Contact us privacy statement

The personal data you provide in the EEA online contact form is processed in accordance with regulation (EU) No 2018/17251 of the European Parliament and of the Council of 23 October 2018 on the protection of natural person with regard to the processing of personal data by the EU institutions, bodies, offices and agencies.  

Processing operations are under the responsibility of the EEA Communication Programme, acting as Data Controller, regarding the collection and processing of personal data. The Data Controller may be contacted via our online form.

1. Purpose(s) of processing 

2. Recipients of the data processed  

In order to answer your enquiry, access to your personal data is given to a limited number of staff within the EEA Communication Programme that are responsible for coordinating the answers given to enquiries. In exceptional circumstances, it may be necessary to divulge your name (if provided) and/or email address to EEA thematic experts in order to evaluate the level of complexity of the EEA’s answer. Disclosure of personal data to another EU institution may only occur if the reply to the enquiry relates to an issue for which the EEA has no or limited competence. Correspondence with competent Commission staff member is done via internal e-mail. No personal data is shared with third parties for direct marketing purposes.  

3. Categories of data processed  

The only personal data collected and further processed is the information you encode yourself in the online form. The only obligatory fields are your email address and your enquiry; optionally, you may provide your name and your main area of occupation. The personal data collected is the strict minimum required to ensure that the EEA can reply to your enquiry.  

4. Modalities for the processing operation  

Personal data is provided via a submission form available online. It is an automated processing operation whereby you input the data directly in the form which is then stored in a database with a given case number. The data will be used for answering your enquiry via email. The further mail conversation is stored and linked to the case in the database. 

5. Safeguarding of data processed 

The data is stored securely in a database with encryption in transit (TLS). Access to the enquiries database is available to a limited number of EEA staff upon credentials.

All consequent mail communication is also encrypted in transit via STARTTLS and sent via Office365 mail servers located in the EU. 

6. Right of access and rectification  

If you wish to exercise your rights as a data subject and access, modify or delete your personal data in the database, please address your request to our online form.  

9. Right to appeal  

You are entitled to have recourse at any time to the European Data Protection Supervisor (http://www.edps.europa.eu; EDPS@edps.europa.eu) if you consider that your rights under Regulation (EU) 2018/1725 have been infringed as a result of the processing of your personal data by the EEA. 

You may also contact the EEA’s Data Protection Officer (DPO) in case of any difficulties or for any questions relating to the processing of your personal data at the following e-mail address: DPO@eea.europa.eu.