Privacy Charter

Why do we have a data protection policy?

Your privacy is important to IZIFY, the trading name of Springbok Media SPRL (hereinafter “IZIFY” or “we”). For this reason, IZIFY undertakes to respect the personal data of its online users (hereinafter “you”), to process it with the greatest care and to provide the highest level of protection in accordance with Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the “GDPR") and the Belgian law of 30 July 2018 on the protection of natural persons with regard to the processing of personal data (hereinafter the “Belgian law”). This policy tells you about:
  • The personal data that IZIFY collects about you and the reasons for doing so
  • How IZIFY uses your personal data
  • Your rights over your personal data and how to exercise these rights

Glossary of the main legal terms used in this policy

Terms frequently used in this policy GDPR definition Explanation in layman’s terms
Personal data (hereinafter “personal data”) Any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. All types of data about a natural person, i.e. an individual, who can be directly or indirectly identified as being distinct from other people. For example, they could be identified by a name, photo, fingerprint, email address, telephone number, social security number, IP address, voice recording, browsing data from a website, data concerning an online purchase, etc.
Data protection officer The GDPR does not define the data protection officer. The data protection officer (DPO) is responsible for the company’s compliance with the GDPR and national laws, as well as with its own data protection policies and practices. They are also responsible for collaborating with the data protection authorities. The DPO is your first point of contact for any request concerning your personal data.
Processing Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. Any use of personal data, no matter the process used (recording, organising, storing, altering, reconciling with other data, transmitting, etc.). For example, your data might be used for managing orders, delivery, sending out newsletters, etc.
Data controller The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. The person, public authority, company or body that controls your data and decides how to use it. They are responsible for choosing whether or not to process data, for deciding why your data will be processed and for determining whom it will be transmitted to. They have primary responsibility for protecting your personal data.
Processor A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller. Any natural or legal person who performs processing tasks under the instruction and responsibility of the data controller.
Profiling Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements. Collecting personal data relating to people’s behaviour on a large scale, analysing this data to establish a link between certain data and certain behaviours in order to create a profile, and applying a profile to a person.

Who is the data controller for the data you share with us?

Data controller

he data controller is IZIFY, a company with registered offices at Avenue Roger Vandendriesschelaan 18, 1150 Brussels, Belgium, and registered with the Crossroads Bank for Enterprises business register under number 0423.081.237.IZIFY is part of the Springbok Media SPRL group. To see all of the partner platforms that belong to IZIFY, please click here. These platforms operate in the multichannel database marketing sector.

Joint data controllers

If you agree for IZIFY to send your personal data to certain sponsors, partners or advertisers so that they can send you marketing communications and newsletters, IZIFY and the sponsor/partner/advertiser in question will be joint data controllers for the data collection. Each of the data controllers will inform you of their respective confidentiality policies. You can contact IZIFY to exercise your GDPR rights in regards to this data collection.

Once your data has been transmitted, the chosen sponsor(s)/partner(s)/advertiser(s) will be the sole data controller responsible for processing the data for the purposes that concern them; any requests concerning your rights should therefore be sent to them directly. IZIFY may also receive data collected on third-party websites that you visit. In this case, the administrator of the IZIFY website will be a joint data controller for this data collection. Each of the data controllers will inform you of their respective confidentiality policies. You can contact IZIFY to exercise your GDPR rights in regards to this collection.

Appointment of an internal data protection officer (DPO)

The data controller, IZIFY SA, has appointed a data protection officer. They are independently responsible for ensuring that internal data protection and management regulations are applied and for collaborating with the data protection authorities.

Why do we collect your personal data and on what basis do we do this?

IZIFY collects your personal data for several reasons. IZIFY collects and uses your personal data to operate efficiently and to provide you with the best experience of its services. Please note that IZIFY can only collect and use your personal data if this use complies with one of the lawful bases established by the GDPR (for example, your consent or the performance of a contract entered into with Springbok Media SPRL). The table below lists the exact purposes for which IZIFY uses your personal data, and the corresponding lawful basis.
Purposes for collecting your personal data Lawful basis for processing your personal data
Organising competitions: IZIFY processes competition entrants’ data in order to run competitions, specifically to contact the winners and award their prizes quickly and efficiently in the case of a prize competition, or to inform them of the results of a competition. The performance of the contract entered into with you (Article 6.1(b) of the GDPR), in the event of a competition entry contract.
Co-registration and co-sponsoring: IZIFY will send you marketing communications and deals, via email, telephone, SMS or voice message, as applicable, from selected partners identified when your data is collected, or will send your data to these partners in order for them to contact you directly. Your consent (Article 6.1(a) of the GDPR).
Email marketing and telemarketing: IZIFY uses your data to send you promotional offers from IZIFY or relating to certain partners it selects after collecting your data. Your consent (Article 6.1(a) of the GDPR).
Email retargeting: IZIFY uses cookies on its website. These are small text files that are placed on your hard drive by the website you visit so that it can record and store certain data about you and your computer. Cookies are essential for the website to function as they allow two computers to communicate effectively. The data collected is also used to run the applications that you use on the website. For further information, please see IZIFY’s cookies policy. After you visit a partner site, IZIFY will send you an email inviting you to visit the site again. Your consent (Article 6.1(a) of the GDPR).
Selling your data: IZIFY sends your data to its partners, including Bisnode Belgium SA (Allée de la Recherche 65, 1070 Anderlecht), so that they or other companies (such as commercial partners, charity and non-profit partners, public sector partners, and interest and opinion group partners) can send you offers based on your marketing profile or perform market research. When your data is transferred in this way, it may also be used to check, reconcile, complete or correct data that is already held in the partner's database. For more information, please visit www.bisnodeetvous.be. Your consent (Article 6.1(a) of the GDPR).
Database enrichment (data appending): IZIFY uses your data to enrich the databases of partners of which you are a client. IZIFY will inform you of this use by email and, if you do not object, will send your data to the partner. Your consent (Article 6.1(a) of the GDPR).
Collecting data for the benefit of sponsors/partners/advertisers, as joint data controllers. Your consent (Article 6.1(a) of the GDPR).
Complying with the legal and regulatory obligations (for example, keeping evidence of your consent or exchanges concerning the exercise of your rights). Legal obligation (Article 6.1(c) of the GDPR).
Cookies (to find out more, please visit the page on cookies)) Your consent (Article 6.1(a) of the GDPR).

Which personal data do we collect?

The personal data that IZIFY collects depends on the nature and number of relationships you have with IZIFY, whether legal (e.g. entering a competition) or not (e.g. visiting the IZIFY website). Below is a list of the personal data that IZIFY collects during each of these interactions for each type of use, as well as the reason for collecting the data, how it is collected (direct or indirect collection, i.e. your data is provided by you directly or provided by a third-party that you have authorised to send your data to IZIFY), and where it is processed:
Collection purpose Personal data collected Direct or indirect data collection
Organising competitions
  • Personal identification data (surname, first name, postal address, email address, telephone number)
  • Electronic identification data (IP address, cookies, connection log)
  • Demographic characteristics (age, sex, date of birth, country, language)
  • Competition responses
  • For this type of purpose, the data is collected from you directly
Co-registration and co-sponsoring
  • Personal identification data (surname, first name, postal address, email address, telephone number)
  • Electronic identification data (IP address, cookies, connection log)
  • Demographic characteristics (age, sex, date of birth, country, language)
  • Hobbies and interests, household composition, type of lifestyle, current suppliers
  • For this type of purpose, the data is collected from you directly
Email marketing
  • Personal identification data (surname, first name, postal address, email address, telephone number)
  • Electronic identification data (IP address, cookies, connection log)
  • Demographic characteristics (age, sex, date of birth, country, language)
  • Hobbies and interests, household composition, type of lifestyle, current suppliers
  • For this type of purpose, the data is collected directly from you or indirectly via a third party that you have authorised to send your data to IZIFY
Emailing retargeting
  • Personal identification data (surname, first name, postal address, email address, telephone number)
  • Electronic identification data (IP address, cookies, connection log)
  • Demographic characteristics (age, sex, date of birth, country, language)
  • Hobbies and interests, household composition, type of lifestyle, current suppliers
  • For this type of purpose, the data is collected directly from you or indirectly via a third party that you have authorised to send your data to IZIFY
Selling your data: 1) to potentially receive offers based on your marketing profile or to perform market research.
  • Personal identification data (surname, first name, postal address, telephone number)
  • Demographic characteristics (age, sex, date of birth, country, language)
  • Hobbies and interests, household composition, type of lifestyle, current suppliers
  • For this type of purpose, the data is collected from you directly
Selling your data: 2) to check, reconcile, complete or correct data that is already held in a partner's database
  • Personal identification data (surname, first name, postal address, telephone number and email address)
  • For this type of purpose, the data is collected from you directly
Database enrichment (data appending))
  • Personal identification data (surname, first name, postal address, email address, telephone number)
  • Electronic identification data (IP address, cookies, connection log)
  • Demographic characteristics (age, sex, date of birth, country, language)
  • Hobbies and interests, household composition, type of lifestyle, current suppliers
  • For this type of purpose, the data is collected directly from you or indirectly via a third party that you have authorised to send your data to IZIFY

Who do we share your personal data with?

Besides the partners listed above, as part of IZIFY's activities it may share your personal data with the IT service providers that help it provide its services from a purely technical point of view. When sharing data in this way, IZIFY always ensures that your personal data receives the highest level of protection.
  • Sharing your personal data with service providers and other subcontractors:
    in order to use the data for the purposes described in sections 2 and 3, IZIFY entrusts certain processing tasks to third parties called “subcontractors”. These subcontractors are primarily IT service providers offering various technical services that allow IZIFY to operate. Below is a list of the services provided:
    Subcontractor with which your personal data is shared Subcontractor’s location Reason for sharing your personal data
    Email service providers France Email marketing
    Technical service providers allowing IZIFY to perform email retargeting France Email retargeting
    Database management service providers France, United Kingdom Data appending
  • Sharing your personal data with public authorities:
    in response to legal requirements, including to comply with national security and law enforcement requirements, IZIFY may share your data with the public authorities.
  • Sharing your personal data as part of a transaction:
    IZIFY may be required to share your personal data with the buyers or sellers in the event of a merger, acquisition, consolidation or sale of assets.

How do we use your personal data?

With your prior consent, IZIFY uses your personal data for the benefit of its partners/sponsors/advertisers. This is IZIFY’s main business activity.

IZIFY may send your data to sponsors and advertisers who will then contact you. They are listed by name when IZIFY collects your data. They may be regular partners, such as Bisnode Belgium SA, RestoPass or other commercial partners, charity or non-profit partners, public sector partners, or interest and opinion group partners.

see more

In this case, IZIFY encourages you to read their own data protection policies (for example, when you receive emails that they send you or via the links sent when your data is collected). IZIFY may also use your personal data for the benefit of the commercial partners described above, with your data remaining in IZIFY's possession. When you consented to receiving offers from IZIFY’s partners, you were informed whether the data would remain in IZIFY’s possession or whether it would be transferred to the chosen partner. Please note that you can withdraw your consent at any time, in whole or in part, by following the steps described below.

How long do we store your personal data for?

IZIFY has established very precise rules concerning the retention period of your personal data. This period varies depending on the various objectives and takes into account any legal data retention obligations.

Collection reason Categories of personal data collected Retention period
Organising competitions
  • Personal identification data
  • Electronic identification data
  • Demographic characteristics
3 years from your last action
Organising competitions
  • Competition responses
Until the winners are awarded their prizes
Co-sponsoring and co-registration
  • Personal identification data
  • Electronic identification data
  • Demographic characteristics
  • Hobbies and interests
3 years from your last action
Email marketing
  • Personal identification data
  • Electronic identification data
  • Demographic characteristics
  • Hobbies and interests
3 years from your last action
Emailing retargeting
  • Personal identification data
  • Electronic identification data
  • Demographic characteristics
  • Hobbies and interests
3 years from your last action
Selling your data
  • Personal identification data
  • Demographic characteristics
  • Hobbies and interests
3 years from your last action
Database enrichment (data appending)
  • Personal identification data
  • Electronic identification data
  • Demographic characteristics
  • Hobbies and interests
3 years from your last action

What are your rights concerning your personal data and how can you exercise them?

IZIFY wants to make your personal data rights as clear as possible. It also wants to make it as easy as possible for you to exercise these rights.

Below, you will find a summary of your rights along with an explanation of how to exercise them.

  • Right of access

    You can request access to all of the following information:
    • The categories of personal data that IZIFY collects about you
    • The reasons why they are used
    • The categories of person to whom your personal data has been or will be sent and, in particular, whether these persons are located outside Europe
    • The retention period of your personal data in IZIFY's systems
    • Your right to ask IZIFY to correct, erase or restrict the processing of your personal data and your right to object to this processing
    • Your right to lodge a complaint with a European data protection authority
    • The source of your data when IZIFY did not collect it directly from you
    • How your personal data is protected when it is transferred to countries outside Europe

    How to exercise your right of access

    To exercise this right, simply contact IZIFY by email at privacy@izify.com, listing the subject as “right of access: personal data”, giving a brief description of the data you wish to access, and attaching a copy of your identity card. Unless you indicate otherwise, you will receive the requested data free of charge in an electronic format within 1 month of your request being received, or 2 months in the case of requests that require a more thorough search. If you are unable to submit your access request by email, you can contact IZIFY in writing at the following address: Springbok Media SPRL, Avenue Roger Vandendriesschelaan 18, 1150 Brussels, Belgium. Written requests must be signed and accompanied by a copy of your identity card. The request must state the address to which the response should be sent. You will then be sent a response within 1 month of your request being received, or 2 months in the case of requests that require a more thorough search or in the event that IZIFY receives a large number of requests. You can also consult your personal data directly at any time by clicking the dedicated hyperlink in the messages IZIFY sends to you, which allows you to access your Privacy Dashboard.
  • Right to rectification

    You can ask IZIFY to correct and/or update your personal data

    How to exercise your right to rectification

    Simply email IZIFY at privacy@izify.com, stating your surname and first name, listing the subject as “right to rectification: personal data”, and attaching a copy of your identity card. Please remember to indicate the reason for the request, i.e. rectifying incorrect data, in the body of the email, as well as stating which data is to be modified and, where applicable and if available, attaching evidence of the correct data. You can also exercise this right by contacting IZIFY in writing at the following address: Springbok Media SPRL, Avenue Roger Vandendriesschelaan 18, 1150 Brussels, Belgium. Your written request must be signed and accompanied by a copy of your identity card. The request must state the address to which the response should be sent. You will then be sent a response within 1 month of your request being received, or 2 months in the case of requests that require a more thorough search or in the event that IZIFY receives a large number of requests. You can also directly rectify your personal data at any time by clicking the dedicated hyperlink in the messages IZIFY sends to you, which allows you to access your Privacy Dashboard.
  • The right to erasure (right to be forgotten)

    You can also contact IZIFY at any time to ask it to delete the personal data that it processes if one of the following situations applies:
    • our personal data is no longer needed for the reasons for which it was collected or otherwise processed
    • VYou have withdrawn your consent on the basis of which your personal data was processed by IZIFY
    • For personal reasons, you consider the processing to be invading your privacy and causing you excessive harm
    • You no longer wish to receive marketing communications from IZIFY
    • Your personal data is not being processed in compliance with the GDPR and Belgian law
    • Your personal data must be deleted to meet a legal obligation that is prescribed by the European Union or by national law to which IZIFY is subject

    How to exercise your right to erasure

    Simply email IZIFY at privacy@izify.com stating your surname and first name, listing the subject as “right of erasure: personal data”, and attaching a copy of your identity card. Please remember to indicate the reason for the request in the body of the email (for example, that you are withdrawing the consent on the basis of which your data is processed). You can also exercise this right by contacting IZIFY in writing at the following address: Springbok Media SPRL, Avenue Roger Vandendriesschelaan 18, 1150 Brussels, Belgium. Your written request must be signed and accompanied by a photocopy of your identity card. The request must state the address to which the response should be sent. You will then be sent a response within 1 month of your request being received, or 2 months in the case of requests that require a more thorough search or in the event that IZIFY receives a large number of requests. However, IZIFY may not be able to comply with your request to exercise the right to be forgotten. Please bear in mind that this right is not absolute. IZIFY has to balance it with other important rights and values, such as freedom of expression, compliance with its legal obligations, and reasons of public interest. You can also ask for your personal data to be erased at any time by clicking the dedicated hyperlink in the messages IZIFY sends to you, which allows you to access your Privacy Dashboard.

    Once your request has been processed, your personal data will no longer be sent to IZIFY's partners. If you ask for your data to be erased after having directly accepted third-party offers, your request will only have effect for the future.

  • Right to object

    You have the right to object to the processing of your personal data if, for personal reasons, you consider the processing to be invading your privacy and causing you excessive harm. You can also object to the use of your personal data for marketing purposes and, in particular, for advertising actions. Your objection also applies to profiling insofar as it is linked to such marketing purposes (for example, when IZIFY sends you personalised content). Under no circumstances can you prevent IZIFY from processing your data:
    • if the processing is necessary in order to enter into or perform your contract. For example, your data must be processed in order to enter you into our competitions
    • if the processing is required by the law or a regulation
    • if the processing is necessary in order to establish, exercise or defend rights in a legal case

    How to exercise your right to object

    Simply email IZIFY at privacy@izify.com , listing the subject as “right to object: personal data” and attaching a copy of your identity card. It is important to list the reasons why you are requesting to exercise your right to object.

    You can also exercise these rights by contacting IZIFY in writing at the following address:

    Springbok Media SPRL, Avenue Roger Vandendriesschelaan 18, 1150 Brussels, Belgium. Your written request must be signed and accompanied by a photocopy of your identity card. The request must state the address to which the response should be sent. IZIFY has a period of 2 months in which to respond to your request to exercise your right to object. If your request is unclear or does not contain all of the information needed to perform the required operations, IZIFY will contact you within 2 months to invite you to provide this information.

    However, IZIFY may not be able to comply with your request to exercise this right. In such cases, IZIFY will ensure that it gives you as clear an explanation as possible.

    Any emails or newsletters you are sent will include a link that you can click in order to stop receiving promotional information from IZIFY.

    More specifically concerning your right to object to the use of your data for marketing purposes and the right to withdraw your consent for such purposes, please note that IZIFY's commercial partners are responsible for the use they make of your personal data and for applying your rights, including the right to no longer receive offers from them.

    You can nevertheless change your preferences regarding the various IZIFY platforms at any time under the “third-party offers” tab on your Privacy Dashboard. Once your request has been processed, your personal data will no longer be sent to IZIFY's partners; however, your request will only have effect for the future.

  • The right to withdraw consent

    You have the right, at any time, to withdraw consent for your data to be processed. The withdrawal of consent does not render unlawful any processing performed on the basis of the consent before it was withdrawn. More specifically concerning your right to withdraw your consent to the processing of your data for marketing purposes, please note that IZIFY's commercial partners are responsible for the use they make of your personal data and for applying your rights, including the right to no longer receive offers from them.

    How to exercise your right to withdrawal

    Simply email privacy@izify.com listing the subject as “withdrawal of consent”. You do not need to give a reason for the withdrawal of consent. You can also withdraw your consent at any time as follows: :
    - by clicking the dedicated hyperlink in the messages IZIFY sends to you, which allows you to access your Privacy Dashboard
    - via the “unsubscribe” link that appears in each email sent by IZIFY

    Once you withdraw your consent, your personal data will no longer be sent to IZIFY's partners. If you withdraw your consent after having accepted third-party offers, your withdrawal of consent will only have effect for the future.

  • Right to data portability

    This right gives you the option of more easily controlling your personal data yourself, specifically by:
    • obtaining, for your personal use the personal data that IZIFY processes, and storing it on a private device or cloud system, for example.
    • transferring your personal data from IZIFY to another company; this can be performed either by your or directly by IZIFY, subject to this direct transfer being “technically feasible”
    This right concerns the data that you actively and knowingly provide, the data provided when entering a competition (e.g. email address, surname and first name, age), and the data collected by IZIFY.

    How to exercise your right to data portability

    Simply email IZIFY at privacy@izify.com , stating your surname and first name, listing the subject as “right to data portability: personal data”, and attaching a copy of your identity card. Please remember to specify the files in question and the type of request in your email (return of data and/or transfer to a new service provider). You can also exercise this right by contacting IZIFY in writing at the following address: Springbok Media SPRL, Avenue Roger Vandendriesschelaan 18, 1150 Brussels, Belgium. Your written request must be signed and accompanied by a photocopy of your identity card. The request must state the address to which the response should be sent. You will then be sent a response within 1 month of your request being received, or 2 months in the case of requests that require a more thorough search or in the event that IZIFY receives a large number of requests. Nevertheless, please bear in mind that IZIFY is entitled to refuse your request to data portability. This right only applies to personal data processed on the basis of your consent or the performance of a contract entered into with you (for more information about the personal data to which the right to data portability applies, please see the purposes and bases section). Similarly, this right cannot infringe the rights and freedoms of third parties whose data may be contained in the data transmitted following a data portability request.
  • Right to restrict processingt

    You have the right to ask IZIFY to restrict the processing of your data, i.e. to mark your stored personal data (for example, by temporarily moving your data to another processing system or making your data unavailable to users), with a view to restricting its future processing. You can exercise this right when:
    • the accuracy of the data in question is disputed
    • your personal data is not being processed in compliance with the GDPR and Belgian law
    • the data is no longer necessary to fulfil the purposes for which it was initially collected but cannot yet be erased for legal reasons (in particular, to establish, exercise or defend your rights in a legal case)
    • a decision is yet to be made concerning your objection to the processing of your data
    If the processing of your data is restricted, your personal data will no longer be processed in any way without your prior agreement, with the exception of it being stored. Your personal data can nevertheless still be processed in order to establish, exercise or defend rights in a legal case, or to protect the rights of another natural or legal person, or for important reasons of public interest in the European Union or Member State. If the processing of some of your personal data is restricted, IZIFY will inform you of when the measure will be lifted.

    How to exercise your right to restrict processing

    Simply email IZIFY at privacy@izify.com , stating your surname and first name, listing the subject as “right to restrict processing: personal data”, and attaching a copy of your identity card. Please also remember to indicate the reason for your request in the body of your email. You can also exercise this right by contacting IZIFY in writing at the following address: Springbok Media SPRL, Avenue Roger Vandendriesschelaan 18, 1150 Brussels, Belgium.

Is your personal data transferred abroad?

Transfer of data within Europe

Yes, certain data is transferred to subcontractors that are registered or have their servers in the European Economic Area. Personal data has the same level of protection across the European Economic Area (27 Member States of the European Union, plus Ireland, Norway and Liechtenstein).

Transfer of data outside Europe

IZIFY does not in principle transfer your data outside the European Economic Area. However, on an exceptional basis or in the future, IZIFY may use a subcontractor from outside the EU. It would then either:
  • ensure that the subcontractor was incorporated in a country that the European Commission had determined as having an adequate level of data protection
  • ensure that the transfer was covered by the Standard Contractual Clauses issued by the European Commission
  • or, if the service provider was in the United States, ensure that it adhered to the Privacy Shield framework

How can you contact us about this data protection policy and/or lodge a complaint with a data protection authority?

Do you have a question or suggestion about this data protection policy?

Please get in touch by emailing  privacy@izify.com or by writing to: Springbok Media SPRL, Avenue Roger Vandendriesschelaan 18, 1150 Brussels, Belgium. IZIFY looks forward to hearing from you and will endeavour to get back to you as soon as possible.

You can also lodge a complaint with the data protection authority.

How will you know if we amend this data protection policy?

This data protection policy may be amended at any time, in particular to account for any legislative or regulatory changes and for any changes to IZIFY's services. Any important changes will be announced on the IZIFY website or by email, where possible, at least 30 days before they enter into force.

Find out more

En
Share on