We process personal data for the operation of our website www.rpp-group.com (the “Website”). We keep such data in confidence and process them in accordance with the applicable laws, in particular the General Data Protection Regulation (GDPR) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data. In this Privacy Policy we inform you which personal data we collect from you, for which purposes and on which legal basis we use them, to whom we disclose them where applicable, and which rights you have.
RPP also operates websites for initiatives it manages on behalf of clients and coalitions, for example www.letstalkprostatecancer.com. Each of those websites carries its own privacy notice, which names RPP as controller and refers to this Privacy Policy for the general provisions.
Our Privacy Policy contains technical terms which are defined in the GDPR. For your better understanding we explain the two most important ones.
“Personal data” means any information relating to an identified or identifiable natural person (Art. 4(1) of the GDPR). Data of an identified person might be, for instance, their name or email address. Data might also be personal if the identity is not directly recognisable but could be determined by combining information, for example an address, a date of birth, a user name, an IP address or location data.
“Processing” means any operation performed on personal data (Art. 4(2) of the GDPR), in particular the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
The following company is responsible for data processing and thus the controller:
Company: RPP Group SRL (“we”), company number 0477.819.426 (VAT BE 0477.819.426)
Legal representatives: Lutz Dommel, Romuald Petrucci (Managing Directors)
Address: Rue Guimard 10, 1040 Brussels, Belgium
Telephone: +32 2 743 28 90
Email: contact(at)rpp-group.com
RPP Group SRL is part of the Paritee network of agencies. Paritee and its member agencies do not have access to personal data collected through the Website unless stated in this Privacy Policy.
We have appointed a data protection officer. You may contact her at:
Name: Dovilé Ermanaité, Senior Office Manager and Data Protection Officer
Address: Rue Guimard 10, 1040 Brussels, Belgium
Email: dpo(at)rpp-group.com
We process the personal data listed under sections 6 to 13 below when you use the Website. We only process data that you actively enter on our Website (for example by completing a form or applying for a position) or that your device provides automatically when you use the Website.
Your data are processed by us and are not sold, leased or otherwise provided to third parties for their own purposes. Where we use external service providers, they act as processors on our instructions under written agreements. For the operation of the Website we use ALL-INKL.COM (Neue Medien Münnich, Friedersdorf, Germany) for hosting, with servers located in Germany, and external providers for maintenance, updates and further development. Where other service providers are used for individual processing activities, they are named in the relevant section.
Some of the services described below are provided by companies established in the United States. Where personal data are transferred there, we rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, where the provider is certified under it, or on the standard contractual clauses adopted by the European Commission. You can ask us for details of the safeguards used.
Whenever anybody visits our Website, we automatically collect information that their browser transfers to our server, and store it in the log files of our system. This concerns your anonymised IP address: the last two blocks of the visitor’s IP address are truncated, so that 11.22.33.44 becomes 11.22.0.0. The temporary storage of your full IP address for the duration of the session is necessary to deliver the Website to your device. Your full IP address is not recorded in our log files.
The processing allows the Website to be delivered and ensures its stability and security. In addition, the anonymised data serve for statistical analysis and the improvement of our online offer.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6(1)(f) of the GDPR). Our legitimate interest is the purpose stated in 6.2.
Session data are erased when the session ends. Log files are erased after 30 days.
We provide a contact form on our Website. You are asked to enter your name, your email address and a message. When you click Send, the data are transferred to us using TLS encryption (see section 14). The form can only be sent if you confirm that you have read this Privacy Policy. You may also contact us at the email addresses shown on our Website, in which case we process the personal data transferred with your email.
The data are used exclusively to handle and answer your request.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6(1)(f) of the GDPR), our legitimate interest being the purpose stated in 7.2. Where the contact is aimed at concluding or performing a contract, the data are processed on the basis of Art. 6(1)(b) of the GDPR.
We erase the data once they are no longer required for the purpose of their collection, which is usually the case when the relevant communication has been concluded. Where a statutory retention period applies, the data are erased after that period expires.
Our Website lists open positions under Work at RPP. If you apply, we process the data you provide: name, contact details, CV, cover letter and any other documents you send. Applications are received by email at the address shown on the Website. Where you apply through RPP’s LinkedIn page, LinkedIn forwards your application to that same address; LinkedIn’s own privacy policy applies to your use of LinkedIn.
The data are used to assess your application and to conduct the recruitment process.
The processing is necessary in order to take steps at your request prior to entering into an employment contract (Art. 6(1)(b) of the GDPR). Where we keep your application for future positions, we do so with your consent (Art. 6(1)(a) of the GDPR).
Applications for a specific position are erased six months after the position is filled or the process is closed, unless you have agreed to be kept on file for future positions or a statutory retention period applies.
Our Website uses cookies. Cookies are small text files stored on your device when you visit a website. Some cookies are strictly necessary for the Website to work, for example those that record your cookie preferences or support security. Others are set only with your consent, for example cookies used for statistics or for embedded third-party content. The strictly necessary cookies are set by Real Cookie Banner (consent record), TranslatePress (your language choice) and Elementor (page display). The cookies in use, their providers, purposes and storage periods are listed in the cookie banner and can be viewed at any time through the “Change privacy settings” link in the footer of the Website.
To manage cookies and similar technologies and the related consents we use the consent tool Real Cookie Banner, provided by devowl.io GmbH, Germany. Details of how Real Cookie Banner processes data are available at https://devowl.io/rcb/data-processing/.
Strictly necessary cookies keep the Website working and record your consent choices. Other cookies provide the functions described in sections 10 to 12.
Strictly necessary cookies are set on the basis of our legitimate interest in operating the Website (Art. 6(1)(f) of the GDPR) and, for the recording of consent, our legal obligation to be able to demonstrate consent (Art. 6(1)(c) of the GDPR). All other cookies are set only with your consent (Art. 6(1)(a) of the GDPR), which you can withdraw at any time through the cookie settings.
Session cookies are deleted when you close your browser. Other cookies remain for the period shown in the cookie settings. You can delete cookies at any time through your browser settings. If you block strictly necessary cookies, parts of the Website may not work.
Our Website embeds a map from Google Maps, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to show the location of our offices. The map is loaded from a Google server once you consent, and your IP address is transmitted to Google together with the address of the page. If you are logged in to a Google account, Google may associate the visit with your account. Google’s privacy policy is available at https://policies.google.com/privacy.
The processing allows us to display an interactive map of our office locations.
The map is loaded only with your consent, given through the cookie banner (Art. 6(1)(a) of the GDPR). Until you consent, a placeholder is shown instead of the map.
Google may process your data in the United States. Google LLC is certified under the EU-US Data Privacy Framework.
Our Website uses reCAPTCHA, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to protect the Website and its forms against spam and automated abuse. reCAPTCHA runs in the background on the pages of the Website (you can see its badge in the corner of the page) and assesses whether a visitor is a person or automated software. For this purpose your IP address, the time of your visit, your mouse movements and other data needed for the check may be transmitted to Google. Google’s privacy policy is available at https://policies.google.com/privacy.
The processing protects our forms against spam and abuse.
The processing is necessary for the purposes of the legitimate interests pursued by the controller (Art. 6(1)(f) of the GDPR), our legitimate interest being the protection of the Website against spam and abuse.
Google may process your data in the United States. Google LLC is certified under the EU-US Data Privacy Framework.
Our Website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies and similar technologies to analyse how visitors use the Website. IP addresses are not stored by Google Analytics 4. The information generated is transmitted to Google servers, which may be located in the United States, and used to compile aggregated reports on the use of the Website, such as the number of visitors, the countries they come from, the pages they view and the sources they arrive from. We do not use Google Analytics for advertising and have not enabled data sharing with other Google services. Google’s privacy policy is available at https://policies.google.com/privacy and information on Google Analytics data privacy at https://support.google.com/analytics/answer/6004245.
The processing allows us to evaluate the use of our Website and to improve it.
Google Analytics is activated only with your consent, given through the cookie banner (Art. 6(1)(a) of the GDPR). You can withdraw your consent at any time through the cookie settings.
Data at user and event level are retained by Google Analytics for up to 14 months. The storage periods of the cookies are shown in the cookie settings.
Google acts as our processor. Google may process your data in the United States. Google LLC is certified under the EU-US Data Privacy Framework.
Our Website contains links to our profiles on LinkedIn and X (formerly Twitter). These are plain links, not embedded plugins. No data are transmitted to those services until you click a link and leave our Website. The privacy policies of those services then apply.
Our Website uses TLS encryption to protect data transmitted between your device and our server against unauthorised access. You recognise active encryption by the lock symbol in your browser’s address bar. We also apply access controls, regular backups and security updates to the Website.
You have the following rights in relation to the processing of your personal data by us.
You have the right to obtain confirmation from us as to whether personal data concerning you are being processed and, where that is the case, access to those data and the further information set out in Art. 15 of the GDPR.
You have the right to obtain the rectification of inaccurate personal data concerning you without undue delay and, where necessary, to have incomplete personal data completed.
You have the right to obtain the erasure of personal data concerning you without undue delay where one of the grounds in Art. 17 of the GDPR applies, for example where the data are no longer required for the purpose for which they were collected.
You have the right to obtain restriction of processing where one of the conditions in Art. 18 of the GDPR applies, for example while the accuracy of the data is being verified after you have contested it.
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, where the processing is based on consent or on a contract and is carried out by automated means.
Where processing is based on your consent, you may withdraw it at any time with effect for the future. The withdrawal does not affect the lawfulness of processing carried out before it. Consent given through the cookie banner can be withdrawn through the “Change privacy settings” link in the footer of the Website.
Where we process your personal data on the basis of legitimate interests (Art. 6(1)(f) of the GDPR), you have the right to object on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You may object at any time to processing for direct marketing purposes.
We do not use automated decision-making, including profiling, in relation to your personal data.
If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be, or the supervisory authority of the EU Member State in which you live or work.
To exercise any of these rights, contact our data protection officer at dpo(at)rpp-group.com or by post at the address in section 3. We will respond within one month. We may ask you to confirm your identity before acting on a request.
We may update this Privacy Policy when the Website or the applicable law changes. The version date at the top shows when it was last changed.
Version: September 2026
English 
German 
French 
Spanish