- PRIVACY STATEMENT
Privacy statement for accreditation and registration for ECB conferences and press events
What is our legal framework?
All personal data are processed in accordance with European Union data protection law, that is to say in line with Regulation (EU) 2018/1725 (“EUDPR”).
Why do we process personal data?
Personal data are processed to facilitate accreditation, invitation and registration for ECB conferences and press events. The processing of personal data is necessary to satisfy security requirements, including control and access to ECB premises and, in the case of media representatives, to verify their employment/assignment as journalists. Personal data are collected to facilitate all relevant communication and organisational activities including: the exchange of correspondence; emails, notifications, invitations and the relevant follow-up (which entails managing contact lists for correspondence); online registration; processing access badges and plausibility checks.
By attending an ECB conference or press event, participants consent to having their photo taken and appearing in video and audio recordings, in addition to the publication of resulting media files on the ECB’s website and official social media channels: Instagram, YouTube, X (formerly known as Twitter), Flickr and LinkedIn.
The ECB’s use of social media does not in any way imply an endorsement of individual social media sites or their privacy policies. The ECB recommends that users read the privacy policies of the sites, which explain their individual data collection and processing policies, use of data, user rights and the ways in which users can protect their privacy when using these services.
What is the legal basis for processing your personal data?
Your personal data are processed by the ECB:
- in the performance of a task carried out in the public interest, based on Article 5(1)(a) of EUDPR, in conjunction with Article 22 of the (Decision ECB/2004/2);
- because you consented to this processing by providing the personal data requested. You may withdraw your consent at any time by contacting us as indicated below. All processing of your personal information will stop once you withdraw your consent; however, any processing that has already taken place remains lawful.
Who is responsible for processing your personal data?
The ECB is the controller for the processing of your personal data. Data are processed by the teams responsible for managing events in the Directorates General Communications, Market Infrastructure and Payments, Statistics, and Market Operations. ADITO is a sub-processor of your personal data. It will process personal data only on the basis of documented instructions from the ECB (see ADITO’s privacy statement).
Who will be the recipients of your personal data?
The recipients of your personal data will be members of staff responsible for event and contact management, including related activities such as the transportation of participants, processing of access badges and plausibility checks, including:
- staff members from the Directorates General Communications, Market Infrastructure and Payments, Statistics, and Market Operations;
- internal and external security staff members at the ECB.
The accreditation documents are stored in a dedicated space in the ECB’s document and records management system, and access to those documents is limited to experts from the Design and Digital Division in the Directorate General Communications.
What categories of personal data are collected?
The ECB processes the following personal data, provided by you through email correspondence and online registration:
- personal details (title, name and surname);
- contact details (email address, postal address, landline and mobile phone number);
- job title/function;
- organisation;
- nationality.
For accreditation, the following additional data are requested and processed:
- date of birth;
- photo;
- additional personal data as indicated on your personal ID/passport and your press ID.
Will your personal data (in a clear or encrypted form) be processed (e.g. transferred, accessed or stored) in third countries or by international organisations?
Your data will be processed by the ECB and stored in an internal customer relationship management tool hosted in Germany, as well as in our internal document and records management system and Microsoft Outlook.
The ECB does not foresee any transfer of your personal data to third countries or international organisations. However, your personal data might exceptionally be processed in third countries or by international organisations based on the derogations for specific situations set out in Article 50(1) of EUDPR.
How long will the ECB keep personal data?
Your personal data will be stored for as long as you are accredited with the ECB and receive invitations to ECB conferences and press events. If you no longer wish to receive invitations to ECB conferences and press events, you may request to be taken off the invitation list and your data will be deleted within three months of receipt of the request.
For other events, your personal data will be stored for a maximum of five years before being deleted.
Please note that personal data may be held in the ECB’s archives in accordance with Decision (EU) 2023/1610 of the European Central Bank of 28 July 2023 establishing the historical archives of the European Central Bank.
What are your rights?
You have the right to access your personal data and correct any data that are inaccurate or incomplete. You also have (with some limitations) the right to delete your personal data and to object to or to restrict the processing of your personal data in line with EUDPR. The ECB may restrict your rights to safeguard the interests and objectives referred to in Article 25(1) of EUDPR.
Who can you contact for queries or requests?
You can exercise your rights by contacting any of the following:
- Design and Digital Division in the Directorate General Communications, at media@ecb.europa.eu;
- Market Infrastructure Support Division in the Directorate General Market Infrastructure and Payments, at MIPCommunication@ecb.europa.eu;
- Digital euro team in the Directorate General Market Infrastructure and Payments, at digitaleuro@ecb.europa.eu.
You can also directly contact the ECB’s Data Protection Officer at dpo@ecb.europa.eu for all queries relating to your personal data.
Addressing the European Data Protection Supervisor
If you consider that your rights under EUDPR have been infringed as a result of the processing of your personal data, you have the right to lodge a complaint with the European Data Protection Supervisor at any time.