Privacy Policy

Who are we?

The Covered Bond Label Foundation (CBLF) was established by the European Mortgage Federation-European Covered Bond Council (EMF-ECBC), which are registered under the Covered Bond & Mortgage Council (CBMC), in 2012.

The CBLF administers the Covered Bond Label, which is a quality Label designed to respond to a market-wide request for common qualitative and quantitative standards and for an enhanced level of transparency and comparability in the covered bond market.

The CBLF has been registered under Belgian Law as a Private Foundation (fondation privée/private stichting) since 21 November 2012 under number 500.950.659 (RPR/RPM Brussels) and is based at Rue de la Science 14A, 2nd Floor, B-1040 Brussels, Belgium.

Our contact details are:

Rue de la Science 14A, 2nd Floor  
B-1040 Brussels - Belgium

+32 2 285 40 30

How do we collect information from you?

We obtain information about you when you use our website, for example, when you contact us using the contact form or via email, or if you register to receive one of our newsletters or download one of our publications.

What type of information is collected from you?

The personal information we collect might include your name, address (if provided), e-mail address, your organisation’s name (if provided), your job title (if provided), telephone number (if provided), IP address, and information regarding what pages are accessed and when.

How is your information used?

We may use your information to:

  • process questions you have submitted via the contact form/e-mail/telephone;
  • to carry out our obligations arising from any contracts entered into by you/your company and us;
  • send you communications which you have requested and that may be of interest to you/your company. These may include information about campaigns, newsletters, position papers or other publication material;
  • activities, promotions of our association’s activities;
  • process a job/internship application.

We only process data if we have a legal basis to do so. The type of processing will depend on the legal basis applicable, the most commonly used by us will be: legitimate interest, contract, legal obligation or consent.

You can find the definitions of these legal bases below:

  1. Consent: You have given clear consent for processing for a specific purpose.
  2. Contractual necessity: Processing is necessary for the performance of a contract with you or to take specific steps before entering into the contract.
  3. Legal obligation: Processing is necessary to comply with the law (outside of contractual relationships).
  4. Legitimate interest: processing is necessary for the CBLF’s legitimate interest or a third party’s legitimate interest, unless there is an overriding reason to protect your personal data.

Subscription to our newsletters

With our newsletters, we inform you about the CBLF and its activities.

If you wish to receive our newsletters, we require a valid e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and/or that the owner consents to the receipt of the newsletter. No other data is collected. This data will only be used for sending newsletters and will not be disclosed to third parties.

During the registration for our newsletters, we save your IP address and the date of registration. The storage of this data serves exclusively as evidence in cases where a third party misuses an e-mail address to subscribe to our newsletters without the authorised owner’s knowledge.

You may revoke your consent to the saving of the data, the e-mail address, as well as their use for sending our newsletters at any time. This revocation can be submitted via a link in the newsletters themselves, or via a message sent to

Who has access to your information?

Your personal data will only be handled by or on behalf of the CBLF and with utmost care for your privacy. We will never sell or rent your information to third parties. We will not share your information with third parties for marketing purposes.

Third Party Product Providers we work in association with

We work with certain third-party product providers to deliver quality and reliable services (for example e-mail newsletters and other relevant messages sent through service providers including Outlook, SendGrid, Wufoo, SurveyMonkey). We advise you to also read their Privacy Policy.

Embedded services of third-parties

It may be the case that third-party content, such as videos from YouTube, map material from Google Maps or graphics from other websites are embedded within our website. This always requires the third-party providers to gain knowledge of the user’s IP address. This is because without the IP address, they would be unable to send the content to the browser of the corresponding user. Hence, the IP address is necessary to display such content. We strive to use only such content whose corresponding provider uses the IP address exclusively for delivering the content. However, we have no control over whether the third-party provider does in fact store the IP address, e.g. for statistical purposes. If we should become aware of this, we shall inform you.

How long do we keep your personal data?

When contacting us via the contact form or e-mail, your personal data provided (such as name and e-mail address) will be saved for the purposes of processing the query, as well as in case there are follow-up questions.

If you sign up for our newsletters, we will keep your contact details in our mailing list until you decide that you no longer wish to receive our newsletters and unsubscribe or let us know via e-mail ( or until they are no longer of interest to you.

We review our retention periods for personal information on a regular basis. We are legally required to hold some types of information to fulfil our statutory obligations. We will hold your specified personal information on our systems for as long as is necessary for the relevant and specified activity.

Your rights & choices

You have the right to access the personal data we hold of you, of course free of charge. Equally, you have the right to have your personal data removed/deleted (unless we are processing your data as part of a legal obligation), corrected or completed. If we are using your data on the legal basis of legitimate interest (for example, direct marketing or processing for statistical purposes), you have the right to object to processing. In order to do so, please contact us via

You always have the right to lodge a complaint with the relevant supervisory authority.

You have a choice about whether or not you wish to receive information from us. If you do not want to receive communications from us, then you can select your choices by ticking the relevant boxes situated on the form on which we collect your information.

The table below shows which right you can rely on, depending on the legal basis applicable to the specified processing of your personal data:

How can you access, update and delete your information?

The accuracy of your information is important to us. If you change e-mail address, or any of the other information we hold is inaccurate or out of date, please let us know by e-mail to: Alternatively, you can call us: +32 (0) 2 285 40 30.

Security precautions in place to protect the loss, misuse or alteration of your information

When you give us personal information, we take steps to ensure that it is treated securely. Non-sensitive details (your e-mail address etc.) are transmitted normally over the internet, and this can never be guaranteed to be 100% secure. As a result, while we strive to protect your personal information, we cannot guarantee the security of any information you transmit to us, and you do so at your own risk.

Once we receive your information, we make our best effort to ensure its security on our systems. Where we may have been given (or where you may have chosen) a password which enables you to access certain parts of our websites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.


We do not engage in active market profiling.

However, we may analyse the personal information you provided us with (for example your identity, the company or association you work for and your job title) to identify your interests and preferences so that we can contact you with information relevant to you (for example invitations to events that might be of interest to you). We may make use of additional information about you when it is available from external sources to help us do this effectively.

Use of “Cookies”

Like many other websites, the CBLF websites use cookies.

“Cookies” are small pieces of information sent by an organisation to your computer and stored on your hard drive to allow that website to recognise you when you visit. They collect statistical data about your browsing actions and patterns, and do not identify you as an individual. This helps us to improve our website and provide you with a better browsing experience.

It is possible to switch off cookies by changing your browser preferences. Turning cookies off may result in a loss of functionality when using our websites.

Links to other websites

Our websites may contain links to other websites run by other organisations.

This privacy policy applies only to our websites‚ so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from our website.

In addition, if you linked to our websites from a third-party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third-party site, and recommend that you check the policy of that third-party site.

Use of social plug-ins (Twitter & LinkedIn)

The CBLF website uses social plugins of the social networks, LinkedIn and Twitter. You can identify the plugins by the following icons: (Twitter) and (LinkedIn).

By accessing a page through a plugin, the content of the plugin is directly transmitted to your browser via LinkedIn or Twitter, which then embeds it in the web page. Hence, we have no influence over the scope of the data which LinkedIn or Twitter collects with the help of this plugin.

If you wish to suppress the linking of your data with LinkedIn or Twitter, please log out before visiting our website. You can also review your privacy policy applicable to your LinkedIn and Twitter usage on the respective websites.

16 or under

We are concerned to protect the privacy of children aged 16 or under. If you are aged 16 or under‚ please get your parent/guardian’s permission beforehand whenever you provide us with personal information.

Transferring your information outside the EU

As part of the services offered to you through our websites, the information which you provide to us may be transferred to countries outside of the European Union (“EU”). By way of example, this may happen if you request information that one of our non-EU member associations is better placed to answer, we may transfer your request and contact information to them. We will always inform you if we forward your personal data.

By submitting your personal data, you are agreeing to this transfer, storing or processing. If you use our services while you are outside the EU, your information may be transferred outside the EU in order to provide you with those services.

Review of this Policy

We review this Policy in case of policy changes. This Policy was last updated in May 2018.