close
HOME
Horizon Europe Request
© 2025 KERC. All Rights Reserved
Tous droits réservés
Alle rechten voorbehouden
Search
About KERC
We promote R&I cooperation between Korea and Europe.
KERC Privacy Policy

KERC Privacy Policy

KERC Privacy Policy

 

1. Who we are

This Privacy Policy explains how the Korea-EU Research Centre ASBL ("KERC", "we", "us") processes personal data when you visit https://k-erc.eu/ or contact us through it. It is written to meet the information requirements of Articles 13 and 14 of the EU General Data Protection Regulation 2016/679 ("GDPR") and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data.
KERC is the data controller for the processing described here:

  • Legal name: Korea-EU Research Centre ASBL
  • Registered office: Rue de la Science 14A, 1040 Brussels, Belgium
  • Enterprise number (BCE/KBO): 0542.852.184
  • Privacy contact: kerc2@k-erc.eu

We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 GDPR. All privacy questions and requests can be sent to the address above.

 

2. What data we process, why, and on what legal basis

We only process the personal data we need for each purpose below, and each purpose has its own legal basis under Article 6(1) GDPR.

Purpose Personal data  Legal basis
Operating and securing the website IP address, browser type, device and operating system, date and time of access, pages requested, referring URL Legitimate interests (Art. 6(1)(f)) in providing a working, secure website
Answering enquiries sent by email or contact form Name, email address, organisation, content of your message Steps taken at your request before entering a contract (Art. 6(1)(b)); otherwise legitimate interests in replying to you (Art. 6(1)(f))
Performing contracts with partners, clients and suppliers Names of contact persons, job title, organisation, email address, phone number Performance of a contract (Art. 6(1)(b))
Protecting our forms against spam and bots
(Google reCAPTCHA)		 See section 5  Consent (Art. 6(1)(a))
Non-essential cookies See section 4 Consent (Art. 6(1)(a))
Establishing or defending legal claims Relevant correspondence and contract records Legitimate interests (Art. 6(1)(f))

Fields marked as mandatory in our online forms are needed to handle your request or conclude a contract; without them we may not be able to respond. Where we rely on legitimate interests, we have weighed those interests against your rights, and you may object at any time (see section 9). We do not sell personal data, and we do not carry out automated decision-making, including profiling, that produces legal or similarly significant effects for you (Art. 22 GDPR).

 

3. Server log files and hosting

Our web server automatically records log files each time a page is requested. These logs contain your IP address, browser type, internet service provider, date and time of access, the pages requested, and the referring and exit pages.

IP addresses are personal data under the GDPR. We use log files only to keep the website running, to diagnose technical faults and to detect and investigate misuse or attacks. We do not use them to build profiles of individual visitors or to identify you, and we do not combine them with other data unless this is needed to investigate a security incident.

We delete log files manually at least once every 3 months, so no log file is kept for longer than 3 months, unless a longer period is needed to investigate a specific security incident. You can also ask us at any time to delete log entries relating to you (see section 9).

The website is hosted by Wering, 2F, 13 Yongducheon-ro 26-gil, Jecheon-si, Chungcheongbuk-do, Republic of Korea. The hosting provider processes data only on our behalf and on our documented instructions, under a data processing agreement that meets Article 28 GDPR. Section 7 explains how transfers to South Korea are protected.

 

4. Cookies

We only place cookies that are strictly necessary for the website to work without asking you. All other cookies are placed only after you give your consent through our cookie banner.

Cookies are small text files stored on your device. Strictly necessary cookies (for example, the cookie that remembers your cookie choices) are exempt from consent under the Belgian rules implementing Article 5(3) of the ePrivacy Directive. For every other cookie, we ask for your prior, freely given and specific consent. Simply continuing to browse the website does not count as consent.

You can accept or refuse non-essential cookies by category, and you can change your choice or withdraw consent at any time via [Cookie settings link in the footer]. Refusing cookies does not prevent you from using the website, although some features (such as the contact form protected by reCAPTCHA) may then be unavailable.

Cookie Provider Purpose Category  Duration
k-erc.eu KERC Remembers your cookie choices Strictly necessary 6 months
_GRECAPTCHA Google (on our behalf) Bot and spam detection on forms
(see section 5)		 Requires consent 6 months

We do not display third-party advertising on this website, and we do not allow advertising networks to place cookies through it.

You can also block or delete cookies in your browser settings; your browser's help pages explain how.

 

5. Google reCAPTCHA

We use Google reCAPTCHA v2, checkbox on our sign in / register page to tell genuine visitors apart from automated bots and to protect the form against spam and abuse. reCAPTCHA is loaded only on pages with a protected form, and only after you have consented to it.

What data is processed. To assess whether an interaction comes from a human, reCAPTCHA collects information such as your IP address, browser and device characteristics (for example language, plug-ins, screen resolution), the date and time of your visit, the time spent on the page, mouse movements or touch interactions, and the _GRECAPTCHA cookie.

Google's role. Google provides reCAPTCHA as our data processor. It processes this data only on our behalf and solely to provide the reCAPTCHA service, under the Google Cloud Terms of Service and the Google Cloud Data Processing Addendum, which meets Article 28 GDPR. KERC remains the data controller.

Legal basis. Your consent (Art. 6(1)(a) GDPR, together with the Belgian rules on storing and reading information on your device). If you do not consent, reCAPTCHA is not loaded and the protected form cannot be submitted. You can still reach us directly at kerc2@kerc.eu. You can withdraw your consent at any time via [Cookie settings], with effect for the future.

Transfers. reCAPTCHA data may be processed on Google servers outside the EEA, including in the United States. Section 7 explains the safeguards. 

Retention. reCAPTCHA data is kept by Google only as long as needed to provide the service, in line with the Google Cloud Data Processing Addendum; the _GRECAPTCHA cookie expires after 6 months.

 

6. Who receives your data

We share personal data only with the recipients below, and only to the extent needed for the purposes in section 2.

Recipient Role Location Why
Wering Processor Republic of Korea Website hosting and server logs
Google (reCAPTCHA) Processor EU and United States Bot and spam protection on forms
Serso Processor Belgium / EU Email and IT services
Courts, authorities, legal advisers Independent controllers Belgium / EU Only where required by law or to defend legal claims

Every processor works under a written agreement that meets Article 28 GDPR.

 

7. Transfers outside the European Economic Area

Some of your data is processed in South Korea and the United States. Both transfers rest on an EU adequacy decision underArticle 45 GDPR.

South Korea. Our hosting provider is based in the Republic of Korea. The European Commission has found that South Korea ensures an adequate level of protection for personal data transferred to organisations subject to the Korean Personal Information Protection Act (Commission Implementing Decision (EU) 2022/254 of 17 December 2021).
Our data processing agreement with the hosting provider adds contractual safeguards on
top of this.

United States. Data collected by Google reCAPTCHA may be transferred to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, covered by the Commission's adequacy decision of 10 July 2023. The Google Cloud Data Processing Addendum also incorporates the European Commission's Standard Contractual Clauses.

You can ask us for more information on these safeguards at kerc2@k-erc.eu.

 

8. How long we keep your data

We keep personal data only as long as needed for the purpose it was collected for, then delete or anonymise it.

Data Retention period
Server log files  Up to 3 months (deleted manually at least every 3 months), longer only to investigate a specific security incident
Enquiries by email or contact form As long as we have an ongoing working relationship with you or your organisation, and up to 5 years after our last exchange;
correspondence linked to a contract is kept as contract dat
Contract data Duration of the contract, then for the statutory limitation period for claims
Cookie consent record 6 months
reCAPTCHA data  See section 5

 

9. Your rights

You can exercise any of the rights below free of charge by emailing kerc2@k-erc.eu. We reply within one month, which may be extended by two further months for complex requests; we will tell you if this happens.

  • Access (Art. 15): to know whether we process your data and to receive a copy.
  • Rectification (Art. 16): to have inaccurate or incomplete data corrected.
  • Erasure (Art. 17): to have your data deleted where there is no longer a valid reason to keep it.
  • Restriction (Art. 18): to have the processing of your data temporarily limited.
  • Data portability (Art. 20): to receive data you provided to us in a structured, machinereadable format, or have it sent to another controller.
  • Objection (Art. 21): to object at any time to processing based on our legitimate interests, on grounds relating to your particular situation.
  • Withdrawal of consent (Art. 7(3)): to withdraw consent at any time, without affectingthe lawfulness of processing carried out before withdrawal.

We may ask you to confirm your identity before acting on a request, to make sure we do not disclose data to the wrong person.


Complaints. If you believe we have not handled your data correctly, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State where you live, work or where the alleged infringement took place. In Belgium this is the Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, contact@apd-gba.be, www.dataprotectionauthority.be.

 

10. Children, other websites and changes to this policy

Children. Our website is not directed at children, and we do not knowingly collect personal data from children under 13, the age of digital consent in Belgium. If you believe a child has given us personal data, please contact us and we will delete it promptly.

Links to other websites. Our website may link to external websites. This policy does not apply to them; please read their own privacy policies.

Scope. This policy covers personal data collected through https://k-erc.eu/. Personal data we collect offline or through other channels is covered by separate notices where needed.

Changes. We may update this policy to reflect changes in our practices or the law. The latest version is always published on this page, with the date of the last update below.

 

Last updated: 01-10-2026