Specific privacy statement

Processing operations are under the responsibility of the Head of the Communication Programme, acting as data Controller, regarding the collection and processing of personal data.

1. Purpose(s) of the processing
   Your personal data is collected and further processed for the purpose of the management and follow-up of your participation in the NATURE@work photography competition, to the extent necessary to ensure that you can be reached in the eventuality of winning a prize and when the Agency wishes to use your photography in one of its publication.
2. Recipients of the data processed
   For the purpose detailed above, access to your personal data is given to EEA staff members in charge of managing the NATURE@work photography competition.
   No personal data is shared with third parties for direct marketing purposes.
   Your name and country of origin may be shared with the wider public and the media, as well as partners. It is only after obtaining your explicit and written agreement that your contact details will be shared with third parties, such as members of the media.
3. Categories of data processed
   The only personal data collected and further processed is the information you encode yourself in the online form. The EEA needs your personal data to be able to contact you in case you win one of the prizes. The compulsory fields concern your title, name, email address, telephone number, your country of citizenship (as only citizens of countries mentioned in the Terms and Conditions are eligible to participate), age (as one of the competition prizes is limited to those aged 18-24), competition category, title of the photo, accompanying text, and information about where your photo was taken.
   Any personal information the competition participants choose to display in their submissions, including the text, will not be collected or further processed by the EEA. The possible privacy issues resulting from such cases remain the responsibility of the competition participants.
4. Modalities for the processing operation
   Personal data is provided via a submission form available online. When submitting data online, it will be an automated processing operation whereby you input the data directly in the form which is then stored in a database.
   All personal data is processed manually for the purpose of management of the reply.
5. Right of access and rectification
   You have no direct access to the data stored. If you wish to modify or delete any of your personal data, you should address your request in writing to the Head of Communication Programme at the following addresses: katja.rosenbohm@eea.europa.eu or European Environment Agency, Mrs Katja Rosenbohm, Head of Communication Programme (COM), Kongens Nytorv 6, 1050 Copenhagen K, Denmark.
6. Legal basis
   The processing of your personal data is necessary for the performance and support of the numerous tasks carried out by the EEA as mandated by Regulation (EC) No 401/2009 of 23 April 2009 on the EEA and Eionet.
7. Legality of processing
   Processing is necessary for the performance of tasks carried out in the public interest on the basis of Regulation (EC) No 401/2009 on the EEA and Eionet (Article 5(a) of Regulation (EC) No 45/2001). In addition, by submitting your application, you express explicitly your consent to the processing operation (Article 5(d) of Regulation (EC) No 45/2001).
8. Data retention
   All personal data received is stored until 31 October 2019. This retention period is appropriate to the purpose of managing the competition while it is still on-going and communicating with the winners and ask their consent when the EEA wishes to use the photos in its publications. Only aggregated and anonymous personal data is processed and kept for statistical purposes.
9. Right to appeal
   You are entitled to have recourse at any time to the European Data Protection Supervisor (http://www.edps.europa.eu; EDPS@edps.europa.eu) if you consider that your rights under Regulation(EC) No 45/2001 have been infringed as a result of the processing of your personal data by the EEA.
   You may also contact the EEA’s Data protection Officer (DPO) in case of any difficulties relating to the processing of your data at the following email address: Data.ProtectionOfficer@eea.europa.eu.