Privacy statement for news email alerts for the media

You can subscribe to automatically receive news published on the ECB, ESRB and Banking Supervision websites directly in your mailbox. To do so, you are asked to provide us with some personal data.

What is our legal framework?

All personal data are processed in accordance with European Union data protection law, that is to say in line with Regulation (EU) 2018/1725 (‘EUDPR’).

Why do we process personal data?

Personal data are processed in order to manage subscriptions, distribute and evaluate email alerts announcing the publication of ECB, ESRB and Banking Supervision news and further analyse the improvement and development of email alerts.

What is the legal basis for processing your personal data?

Your personal data are processed by the ECB:

• in the performance of a task carried out in the public interest, based on Article 5(1)(a) EUDPR;
• because you consented to this processing by providing the personal data requested in subscribing to press release email alerts. You may withdraw your consent at any time by contacting the ECB’s Communications Solutions team in the Design & Digital Division at [email protected]. All processing of your personal information will stop once you withdraw your consent; however, any processing that has already taken place remains lawful.

Who is responsible for processing your personal data?

The ECB is the controller for the processing of your personal data. The Communications Solutions team in the Design & Digital Division in the Directorate General Communications is responsible for this processing.

Who will be the recipients of your personal data?

The recipients of your personal data (including entities who have access to that personal data) are authorised staff members of the Directorate General Communications, as well as authorised staff members of CleverReach and of its subcontractors, all based in the EU.

What categories of personal data are collected?

The ECB processes the following personal data:

• name
• email address
• company/organisation

Will your personal data (in a clear or encrypted form) be processed (e.g. transferred, accessed or stored) in third countries or by international organisations?

Your personal data might exceptionally be processed in third countries/international organisations based on the derogations for specific situations set out in Article 50(1) EUDPR.

How long will the ECB keep personal data?

Your personal data will be stored for as long as you are subscribed to the email alerts. If you choose to unsubscribe, your personal data will be deleted within three months.

What are your rights?

You have the right to access your personal data and correct any data that is inaccurate or incomplete. You also have (with some limitations) the right to delete your personal data and to object to or to restrict the processing of your personal data in line with EUDPR. The ECB may restrict your rights to safeguard the interests and objectives referred to in Article 25(1) EUDPR.

Who can you contact for queries or requests?

You can exercise your rights by contacting the Communications Solutions team at [email protected]. You can also directly contact the ECB’s Data Protection Officer at [email protected] for all queries relating to your personal data.

Addressing the European Data Protection Supervisor

If you consider that your rights under the EUDPR have been infringed as a result of the processing of your personal data, you have the right to lodge a complaint with the European Data Protection Supervisor at any time.