Last updated: 31 October 2026

SME EUROPE is committed to protecting personal data and providing clear information about how personal data is used in connection with this website, website-related communications and event registrations.

1. Controller

The controller responsible for the processing of personal data is:

Small and Medium Entrepreneurs Europe AISBL (SME EUROPE)
Rue d’Arlon 46
1000 Brussels
Belgium

Email: office@smeeurope.eu
Website: www.smeeurope.eu

2. Personal data we process

We may process personal data when you visit our website, contact us, subscribe to updates or invitations, register for an event through our website or a registration service linked from it, or otherwise interact with us in connection with the website.

This may include your name, organisation, job title, email address, country, communication preferences, information contained in messages you send to us and event-registration information.

Limited technical information generated when using the website may also be processed, such as IP address, browser information and technical server logs necessary for the operation and security of the website.

For certain events held at the European Parliament, additional information may be required for visitor accreditation and security purposes. Depending on the applicable requirements, this may include nationality, date of birth, European Parliament access-badge status, identity-document type, ID or passport number and document expiry date.

Such information is collected only for the purpose of arranging the required visitor accreditation and event access and may be provided to the European Parliament or the relevant accreditation or security services. Accreditation and identity-document information is not used for marketing purposes.

3. Purposes and legal basis

We process personal data for purposes including:

• *  operating and securing the website;
• *  responding to enquiries;
• *  managing event registrations and participation;
• *  arranging event access and accreditation;
• *  sending SME EUROPE updates, invitations or other communications where permitted;
• *  and complying with applicable legal obligations.

Depending on the processing activity, the legal basis may be your consent, the performance of a contract or steps taken at your request, compliance with a legal obligation, or SME EUROPE’s legitimate interests in operating its website, organising events, communicating about its activities and maintaining website and IT security.

Where we rely on consent, you may withdraw your consent at any time.

Where personal data is used for updates, invitations or similar direct communications, you may unsubscribe or object to such processing at any time.

4. Cookies and website technologies

The SME EUROPE website may use cookies or similar technologies that are necessary for the technical operation, security and functionality of the website or for remembering cookie preferences.

We currently do not use Google Analytics or other analytics cookies for general website visitor analytics.

Non-essential cookies, analytics or tracking technologies are used only where permitted by applicable law and, where required, with your consent.

Our website may contain links to third-party websites or services, including social-media platforms. When you follow such links, the respective third-party provider is responsible for its own processing of personal data.

5. Sharing of data

We do not sell personal data.

We may share personal data with service providers where necessary to operate our website and related activities, including hosting, IT, email, event and administrative service providers.

For certain events, registration may be processed through Eventbrite. When you register through Eventbrite, personal data may be processed by Eventbrite in accordance with its own privacy information and, where applicable, on behalf of SME EUROPE.

Where an event requires access to the European Parliament, necessary accreditation information may be provided to the European Parliament or the relevant accreditation or security services.

Where a service provider processes personal data outside the European Economic Area, appropriate safeguards are used where required under applicable data-protection law.

We may also disclose personal data where required by law.

6. Retention

We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law.

In particular:

• *  event-registration information is retained only for as long as reasonably necessary for the organisation and follow-up of the relevant event;
• *  accreditation and identity-document information is retained only for as long as necessary for the relevant accreditation and event-access process;
• *  communication data may be retained for as long as necessary to manage the relevant correspondence or relationship; and
• *  subscription information is retained until you unsubscribe, withdraw your consent or object to the relevant processing.

Limited information may be retained where necessary to document and respect an unsubscribe request or objection.

7. Your rights

Under applicable data-protection law, you may have the right to:

• *  request access to your personal data;
• *  request correction of inaccurate or incomplete personal data;
• *  request deletion of your personal data;
• *  request restriction of processing;
• *  receive certain personal data in a portable format;
• *  object to processing based on legitimate interests;
• *  and withdraw your consent where processing is based on consent.

To exercise your rights or ask a question about the processing of your personal data, please contact:

office@smeeurope.eu

You also have the right to lodge a complaint with the Belgian Data Protection Authority:

Autorité de protection des données / Gegevensbeschermingsautoriteit
Rue de la Presse 35
1000 Brussels
Belgium

Email: contact@apd-gba.be
Website: www.dataprotectionauthority.be

8. Updates

We may update this Privacy Policy from time to time to reflect changes to the website, our processing activities or applicable legal requirements.

The latest version will be published on this page.

9. Event registration

This section explains how we process personal data when you register for an event through the registration form on this website.

Purpose and legal bases

We process your name, email address, job title and organisation to manage registration, organise professional attendance and send practical information about the event. Where accreditation is necessary, we also process the access and identity details requested in the form. Submission time and technical connection information help operate and protect the service. We rely on our legitimate interests in organising professional events, enabling requested venue access and operating the service securely (Article 6(1)(f) GDPR), subject to necessity and a balancing of the interests involved. We do not use attendance to infer political opinions.

Fields marked as required are needed for the registration process described on the event page. Without the necessary information, we may be unable to process your registration or arrange access. You indicate whether you already hold a badge valid for access to the event venue. We rely on your assessment, irrespective of the badge issuer or category. Existing badge holders register for the event without additional visitor-badge identity details. Other guests provide only the details required for the applicable visitor process. No copies of identity documents are requested through this form.

Future event invitations and newsletters

Future invitations and newsletters are separate from registration for an individual event. If you select Yes, SME EUROPE may retain your name and email address beyond that event to send future event invitations and newsletters. This is based on consent (Article 6(1)(a) GDPR), and we keep evidence of your choice. Selecting No does not affect registration. You can withdraw consent at any time through the unsubscribe facility provided or by contacting office@smeeurope.eu. Withdrawal does not affect the lawfulness of earlier processing. Accreditation details are not kept for this purpose.

Recipients and storage

Registration records are stored in our WordPress database hosted by dogado. Authorised staff and technical providers acting on our instructions may access data as needed. Necessary accreditation details may be shared with the European Parliament, the EESC, the Committee of the Regions or the hosting office identified for the event. Their own privacy information applies to their subsequent processing. Registration does not authorise unrelated marketing by sponsors or partners.

Retention

We keep registration and accreditation data for event administration and necessary follow-up, normally deleting operational records within 30 days after the event. Longer retention is limited to a specific legal obligation or the handling of a concrete legal claim. Contact details for future event invitations and newsletters are retained while the subscription remains active and the purpose remains relevant; they are removed from the active mailing list when consent is withdrawn or the list is no longer needed. Evidence of consent is kept separately only as necessary to demonstrate lawful use or deal with a specific claim. The host institution sets its own retention periods.

International transfers

Registration data is stored and processed on servers of our hosting provider dogado in Germany. Notification emails about registrations are handled by our email service, also provided by dogado within the European Union. We do not transfer registration data to countries outside the European Economic Area. Accreditation details shared with the European Parliament, the EESC or the Committee of the Regions remain within the European Union.

Your rights

Your rights described in section 7 apply. In particular, you may object to processing based on legitimate interests on grounds relating to your particular situation, and you may withdraw newsletter consent at any time. Contact office@smeeurope.eu. We do not make solely automated decisions producing legal or similarly significant effects.

Photography and recording

This section covers registration and accreditation. Any photography, filming or audio recording will be explained separately before it takes place. Registration alone is not consent to recording or publication.