Privacy statement for processing of personal data in the context of the declarations of interest, confidentiality and commitment and CVs of BoR and MB members, participants and alternates

The Agency for support for the Body of European Regulators (BEREC Office) processes the personal data of a natural person in compliance with Regulation 2018/1725 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC.

This privacy notice explains BEREC Office’s policies and practices regarding its collection and use of your personal data, and sets forth your privacy rights. We recognise that information privacy is an ongoing responsibility, and we will update this notice where necessary.

 

1. What is the purpose and legal basis for processing your personal data?

Any personal data shall be collected and processed solely for detecting potential conflicts of the members, participants and alternates of the Board of Regulators and of the Management Board.

Thus, we collect personal data to comply with the provisions of:

In addition, processing is necessary for the performance of a task carried out in the public interest and in the exercise of official authority vested in the BEREC Office.

Thus, processing of personal data is lawful based on Article 5 (a) of Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC.

 

2. What personal data is collected?

  • Name and position in the Board of Regulators/Management Board
  • Handwritten Signature
  • Private interests held, or entrusted to, the individuals participating in the work of the Board/Management Board, including those of their close family members (spouse, partner and/or dependent children, as well as other relatives under the care of the members of the household).
  • Data contained in the CV (contact details, education and career data).

 

3. Who has access to your personal data and to whom is it disclosed?

BEREC Office authorized staff and public in general (publication on BEREC website for transparency purposes).

The declarations of interest, commitment and CVs submitted by the members, participants and alternates of the Board of Regulators and of the Management Board are stored in dedicated folder, managed by the BEREC Office authorized staff.

 

4. How long are your personal data kept?

Your personal data are kept seven years as of the year following the date of registration of the declaration of interests, commitments, confidentiality and CVs.

As soon as a Management Board/Board of Regulators member, participant or alternate is departing, the respective declaration and CV, is removed from the BEREC website, but stored and archived in a restricted folder managed by BEREC Office authorized staff.

 

5. What are your rights?

You have the right to request from the controller access to and rectification or erasure of your personal data or restriction of processing.

You also have the right to object to processing of personal data.

The controller shall provide information on action taken on a request within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests.

 

6.  Who is the data controller and how to exercise your rights?

The BEREC Office shall exercise the tasks of the data controller for the purpose of these processing operations.

To exercise the mentioned rights, you can contact the controller as follows:  [email protected]

If you feel your data protection rights have been breached, you can always lodge a complaint with the BEREC Office’s Data Protection Officer ([email protected]) or with the European Data Protection Supervisor: [email protected]