The EEAS intends to inform people whose personal data is processed, that means individuals whose data has been collected, handled and eventually kept for a period of time. By means of Privacy Statements or Data Protection Notices, the EEAS provides information on the processing and on how to exercise individual rights.
You have the right, free of charge:
- to be informed of any processing of your personal data:
- who is in charge of the data processing
- what the purpose and the legal bases are
- what type of data are being processed
- who has access to the collected data
- how long it is kept
- what logic is used in any automated decision-making process concerning your data
- to access your data;
- to correct (rectify) them when inaccurate or incomplete;
- to have your data erased in certain circumstances (such as when the processing is unlawful or the data is inaccurate), their processing restricted (for example while they are rectified or when a dispute about the lawfulness is to be decided) and to object to the processing of your personal data based on your specific circumstances.
You can find more details on individual rights in the articles 14-24 and 35 of Regulation (EU) 2018/1725.
Exercising your rights
To exercise your rights, you can contact the data controller in charge of the processing of personal data. The functional mailbox of the data controller entity appears on the privacy statement or data protection notice for each data processing activity.
If you cannot find the contact details of the data controller, you can send an e-mail to the EEAS Data Protection Office
You may lodge a complaint at any time with the European Data Protection Supervisor (EDPS) who acts as an independent supervisory authority for EU institutions and bodies, offices and agencies devoted to protecting personal data and privacy and promoting good practice on the basis of EU Decision 1247/2002/EC on the regulations and general conditions governing the performance of the European Data Protection Supervisor's duties.
European Data Protection Supervisor (EDPS)
As data protection is a fundamental right in the European Union, it also includes the right to supervision by an independent authority.
The EDPS is responsible for ensuring the protection of personal data by the EU institutions, bodies, offices and agencies.
- supervises and monitors personal data processing activities by the EU administration
- advises on policies and legislation that affect privacy, providing advice to the EU legislator and may appear before the EU Courts
- cooperates with other data protection authorities to ensure consistent data protection
- monitors new technologies with an impact on privacy