Privacy statement for processing personal data in the course of registration for meetings and conferences

The ECB is committed to protecting user privacy. It only processes your personal data for the purposes described below. This privacy statement explains how the ECB processes, stores and manages the personal data it collects when you register for meetings and conferences.

What is our legal framework?

All personal data are processed in accordance with European Union data protection law, that is to say in line with Regulation (EU) 2018/1725 (“EUDPR”).

Why do we process personal data?

Your personal data are collected, processed and handled for the organisation of activities, such as events, conferences, seminars, workshops, visitor days, press conferences and other gatherings organised by the ECB, as well as for contact management, statistics and analysis. In some cases, the organisation of such activities may involve a plausibility check of the information provided against publicly available sources.

What is the legal basis for processing your personal data?

Your personal data are processed by the ECB in the performance of a task carried out in the public interest, based on Article 5(1)(a) of the EUDPR.

Who is responsible for processing your personal data?

The ECB is the controller for the processing of your personal data. The Directorate General Corporate Services is responsible for this processing.

Who will be the recipients of your personal data?

The recipients of your personal data will be members of staff responsible for organising the meeting or conference, as well as those involved in event and contact management, who arrange, for instance, the transportation of participants, the processing of access badges and plausibility checks.

What categories of personal data are collected?

The ECB processes the following personal data:

• personal details
• organisation/institution
• dietary requirements
• country/city of departure
• means of transport

Will your personal data (in a clear or encrypted form) be processed (e.g. transferred, accessed or stored) in third countries or by international organisations?

Your personal data will not be processed in third countries or by international organisations.

How long will the ECB keep personal data?

Your personal data will be stored for a maximum of five years before being deleted. In addition, information provided on country, city of departure and means of transport will be anonymised immediately.

What are your rights?

You have the right to access your personal data and correct any data that are inaccurate or incomplete. You also have (with some limitations) the right to delete your personal data and to object to or restrict the processing of your personal data in line with the EUDPR. The ECB may restrict your rights to safeguard the interests and objectives referred to in Article 25(1) of the EUDPR.

Who can you contact for queries or requests?

You can contact the ECB’s Data Protection Officer directly at dpo@ecb.europa.eu for all queries relating to your personal data.

Addressing the European Data Protection Supervisor

If you consider that your rights under the EUDPR have been infringed as a result of the processing of your personal data, you have the right to lodge a complaint with the European Data Protection Supervisor at any time.