Skip to content
ISIC

Privacy statement

Last updated: 2026-10-20

Who is responsible?

ISIC Belgium is the controller for data collected through this website. You can reach us at privacy@isic.be.

Which data do we process?

Application data: name, date of birth, address, email address, photo, your proof of status and a copy of the front of your ID document.

Contact data: whatever you enter in the contact form.

Website data: technical logs and, only with your consent, analytics and marketing cookies.

Copy of your ID document

When you apply, we ask for a photo or scan of the front of your ID card, passport, residence card or driving licence. We use it to check that the name and date of birth on your card are right and to prevent misuse. We don't ask for your national register number (on the back of the Belgian eID), and you may make the card number unreadable.

We use the copy only with your explicit consent and only for that check: no facial recognition, no other use. The copy gets a watermark, is sent encrypted and is visible only to the staff who check your application. We don't share it with the ISIC Association, the card printer or anyone else.

We delete the copy as soon as your card is made, and no later than 30 days after upload, even if the application isn't completed. Prefer not to send a copy? Contact privacy@isic.be for another way to verify.

Why, and on which legal basis?

Processing your application and delivering your card: performance of the contract.

Answering your question: legitimate interest.

Analytics and marketing: only on the basis of your consent, which you can withdraw at any time.

Accounting and fraud prevention: legal obligation.

How long do we keep it?

Application data is kept for up to five years after the card expires, or longer where the law requires it. Contact messages are deleted after two years. Proof documents are deleted once verification is complete.

Who do we share it with?

With the ISIC Association for worldwide validation of your card, with our card printer and payment provider, and with IT suppliers working on our behalf. Transfers outside the European Economic Area take place with appropriate safeguards.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Send your request to privacy@isic.be. You may also lodge a complaint with the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels.