The Single Resolution Board is committed to user privacy. When carrying out public consultations we adhere to the standards of Regulation (EU) 2018/1725 on processing of personal data by the EU institutions.
The Single Resolution Board (hereafter ‘the SRB’) is committed to protecting your personal data and to respecting your privacy. The SRB collects and further processes personal data pursuant to Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data (repealing Regulation (EC) No 45/2001).
This privacy statement explains the reason for the processing of your personal data, the way we collect, handle and ensure protection of all personal data provided, how that information is used and what rights you have in relation to your personal data. It also specifies the contact details of the responsible Data Controller with whom you may exercise your rights, the Data Protection Officer and the European Data Protection Supervisor.
This privacy statement concerns the SRB’s collection, handling and processing of personal data associated with your contribution to a public consultation published on its website, as described below. There is no intention to publish any personal data associated with individual contributions to this public consultation.
Why and how do we process your personal data?
Purpose of the processing operation
The SRB clearly communicates its policies and guidance to the industry and consults relevant and interested parties, where appropriate, to inform its policies and guidance and ensure good results.
Your personal data will not be used for an automated decision-making including profiling.
Legal grounds for the processing
We process your personal data in this EfB consultation based on your explicit consent according to Articles 5(1)(d) and 7 of Regulation (EU) 2018/1725. By registering to the EfB consultation in the EU Survey tool, you provide this consent to take part in this consultation and have your personal data processed according to the privacy statement used for this consulation.
Which personal data do we collect and further process?
Only personal data necessary for contributing to a public consultation is mandatory, namely: your name, surname and e-mail address and, where applicable, the name of the organisation on whose behalf you are contributing. Your IP address is not collected.
Public consultations use the Commission's online questionnaire tool ‘EU Survey’ that requires you to login via your ‘EU Login’ or ‘social media account’. ‘EU Login’ requires certain personal data such as the name, surname and e-mail address of the registrant. For further information, please refer to the privacy statements of ‘EU Login’ and ‘EU Survey’ as well as the processing operation 'DPO-839-4 Identity & Access Management Service (IAMS)'. Should you choose to log in through your social media account, please refer to the pertinent social media platform’s privacy statement.
How long do we keep your personal data?
Your personal data is kept only for the time necessary to fulfil the purpose of collection or further processing of the information, namely 5 years after the closure of the administrative file to which the consultation mechanism relates to. A file is closed at the latest once there has been a final outcome in relation to the initiative to which the consultation mechanism contributed.
How do we protect and safeguard your personal data?
All personal data in electronic format (e-mails, documents, databases, uploaded batches of data, etc.) are stored on the servers of the Single Resolution Board and/or the European Commission respectively. All processing operations are carried out pursuant to the Commission Decision (EU, Euratom) 2017/46 of 10 January 2017 on the security of communication and information systems in the European Commission.
Who has access to your personal data and to whom are they disclosed?
Responses and contributions received to a consultation will be published on the internet in an anonymized form, not disclosing any personal data.
Access to your personal data is provided to the SRB staff responsible for carrying out this processing operation and to authorised staff of the European Commision responsible for operationg the EU survey tool on a ‘need to know’ basis. Such staff abide by statutory, and when required, additional confidentiality agreements. Access to your personal data may, where relevant, be provided to the EU Courts, the European Ombudsman or the European Court of Auditors.
What are your rights and how can you exercise them?
You have specific rights as a ‘data subject’ under Chapter III (Articles 14-25) of Regulation (EU) 2018/1725, in particular the right to access your personal data and to rectify them in case your personal data are inaccurate or incomplete. Under certain conditions, you have the right to erase your personal data, to restrict the processing of your personal data, to object to the processing of your personal data and the right to data portability.
You can exercise your rights also by contacting the Data Controller, or in case of conflict the ‘Data Protection Officer’. If necessary, you can also address the ‘European Data Protection Supervisor’. Their contact details are provided in the section below.
General comments or questions, concerns or complaints concerning the collection and use of your personal data
Should you have general concerns concerning the processing of your personal data or your rights, you may contact the Data Controller, by emailing: SRBemail@example.com.
The Data Protection Officer (DPO) of the SRB
You may contact the SRB Data Protection Officer (SRB-DPO@srb.europa.eu) with regard to issues related to the processing of your personal data under Regulation (EU) 2018/1725.
The European Data Protection Supervisor (EDPS)
You have the right to have recourse (i.e. you can lodge a complaint) to the European Data Protection Supervisor (firstname.lastname@example.org) if you consider that your rights under Regulation (EU) 2018/1725 have been infringed as a result of the processing of your personal data.