Organizational part of the Agency entrusted with the processing of personal data
Andrew Smith, Head of Communication and Promotion Unit
Purpose of processing
The data requested on this form is collected for the purpose of creating the certificate of participation pdf, and sending it to the provided email address. It is used for statistical purposes, and it will be transferred to third party partners/contractors who will manage different communications related to campaign activities on behalf of EU-OSHA in your country, including newsletters, news, invitations to events or surveys. Data will also be transferred to the national Focal Points to give them information on the participation in the Campaign in their country.
Type of data processed
The data collected on the form includes, among other non-personal data:
- Name and email of the contact person
- Name and address of the enterprise
- Telephone number of the enterprise
The data displayed on the certificate only includes the name of your enterprise
Council Regulation (EC) No. 2062/94 of 18/07/1994 establishing the European Agency for Safety and Health at Work and subsequent amendments.
Lawfulness of processing
The processing is based on Article 5(a) of Regulation (EC) No. 45/2001 of the European Parliament and the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (hereinafter, Regulation (EC) No. 45/2001).
Access to the personal data is granted on the basis of the role and responsibilities of the subjects involved (“need to know” principle):
- Duly appointed EU-OSHA staff/partners/contractors
- External provider hosting and maintaining EU-OSHA’s server
- Legal Service, Civil Service Tribunal, the European Data Protection Supervisor, the European Anti-Fraud Office (OLAF), the European Ombudsman, the Court of Auditors, the Internal Audit Service, if applicable.
All the recipients mentioned are bound by Regulation (EC) Nº 45/2001 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data.
EU-OSHA will not divulge personal data for direct marketing for commercial purposes.
The data subject’s rights
Data subjects have the right to access, rectify and block their information (in case of inaccuracy of data), request their cancellation and object about their processing on the cases foreseen in Articles 13,14,15, 16 and 18 of Regulation (EC) N. 45/2001.
Should you have queries or complaints regarding the collecting, processing or use of your personal data, please contact us at: email@example.com, including in the subject the words “data protection”.
Information on the conservation period of data
This data related to the partner, is kept until the finalisation of the campaign.
We take appropriate security measures to protect against unauthorised access to or unauthorised alteration, disclosure or destruction of data. These include internal reviews of our data collection, storage and processing practices and security measures, including appropriate encryption of communication and physical security measures to guard against unauthorised access to systems where we store personal data.
Request for information
For any further information regarding the handling of their personal data, data subjects can address their request to EU-OSHA Data Protection Officer at: firstname.lastname@example.org.
Recourse to the EDPS
Data subjects are entitled to make recourse to the European Data Protection Supervisor: http://www.edps.europa.eu, should they consider that the processing operations do not comply with Regulation (EC) No. 45/2001.