This privacy statement explains the reason for the way we collect, handle and ensure protection of all personal data provided, how that information is used and what rights you may exercise in relation to your data (the right to access, rectify, block etc.).

The European institutions are committed to protecting and respecting your privacy. As this service/application collects and further processes personal data, Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of individuals with regard to the processing of personal data by European Union institutions, bodies, offices and agencies and on the free movement of such data is applicable. This replaces the previous Regulation (EC) No 45/2001.

Why do we process your data?

The objective of this public consultation is to receive the views of stakeholders or people concerned by the topic of the consultation. These views will be published on the internet under the responsibility of the manager identified on the website of this consultation and acting as the 'data processor' on behalf of the ‘data controller’.

Which data do we collect and process?

The personal data collected and further processed are the name, surname, profession, country of residence and email address of the respondent and, where applicable, the name, size, type and transparency number of the organisation on whose behalf the respondent is contributing.

The public consultation is accessible using your EU Login. For further information, please read the specific privacy statement for EU Login.

How long do we keep your data?

The data processor only keeps the data for the time necessary to fulfil the purpose of collection or further processing.

How do we protect your data?

All data in electronic format (emails, documents, uploaded batches of data, etc.) are stored either on the servers of the European Commission or of its contractors, operation of which must abide by the European Commission’s security decision of 16 August 2006 [C(2006) 3602] concerning the security of information systems used by the European Commission.

The Commission’s contractors are bound by a specific contractual clause for any processing operations carried out on your data on behalf of the Commission, and by the confidentiality obligations deriving from the transposition of Directive 95/46/CE.

Who has access to your data and to whom is it disclosed?

Received contributions will be published on the internet.

When responding to a consultation or feedback mechanism, you must indicate whether your personal data (i.e. name, surname) may be published. In any case, your contact email address will not be published. Documents submitted in the context of a consultation or feedback mechanism, such as position papers or background documents, will be published as received. You should therefore not include personal data in documents submitted if you opt for anonymous publication.

Regardless of whether you choose to have your personal data published or not, you are required to identify yourself or the organisation on whose behalf you are responding. Anonymous contributions to consultations and feedback mechanisms are not accepted.

If you provide a spontaneous contribution in the context of a feedback mechanism, it will be published on the specific feedback mechanism webpage. By default, your contribution will be published with your personal information, unless you indicate otherwise.

Access to your personal data is provided to authorised staff on a ‘need to know’ basis. Such staff abide by statutory, and when required, additional confidentiality agreements.

What are your rights and how can you exercise them?

Under Regulation (EU) 2018/1725, you are entitled to access your personal data and rectify or block data if it is inaccurate or incomplete. You can exercise your rights by contacting the data processor or data controller, or in case of conflict the Data Protection Officer and if necessary the European Data Protection Supervisor, using the contact information given in point 8 below.

Contact information

Should you wish to access or verify the personal information stored on your behalf by the responsible controller, have it modified, corrected, or deleted, or if you have questions regarding the consultation, or any information processed in the context of the consultation, or regarding your rights, you should contact the data processor, operating under the responsibility of the data controller, using the contact details specified on the webpage for this consultation.

If you have general comments or questions, concerns or complaints regarding the collection and use of your personal data, please contact the data controller by sending an email to:

You have the right to lodge a complaint regarding the processing of your data at any time with one of the following:

  • the Data Protection Officer (DPO) of the Commission:

  • the European Data Protection Supervisor (EDPS):

Where to find more detailed information?

The Commission’s Data Protection Officer publishes a register of all operations that process personal data.

This specific instance of the processing of personal data has been notified to the DPO with the following reference: DPO-2758.6 — SG: Commission feedback mechanisms that make it possible for EU citizens to provide feedback on roadmaps, inception impact assessments, delegated and implementing acts and legislative proposals and to respond to public consultations via the Have your say and Consultations websites on