In line with Regulation 45/2001, the EDPB collects your personal information only to the extent necessary to fulfil a precise purpose related to our tasks.
We put in place measures to guarantee that your data are kept up-to-date and processed securely.
Here below we provide you with some general information regarding the processing of personal data on our website. Specific information about processing activities of the EDPB other than the ones associated with this website will be provided separately.
You have rights when we process your data
When your personal data is processed by the EDPB, you have the right to know about it.
You have the right to access the information and have it rectified without delay if it is inaccurate or incomplete.
You can ask to have it blocked under certain circumstances.
You can also object to it being processed if you think the processing is unfair and unlawful and ask for it to be deleted.
You can request that any of the above changes be communicated to other parties to whom your data have been disclosed.
You have also the right not to be subject to automated decisions (made solely by machines) affecting you, as defined by law.
You have the right to complain at any time if you believe your data protection rights have been breached.
These rights are outlined in Articles 13 to 19 of the current data protection Regulation 45/2001.
How to exercise your data protection rights at the EDPB
If the EDPB is processing your personal data and you would like to exercise your data protection rights, please send us a written request either by e-mail EDPB-DPO@edpb.europa.eu or to our DPO by post in a sealed envelope.
In principle, we cannot accept verbal requests (telephone or face-to-face) as we may not be able to deal with your request immediately without first analyzing it and reliably identifying you.
Your request should contain a detailed, accurate description of the data you want access to. When there are reasonable doubts regarding your identity, you might be asked to provide a copy of a document, which help us to verify your identity. It can be any document such as your ID card or passport. Should you provide any other documents, personal details such as your name and your address should be in clear in order to be able to identify you, while any other data such as a photo or any personal characteristics, may be blacked out.
Our use of the information on your identification document is strictly limited: the data will only be used to verify your identity and will not be stored for longer than needed for this purpose.
Your personal data and our website
The EDPB website is our most important communication tool. Here we communicate our work such as our guidelines, recommendations, best practices, advises, opinions and decisions. In addition, we communicate data protection news and information about data protection topics to the general public as well as our more expert audiences.
Some of the services offered on our website require the processing of your personal data.
We processed personal data collected on our website for the following purposes:
- when you send us a request or a complaint through our website or by other means, only for the purpose of the management of this request of complaint;
We do not reuse the information for another purpose that is different to the one stated. We will never divulge your personal data for direct marketing purposes.
Under certain conditions outlined in law, we may disclose your information to third parties, (such as the European Anti-Fraud Office, the Court of Auditors, or law enforcement authorities) if it is necessary and proportionate for lawful, specific purposes.
As a rule, we do not keep your personal information for longer than necessary for the purposes for which we collected it. We may keep your personal data for a longer period for historical or scientific purposes with the appropriate safeguards in place.
The EDPB uses social media to present its work through widely used channels. The ideas and views expressed by the EDPB on social media are for information purposes only. No communication through social media shall be deemed to constitute legal or official notice on behalf of the Board.