Privacy statement for the inauguration of the House of the Euro

In relation to the inauguration of the House of the Euro, we collect personal data such as your first name, last name, email, organisation, country of residence, picture, and dietary requirements. We also ask for travel details where relevant. ECB staff collects data manually via email or via ECB and EuropeanCommission IT systems.

What is our legal framework?

All personal data are processed in accordance with European Union data protection law, that is to say in line with Regulation (EU) 2018/1725 (‘EUDPR’).

Why do we process personal data?

Personal data are processed for organisational purposes related to this event. We collect data to ensure visitors’ security while on the premises and to keep track of and monitor who is visiting the House of the Euro’s premises. Where consent has been given, contact details may be stored for follow-up emails.

Personal data are also processed for the purposes of external communication. By joining the event, participants consent to having their photo taken, appearing in video and audio recordings and to the publication of resulting media files by the ECB on its website and official social media channels (i.e. Instagram, YouTube, Twitter, Flickr and LinkedIn). The use of social media by the ECB does not in any way imply endorsement of individual social media sites or their privacy policies. The ECB recommends that users read the respective privacy policies of Instagram, YouTube, Twitter, Flickr and LinkedIn, which explain each company’s policy of data collection and processing, their use of data, user rights and the ways in which users can protect their privacy when using these services. If a participant does not consent or withdraws their consent, prior notification thereof to the ECB Directorate General Communications – Public Communication Division must be explicitly given via e-mail (HouseoftheEuro@ecb.europa.eu). Alternatively, participants may approach the photographer on the day of the event.

What is the legal basis for processing your personal data?

Your personal data are processed by the ECB:

• in the performance of a task carried out in the public interest, based on Article 5(1)(a) of the EUDPR, in conjunction with the house rules of the ECB; or
• because you consented to this processing by providing the personal data requested. You may withdraw your consent at any time by contacting the House of the Euro at HouseoftheEuro@ecb.europa.eu. All processing of your personal information will stop once you withdraw your consent; however, any processing that has already taken place remains lawful.

Who is responsible for processing your personal data?

The ECB is the controller for the processing of your personal data. The Directorate General Communications is responsible for this processing.

Who will be the recipients of your personal data?

The recipients of your personal data (including entities that have access to that personal data) will be the teams in the Directorate General responsible for event and contact management, including related activities such as the transportation of participants, processing of access badges and plausibility checks.

What categories of personal data are collected?

The ECB processes the following personal data:

• First name
• Last name
• Contact details
• Country of residence
• Organisation
• Dietary requirements
• Images and videos
• Travel details

Will your personal data (in a clear or encrypted form) be processed (e.g. transferred, accessed or stored) in third countries or by international organisations?

Your personal data might exceptionally be processed in third countries/international organisations based on the derogations for specific situations set out in Article 50(1) EUDPR.

Your personal data will also be processed in third countries or by international organisations based on an adequacy decision of the European Commission (pursuant to Article 47 EUDPR), which can be found on the European Commission's website.

How long will the ECB keep personal data?

Your personal data will be stored for a maximum of five years.

What are your rights?

You have the right to access your personal data and correct any data that is inaccurate or incomplete. You also have (with some limitations) the right to delete your personal data and to object to or to restrict the processing of your personal data in line with the EUDPR. The ECB may restrict your rights to safeguard the interests and objectives referred to in Article 25(1) EUDPR.

Who can you contact for queries or requests?

You can exercise your rights by contacting the House of the Euro at HouseoftheEuro@ecb.europa.eu. You can also directly contact the ECB’s Data Protection Officer at dpo@ecb.europa.eu for all queries relating to your personal data.

Addressing the European Data Protection Supervisor

If you consider that your rights under the EUDPR have been infringed as a result of the processing of your personal data, you have the right to lodge a complaint with the European Data Protection Supervisor at any time.