Privacy statement for the ECB Girls’ IT Bootcamp

The Girls’ IT Bootcamp is organised by the European Central Bank (ECB) for female school students. The goal of the bootcamp is to give school age girls holding EU nationality an insight into the different IT profiles at the ECB and inspire them to consider future studies and a career in IT.

What is our legal framework?

All personal data are processed in accordance with European Union data protection law, that is to say in line with Regulation (EU) 2018/1725 (‘EUDPR’).

Why do we process personal data?

All personal data are collected and processed for the purposes of managing the bootcamp, accessing event-related information, ranking the participants, awarding the certificates, and contacting the participants’ parents/legal guardian with relevant information.

What is the legal basis for processing your personal data?

Your personal data are processed by the ECB:

• in the performance of a task carried out in the public interest, based on Article 5(1)(a) of EUDPR;
• because you consented to this processing by providing the personal data requested. You may withdraw your consent at any time by contacting the ECB Data Protection Officer ([email protected]). All processing of your personal information will stop once you withdraw your consent; however, any processing that has already taken place remains lawful.

Who is responsible for processing your personal data?

The ECB is the controller for the processing of your personal data. DG Information System (DG/IS) is responsible for this processing.

Who will be the recipients of your personal data?

The recipients of your personal data (including entities who have access to that personal data) are designated ECB staff members from Directorate General Information Systems and Directorate General Human Resources responsible for the organisation of the event.

Only the first name of the participants will be given to external programming instructors during the programming workshops, for the purpose of conducting the workshops.

Photos and short video recordings of the participants taken during the bootcamp may be published by the ECB on the ECB’s website, and/or by other EU institutions, and/or by the ECB’s partners, as well as on social media channels such as Facebook, X, Instagram, Flickr and LinkedIn.

What categories of personal data are collected?

The ECB processes the following personal data:

• Personal details (name, address, etc.)
• Education and training details
• Dietary requirements, allergies, etc.
• Photos and videos of the participants taken during the bootcamp

The personal data of the child and their parents/legal guardian will be specified in an online registration form, which has been developed by the ECB, and in a photo consent document signed and sent via email to a shared mailbox ([email protected]). Only the organisers of the event have access to the mailbox and to the registration form.

Will your personal data (in a clear or encrypted form) be processed (e.g. transferred, accessed or stored) in third countries or by international organisations?

Your personal data might exceptionally be processed in third countries/international organisations based on the derogations for specific situations set out in Article 50(1) EUDPR.

How long will the ECB keep personal data?

The registration forms submitted and all documentation will be deleted after the event.

The names of the selected girls and their emergency contacts will be printed out and the printed data will be stored in a secure office which is accessible only to the organisers.

The participants’ personal data included in the registration forms will be stored in the ECB’s internal systems for a period of five years and then automatically deleted.

The ECB will keep the photos and the videos taken during this event as a rule for five years, but they may also be stored by the ECB for longer periods for archiving purposes. They will be used for event promoting purposes on the ECB’s website and other social media platforms such as LinkedIn, Instagram, Facebook, Flickr and X and might be given to the participants as a souvenir of the event.

Personal data which are posted on social media will be kept for the period indicated by the social media channels in their privacy statements.

What are your rights?

You have the right to access your personal data and correct any data that is inaccurate or incomplete. You also have (with some limitations) the right to delete your personal data and to object to or to restrict the processing of your personal data in line with EUDPR. The ECB may restrict your rights to safeguard the interests and objectives referred to in Article 25(1) EUDPR.

Who can you contact for queries or requests?

You can exercise your rights by contacting [email protected]. You can also directly contact the ECB’s Data Protection Officer at [email protected] for all queries relating to your personal data.

Addressing the European Data Protection Supervisor

If you consider that your rights under the EUDPR have been infringed as a result of the processing of your personal data, you have the right to lodge a complaint with the European Data Protection Supervisor at any time.