PRIVACY STATEMENT GREAT PLACE TO WORK BELGIUM
Last update date: 03 September 2026
Great Place To Work Belgium (hereafter ‘GPTW’) operates as the Belgian branch of the Great Place To Work Institute, which is headquartered in the US. As an independent organization working under a franchise model, it is licensed to use the Great Place To Work brand name, along with its methodologies and products. In Belgium, this license is held by Vlerick Business School, which oversees the implementation of the GPTW framework and its associated initiatives.
GPTW places great importance on the protection of personal data. This includes all information that allows us to identify a natural person (directly or indirectly), including, among other things, a name, an identification number, location data, and other information characteristic of that person.
Your personal data will always be protected by us in accordance with the GDPR1, including any applicable current or future national or international legislation implementing or replacing the GDPR (hereinafter collectively referred to as “Applicable Privacy Legislation”).
Below you will find all privacy statements applicable to the various processing activities for which GPTW acts as the data controller. This means that GPTW decides why and how your personal data is processed and that it is responsible for that processing.
- WEBSITE, SOCIAL MEDIA, EVENTS & NEWSLETTERS
- PARTICIPATION IN AN EMPLOYEE SURVEY FROM GPTW
WEBSITE, SOCIAL MEDIA, EVENTS & NEWSLETTERS
Scope of this privacy statement
This privacy statement applies to the processing of personal data of the following categories of data subjects:
- Persons who (wish to) contact us;
- Persons who (wish to) buy Merchandising Material on our GPTW webshop;
- Persons who wish to download a document via our website www.greatplacetowork.be;
- Persons who subscribe to newsletters or wish to receive other invitations;
- Persons who register for events and/or webinars;
- Persons who visit our website and/or our social media pages;
- Persons who respond to our research surveys or provide us with feedback on our services; and
- Prospective clients and other individuals who interact with GPTW before entering into a contractual relationship, for example by attending an event or downloading content from the GPTW website.
Data controller
The controller of these processing activities is the Belgian licensee of Great Place To Work Inc.: Vlerick Business School, a public utility foundation, established in Belgium, with company number 0424.244.049 and registered office at 9000 Ghent (Belgium), Reep 1 (‘Vlerick’).
For readability and convenience, we will refer to the controller as Great Place To Work Belgium (hereafter ‘GPTW’).
Overview of the processing
|
Purpose |
Personal Data |
Legal Basis |
|
To be able to contact you |
First name, last name, organisation, email address, job function |
Consent |
|
To send a brochure, whitepaper, or other requested document |
First name, last name, email address, phone number(*), job function |
Consent |
|
To send newsletters, event invitations, or other direct marketing via email |
First name, last name, organisation, email address, job function |
Consent or legitimate interest |
|
Organization of events and/or webinars |
First name, last name, email address, company details, job function details |
Consent |
|
To share registrations of events e.g. Best Workplaces Award Event, with our external partners |
First name, last name, email address, company, job function |
Consent |
|
Taking and using images, direct marketing, increasing engagement, and strengthening networks |
Photos and videos |
Consent |
|
To purchase merchandising material of GPTW |
First name, last name, company name, email address, phone number, shipping address |
Necessary for the contract |
|
Placing necessary and functional cookies on our website (for more information, check our Cookie Statement) |
Technical data, such as your IP address, login details, browser type and version, location, operating system, platform and device, and cookie IDs |
Legitimate interest |
(*) Not mandatory to provide
Source of Personal Data
We process the personal data that we obtain directly from you, through our co-organizers or photographers.
With whom do we share your personal data?
GPTW will only share your personal data, as required by the Applicable Privacy Legislation, with, among others, co-organizers of events, our processors, our external partners, regulatory authorities, when:
- It is required by law;
- It is necessary for the performance of a contract to which you are a party;
- Or you have given your explicit and informed consent for the transfer of the data.
International Transfer
GPTW operates globally, and your personal data may be stored and processed outside Belgium by us or by our processors, among which Great Place To Work Inc (US). We always take measures to ensure that personal data is always processed in accordance with the Applicable Privacy Legislation, regardless of where the data is located.
When we transfer personal data outside the European Economic Area (EEA) to countries where the applicable legislation does not offer the same level of data protection as within the EEA, we take measures to ensure an appropriate level of data protection.
Security & Retention of Your Personal Data
GPTW guarantees that your personal data will be processed in an appropriate, correct, and secure manner. We take appropriate technical and organizational security measures to protect your personal data against accidental loss or damage and unauthorized access, use, disclosure, alteration, or destruction, and to ensure the confidentiality, security, integrity, and availability of personal data.
We will not retain your personal data longer than necessary for the purposes for which we collected it, as outlined in the table above (point 3). When we no longer need your personal data, we will delete, destroy, or anonymize it in a secure manner.
For more information, you can always contact Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser..
Your Rights Regarding Your Personal Data
In accordance with the Applicable Privacy Legislation, you can exercise the following rights (if and to the extent applicable):
- Information about processing: You have the right to know why, how, and by whom your personal data is being processed (which is also the purpose of this policy).
- Access to personal data: If you would like to receive a copy of the personal data we hold about you, we will gladly provide it to you, subject to relevant legal provisions and exceptions, including the implementation of our identity verification procedures. Before providing you with the data, we will ask you to prove your identity and provide sufficient information about your interaction with us so that we can locate the relevant data.
- Request for correction: You have the right to correct or amend your personal data if it is incorrect or needs to be updated.
- Request for deletion: You have the right to request the deletion of your personal data. However, this is not always possible due to legal requirements and other obligations.
- Object to processing or withdraw consent: If you object to the processing of your personal data, or if you have given consent for processing and later wish to withdraw it, we will respect your choice in accordance with our legal obligations. This does not affect the lawfulness of processing carried out before you withdrew your consent. If you withdraw your consent, we may no longer be able to provide certain services to you. Regarding marketing preferences: You can choose to stop receiving email marketing by using the unsubscribe link in the emails you receive from us, or manage your subscription preferences. Also, refer to the information on managing cookies found in our cookie policy.
- Restriction of processing: You can ask us to suspend the processing of your personal data if you want us to verify the accuracy of the information; if our use of the information is unlawful but you do not want us to delete it; if we no longer need the information, but you want us to keep it so you can establish, exercise, or defend a legal claim; and if you have objected to our use of your data, but we need to verify whether our legitimate grounds for using it override yours.
- Request data portability: We will provide your personal data in a structured, commonly used, and machine-readable format to you, or to third parties chosen by you. Note that this right only applies to automated information for which you initially gave us consent to process or where we used the information to perform a contract with you.
- Automated decision-making: We will always ensure that any decision that significantly affects you will involve human intervention. Therefore, this right does not apply to our processing activities.
- File a complaint: If you are not satisfied with how Vlerick manages your personal data, you have the right to file a complaint with the Belgian Data Protection Authority. Their contact details can be found on the Data Protection Authority's website (link: https://www.gegevensbeschermingsautoriteit.be/burger). If your personal data is or has been used in a way that you believe does not comply with data protection regulations, we ask you to contact us directly before filing a complaint so that we can try to address your concern or resolve any issues.
If you have any questions regarding your personal data or wish to exercise any of the above-mentioned rights, please contact our DPO (Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.) or Data Knowledge Centre (Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.). In principle, we will always respond to your request within 1 month of receipt; in exceptional circumstances, this may be extended, but we will contact you.
Changes to this Privacy Policy
GPTW may change this Privacy Policy at any time to comply with business, legal, or technical developments. The most recent version of our Privacy Policy is always available and accessible on our website.
How to Contact Us
Questions regarding this Privacy Policy can be directed to our DPO (Data Protection Officer) via this email address: Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.. If you wish to exercise any of your rights regarding your personal data, you can do so via this email address: Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser..
PARTICIPATION IN AN EMPLOYEE SURVEY FROM GPTW
Scope of this privacy statement
GPTW offers an employee survey, on behalf of our client (participating organisation). GPTW acts on behalf of the organisation as a processor and the organisation (our client) as data controller. To obtain insight into the specific applicable agreements that your organisation has with GPTW, we refer you to your own organisation.
Participation in an employee survey is always voluntary. Under no circumstances can an employee be required to participate in such a survey. The goal of participation is to contribute to the development of the relevant organization. The higher the number of participants in a survey, the more representative the results and therefore the more valuable these will be to your organization.
This privacy statement applies to the processing of personal data of the following categories of data subjects:
- Participants in GPTW employee surveys.
Data controller & data processor
The controller of these processing activities is the participating organisation, the employer of the participants of the GPTW survey.
The processor of these processing activities is the Belgian licensee of Great Place To Work Inc.: Vlerick Business School, a public utility foundation, established in Belgium, with company number 0424.244.049 and registered office at 9000 Ghent (Belgium), Reep 1 (‘Vlerick’).
For readability and convenience, we will refer to the processor as Great Place To Work Belgium (hereafter ‘GPTW’). GPTW facilitates and administers GPTW surveys using the client’s data, following the client’s instructions.
Overview of the processing
|
Purpose |
Personal Data |
Legal Basis |
|
Delivering GPTW services: conducting employee surveys |
Job function details, gender, fulltime/parttime deployment, age, seniority, location (*), religion (*), ethical minorities (*) |
Consent |
|
Conducting research and statistical analysis, including benchmarking, developing best practices and improving GPTW’s research and practices |
Survey responses |
Legitimate interest |
(*) Not mandatory to provide
(*) For these research and statistical purposes, GPTW uses strongly pseudonymised data. The data is processed in such a way that individual participants cannot be identified.
Source of Personal Data
We process the personal data that we obtain directly from you or from our controller (the participating organisation, your employer).
With whom do we share your personal data?
To protect the confidentiality of survey participants, GPTW does not provide individual survey responses or other individual-level survey data to the participating organisation. Assessment results are only made available to the participating organisation in aggregated form. In addition, GPTW does not report Assessment results for demographic groups in which fewer than five (5) participants have responded.
GPTW will only share your personal data, in accordance with the Applicable Privacy Legislation, with, among others, our processors, external partners, regulatory authorities, when:
- It is required by law;
- It is necessary for the performance of a contract to which you are a party;
- Or you have given your explicit, well-considered consent for the transfer of the data.
International Transfer
GPTW operates globally, and your personal data may be stored and processed outside Belgium by us or by our processors, among which Great Place To Work Inc (US). We always take measures to ensure that personal data is always processed in accordance with the Applicable Privacy Legislation, regardless of where the data is located.
When we transfer personal data outside the European Economic Area (EEA) to countries where the applicable legislation does not offer the same level of data protection as within the EEA, we take measures to ensure an appropriate level of data protection.
Security & Retention of Your Personal Data
GPTW guarantees that your personal data will be processed in an appropriate, correct, and secure manner. We take appropriate technical and organizational security measures to protect your personal data against accidental loss or damage and unauthorized access, use, disclosure, alteration, or destruction, and to ensure the confidentiality, security, integrity, and availability of personal data.
We will not retain your personal data longer than necessary for the purposes for which we collected it, as outlined in the table above (point 3). When we no longer need your personal data, we will delete, destroy, or anonymize it in a secure manner.
For more information, you can always contact Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser..
Your Rights Regarding Your Personal Data
In accordance with the Applicable Privacy Legislation, you can exercise the following rights (if and to the extent applicable):
- Information about processing: You have the right to know why, how, and by whom your personal data is being processed (which is also the purpose of this policy).
- Access to personal data: If you would like to receive a copy of the personal data we hold about you, we will gladly provide it to you, subject to relevant legal provisions and exceptions, including the implementation of our identity verification procedures. Before providing you with the data, we will ask you to prove your identity and provide sufficient information about your interaction with us so that we can locate the relevant data.
- Request for correction: You have the right to correct or amend your personal data if it is incorrect or needs to be updated.
- Request for deletion: You have the right to request the deletion of your personal data. However, this is not always possible due to legal requirements and other obligations.
- Object to processing or withdraw consent: If you object to the processing of your personal data, or if you have given consent for processing and later wish to withdraw it, we will respect your choice in accordance with our legal obligations. This does not affect the lawfulness of processing carried out before you withdrew your consent. If you withdraw your consent, we may no longer be able to provide certain services to you. Regarding marketing preferences: You can choose to stop receiving email marketing by using the unsubscribe link in the emails you receive from us, or manage your subscription preferences. Also, refer to the information on managing cookies found in our cookie policy.
- Restriction of processing: You can ask us to suspend the processing of your personal data if you want us to verify the accuracy of the information; if our use of the information is unlawful but you do not want us to delete it; if we no longer need the information, but you want us to keep it so you can establish, exercise, or defend a legal claim; and if you have objected to our use of your data, but we need to verify whether our legitimate grounds for using it override yours.
- Request data portability: We will provide your personal data in a structured, commonly used, and machine-readable format to you, or to third parties chosen by you. Note that this right only applies to automated information for which you initially gave us consent to process or where we used the information to perform a contract with you.
- Automated decision-making: We will always ensure that any decision that significantly affects you will involve human intervention. Therefore, this right does not apply to our processing activities.
- File a complaint: If you are not satisfied with how Vlerick manages your personal data, you have the right to file a complaint with the Belgian Data Protection Authority. Their contact details can be found on the Data Protection Authority's website (link: https://www.gegevensbeschermingsautoriteit.be/burger). If your personal data is or has been used in a way that you believe does not comply with data protection regulations, we ask you to contact us directly before filing a complaint so that we can try to address your concern or resolve any issues.
If you have any questions regarding your personal data or wish to exercise any of the above-mentioned rights, please contact our DPO (Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.) or Data Knowledge Centre (Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.). In principle, we will always respond to your request within 1 month of receipt; in exceptional circumstances, this may be extended, but we will contact you.
Changes to this Privacy Policy
GPTW may change this Privacy Policy at any time to comply with business, legal, or technical developments. The most recent version of our Privacy Policy is always available and accessible on our website.
How to Contact Us
Questions regarding this Privacy Policy can be directed to our DPO (Data Protection Officer) via this email address: Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser.. If you wish to exercise any of your rights regarding your personal data, you can do so via this email address: Cette adresse e-mail est protégée contre les robots spammeurs. Vous devez activer le JavaScript pour la visualiser..