Introduction

This privacy statement explains the reason for the processing, the way we collect, handle and ensure protection of all personal data provided, how that information is used and what rights you may exercise in relation to your data (the right to access, rectify, block etc.).

The European institutions are committed to protecting and respecting your privacy. As this service/application collects and further processes personal data, Regulation (EC) N°45/2001, of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data, is applicable.

This privacy statement concerns the contributions submitted to the European Commission's DG Communication (including the European Commission Representations in Member States) in the broad debate on the future of Europe, hereinafter referred as the operating DG.

Why do we process your data?

Purpose of the processing operation: The Head of Unit for A1/COMM (referred to hereafter as Data Controller) collects contributions to the broad debate on the future of Europe to enhance the Commission's understanding of citizens' concerns. For illustrative purposes, a contribution (or an extract of it) might be shared by the Commission with a wider audience through Commission channels like a web page, publication, social media, a speech, etc. When these extracts are shared with a wider audience, this will be done anonymously unless the contributing person (hereafter the "data subject") has explicitly agreed to the use of his/her personal data together with the (extract of the) contribution after an explicit individual request by the Commission (see section 3).

Which data do we collect and process?

Only data necessary for submitting contributions can be collected and processed, namely first name, family name, e-mail address, country, gender, age group, language of contribution and contribution.  All contributions can be submitted anonymously, without providing first name, family name, e-mail address, gender or age group. If you decide to provide your name and email address, they could only be used by the Commission for a general and anonymous statistical analysis of the contributions received and – if needed - to allow the Commission to contact the data subject for requesting his/her explicit agreement on sharing/publishing the (extract of) the contribution together with the personal data. Is this agreement not given, the Commission can use the contribution only anonymously.

The data are given by data subjects on a voluntary basis. No data fields fall under article 10. Please see section 6 below for further details.

Lawfulness of the processing operation:

The processing operations of personal data in the context of consultations are necessary and lawful under article 5 (a) of Regulation (EC) 45/2001.

Stakeholders and the public at large send their contributions to public consultations on a voluntary basis (Art. 5(d) Regulation 45/2001).

How long do we keep your data?

The Controller only keeps the data for as long as follow-up actions for the contribution are necessary with regard to the purpose(s) of the processing of personal data.

All personal data will be deleted from databases 1 year after the last action in relation to the Consultation.

Reports containing personal data will be archived according to the Commission's legal framework

How do we protect your data?

All data in electronic format (e-mails, documents, uploaded batches of data etc.) are stored either on the servers of the European Commission the operations of which abide by the European Commission’s security decision of 16 August 2006 [C(2006) 3602] concerning the security of information systems used by the European Commission;

The Commission’s contractors are bound by a specific contractual clause for any processing operations of your data on behalf of the Commission, and by the confidentiality obligations deriving from the transposition of Directive 95/46/CE  

Who has access to your data and to whom is it disclosed?

The operating DG and the external processor, if any.

Personal data collected in this context may become part of a database with the purpose of facilitating the interaction between the European Commission and its stakeholders in their areas of interest. A specific notification should cover this processing.

If data subjects do not wish to be included in this database, they can address themselves to the operating DG.

Data related to the country, age or gender could be transmitted to other EU Institutions or bodies, for statistical purposes. No data on the name or e-mail addresses will be transferred.

What are your rights and how can you exercise them?

According to Regulation (EC) n°45/2001, you are entitled to access your personal data and rectify, block or delete it in case the data is inaccurate or incomplete. You can exercise your rights by contacting first the data controller, or in case of conflict the Data Protection Officer and if necessary the European Data Protection Supervisor using the contact information given at point 8 below.

Contact information

If you have comments or questions, any concerns or a complaint regarding the collection and use of your personal data, please feel free to contact the Data Controller using the following contact information:

The Data Controller:

The Data Protection Officer (DPO) of the Commission: DATA-PROTECTION-OFFICER@ec.europa.eu

The European Data Protection Supervisor (EDPS): edps@edps.europa.eu.

Where to find more detailed information?

The Commission Data Protection Officer publishes the register of all operations processing personal data. You can access the register on the following link: http://ec.europa.eu/dpo-register