the person concerned and are strictly necessary for a specific lawful purpose.

CEPTI processes personal data for the purposes described below.

CEPTI processes personal data in order to respond to messages, requests and enquiries submitted through the website, Google Forms, email or other communication channels.

Legal basis: legitimate interest in responding to enquiries and managing institutional communication; consent where the person voluntarily submits information through a form.

CEPTI processes personal data in order to receive and assess membership applications, maintain member records, communicate with members and manage the rights and obligations connected with CEPTI membership.

Legal basis: performance of pre-contractual or contractual steps; legitimate interest in managing CEPTI’s institutional and membership structure; legal obligation where applicable.

CEPTI processes personal data in order to receive, evaluate and manage applications for individual or institutional accreditation, including professional documents, diplomas, certificates, supporting information, internal assessments and accreditation decisions.

Legal basis: performance of pre-contractual or contractual steps; legitimate interest in maintaining professional standards, institutional credibility and accreditation records; consent where optional information is voluntarily provided.

CEPTI may process contact data in order to send relevant institutional communications, updates, event information, accreditation-related notices, membership information or professional announcements connected with CEPTI’s mission.

Legal basis: legitimate interest in communicating with members, applicants, accredited professionals, partner organisations and professional contacts; consent where required for newsletter or promotional communications.

CEPTI processes personal data in order to send newsletters, public updates, institutional announcements, professional information and other communications to persons who have subscribed or otherwise agreed to receive such communications.

Legal basis: consent, where required by law; legitimate interest for communications addressed to existing members, applicants or professional contacts in relation to CEPTI’s institutional activities.

Subscribers may unsubscribe at any time by using the unsubscribe mechanism provided in the communication or by contacting CEPTI at contact@cepti.eu.

CEPTI processes personal data in order to organise events, meetings, conferences, training activities, professional programmes and related institutional initiatives.

This may include registration data, attendance records, photographs, video recordings, certificates of attendance and related communications.

Legal basis: performance of a contract or pre-contractual steps; legitimate interest in organising CEPTI activities; consent where required for the publication of photographs, video recordings or testimonials.

CEPTI processes payment and billing data in order to manage membership fees, accreditation fees, event fees, donations, voluntary contributions, invoices, accounting records and related financial administration.

CEPTI may use third-party payment providers such as Stripe, PayPal and Revolut. CEPTI does not directly store card details.

Legal basis: performance of a contract or pre-contractual steps; legal obligation in relation to accounting and tax records; legitimate interest in managing financial administration.

CEPTI processes personal data where necessary to comply with legal, tax, accounting, reporting, governance or regulatory obligations.

Legal basis: legal obligation; legitimate interest in maintaining proper institutional, legal and administrative records.

CEPTI processes technical data in order to maintain website security, prevent misuse, ensure the proper functioning of the website and improve the user experience.

Legal basis: legitimate interest in maintaining a secure and functional website.

CEPTI may use cookies, analytics tools and advertising technologies, including Google Analytics, Meta Pixel, Google Ads and LinkedIn Insight Tag, subject to the consent mechanism displayed on the website.

Legal basis: consent for non-essential cookies, analytics and advertising technologies; legitimate interest for strictly necessary technical cookies required for the website to function.

Where CEPTI relies on legitimate interest as a legal basis, such interests may include:

a. responding to enquiries and maintaining institutional communication;
b. protecting the website and information systems;
c. managing membership, accreditation and professional records;
d. maintaining the integrity, credibility and reputation of CEPTI;
e. developing professional standards and institutional partnerships;
f. documenting institutional decisions and professional evaluations;
g. preventing fraud, misuse or unauthorised access;
h. ensuring continuity of CEPTI’s institutional activities.

CEPTI will not rely on legitimate interest where the interests, rights or freedoms of the data subject override CEPTI’s legitimate interests.

Personal data may be accessed or processed by the following categories of recipients:

a. authorised members of the CEPTI Board of Directors;
b. authorised members of the CEPTI Executive Council;
c. administrative persons acting under CEPTI’s authority;
d. accreditation evaluators, committees or authorised persons involved in membership or accreditation procedures;
e. website, hosting and domain service providers, including GoDaddy;
f. email and cloud storage providers, including Gmail and Google Drive;
g. form providers, including Google Forms;
h. newsletter providers, including MailerLite;
i. payment providers, including Stripe, PayPal and Revolut;
j. accounting, legal or compliance advisers, including CEPTI’s treasurer or accounting support;
k. analytics and advertising providers, including Google Analytics, Meta Pixel, Google Ads and LinkedIn Insight Tag;
l. public authorities, courts, regulators or other competent bodies, where required by law.

CEPTI does not sell personal data.

CEPTI is established in Belgium and primarily aims to process personal data within the European Economic Area.

However, some of the digital tools used by CEPTI, including website, email, cloud storage, analytics, advertising, newsletter, payment or form services, may involve the processing of or access to personal data from countries outside the European Economic Area.

Where such transfers occur, CEPTI seeks to rely on appropriate safeguards permitted by GDPR, such as adequacy decisions of the European Commission, Standard Contractual Clauses, contractual data protection commitments, or other lawful transfer mechanisms.

CEPTI keeps personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law or justified by legitimate institutional needs.

The following indicative retention periods apply:

a. general contact messages: up to 12 months after the last communication;
b. membership records: for the duration of membership and up to 5 years after termination;
c. accreditation files: for the duration of accreditation and up to 5 years after expiry or termination;
d. accounting, invoice and payment records: for the period required by applicable accounting and tax law;
e. event registration records: up to 3 years after the event;
f. newsletter subscriber data: until the person unsubscribes or withdraws consent;
g. cookie consent records: for the period configured in the website cookie consent tool;
h. certificates, accreditation history and institutional records: for as long as necessary to document CEPTI’s accreditation decisions, institutional continuity and professional records.

Exact retention periods may vary depending on the nature of the data, legal obligations applicable to CEPTI and the need to preserve evidence of institutional decisions.

Under GDPR, you may have the following rights:

a. the right of access to your personal data;
b. the right to rectification of inaccurate or incomplete data;
c. the right to erasure of your personal data, where applicable;
d. the right to restriction of processing;
e. the right to object to processing based on legitimate interest;
f. the right to data portability, where applicable;
g. the right to withdraw consent at any time, where processing is based on consent;
h. the right not to be subject to a decision based solely on automated processing, including profiling, where such decision produces legal or similarly significant effects.

To exercise your rights, you may contact CEPTI at:

Email: contact@cepti.eu

CEPTI may request reasonable information to verify your identity before responding to a request.

Where processing is based on consent, you have the right to withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

For newsletters, you may withdraw consent by using the unsubscribe mechanism provided in the communication or by contacting CEPTI at contact@cepti.eu.

For cookies, you may withdraw or change your consent through the cookie settings available on the website.

If you believe that CEPTI has processed your personal data in breach of GDPR, you have the right to lodge a complaint with a supervisory authority.

As CEPTI is established in Belgium, the competent supervisory authority may be:

Belgian Data Protection Authority
Rue de la Presse 35
1000 Brussels
Belgium
Website: https://www.dataprotectionauthority.be

You may also contact the supervisory authority in your country of residence or work, where applicable.

CEPTI applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

Such measures may include access controls, limited access to personal data, secure account management, confidentiality obligations, administrative safeguards and appropriate technical security measures through its service providers.

However, no website, email service or online communication system can be guaranteed to be completely secure. CEPTI encourages users not to send unnecessary sensitive information through website forms or unsecured communication channels.

The CEPTI website uses cookies and similar technologies.

Cookies are small files placed on your device when you visit a website. Some cookies are strictly necessary for the website to function, while others may be used for analytics, preferences, embedded content, advertising or marketing purposes.

CEPTI may use cookies and similar technologies provided by GoDaddy, Google Analytics, Meta Pixel, Google Ads, LinkedIn Insight Tag and other tools connected with the operation, security, analytics, communication and promotion of the website.

CEPTI uses non-essential cookies only where a valid consent mechanism is implemented.

Users must be able to accept, reject or manage non-essential cookies in a clear and accessible way.

More information is available in CEPTI’s Cookie Policy.

The CEPTI website may contain links to third-party websites or embedded content from external platforms.

CEPTI is not responsible for the privacy practices, content or security of third-party websites. Users are encouraged to read the privacy policies of any external websites they visit.

CEPTI does not use personal data collected through the website for automated decision-making producing legal or similarly significant effects.

Membership and accreditation decisions are subject to human review and institutional evaluation.

If this changes in the future, CEPTI will update this Privacy Policy and provide appropriate information in accordance with GDPR.

The CEPTI website and services are not directed to children.

CEPTI does not knowingly collect personal data from children through its website. If CEPTI becomes aware that such data has been provided without an appropriate legal basis, it will take reasonable steps to delete it.

CEPTI may take photographs or video recordings during events, meetings, conferences or professional activities.

Where photographs, video recordings or testimonials are intended for publication, communication or promotional use, CEPTI will seek appropriate consent where required.

A person may contact CEPTI at contact@cepti.eu if they wish to raise a concern regarding the use of their image, recording or testimonial.

CEPTI may update this Privacy Policy from time to time in order to reflect legal, technical or organisational changes.

The updated version will be published on this page with a revised effective date or update date.

For any questions regarding this Privacy Policy or the processing of personal data by CEPTI, please contact:

Conseil Européen pour les Professionnels et les Thérapies Intégratives – CEPTI
Square de Meeûs 35
1000 Brussels
Belgium
Email: contact@cepti.eu
Telephone: +32 465 75 84 84
Website: https://cepti.eu

Last updated: 14.06.2026