- PRIVACY STATEMENT
Privacy statement for the ECB Girls’ IT Bootcamp
The European Central Bank (ECB) organises the Girls’ IT Bootcamp for female school students. The goal of the bootcamp is to give secondary school-age girls who are resident in the European Union (EU) an insight into the different IT profiles at the ECB and inspire them to consider studying IT and embarking on a future career in this sector.
What is our legal framework?
All personal data are processed in accordance with EU data protection law, that is to say in line with Regulation (EU) 2018/1725 (“EUDPR”).
Why do we process personal data?
All personal data are collected and processed for the purposes of managing the bootcamp, accessing event-related information, ranking the participants, awarding the certificates, and sending relevant information to the participants’ parents/legal guardians.
What is the legal basis for processing your personal data?
Your personal data are processed by the ECB:
- in the performance of a task carried out in the public interest, based on Article 5(1)(a) of the EUDPR;
- because you consented to this processing by providing the personal data requested. You may withdraw your consent at any time by contacting the ECB’s Data Protection Officer (dpo@ecb.europa.eu). All processing of your personal information will stop once you withdraw your consent; however, any processing that has already taken place remains lawful.
Who is responsible for processing your personal data?
The ECB is the controller for the processing of your personal data. The Directorate General Information Systems (DG/IS) is responsible for this processing.
Who will be the recipients of your personal data?
The recipients of your personal data (including entities with access to your personal data) are designated ECB staff members from DG/IS and the Directorate General Human Resources who are responsible for organising the event.
Photos and short video recordings of participants taken during the bootcamp may be published by the ECB on its website. They may also be published by other EU institutions, and/or by the ECB’s partners, and/or on social media channels such as Facebook, Instagram, Flickr and LinkedIn.
What categories of personal data are collected?
The ECB processes the following personal data:
- personal details (name, address, etc.);
- education and training details;
- dietary requirements, allergies, etc.;
- photos and video recordings of the participants taken during the bootcamp.
The personal data of the child and their parent(s)/legal guardian(s) will be provided in an online registration form, which the ECB has developed, and in a signed photo consent document sent via email to a shared mailbox (IT_Bootcamp@ecb.europa.euIT_Bootcamp@ecb.europa.eu). Only the event organisers have access to the mailbox and to the registration form.
Will your personal data (in a clear or encrypted form) be processed (e.g. transferred, accessed or stored) in third countries or by international organisations?
Your personal data might exceptionally be processed in third countries/international organisations based on the derogations for specific situations set out in Article 50(1) of the EUDPR.
How long will the ECB keep personal data?
The submitted registration forms and all documentation will be deleted after the event.
The names of the selected participants and their emergency contacts will be printed out and the printed data will be stored in a secure office that is accessible only to the organisers.
The participants’ personal data included in the registration forms will be stored in the ECB’s internal systems for five years and then automatically deleted.
As a rule, the ECB will keep any photos and video recordings taken during this event for five years, but it may also store them for longer periods for archiving purposes. The photos and video recordings will be used for event-promoting purposes on the ECB’s website and other social media platforms such as Facebook, Instagram, Flickr and LinkedIn and might be given to participants as a souvenir of the event.
Personal data that are posted on social media will be kept for the period indicated by the social media channels in their privacy statements.
What are your rights?
You have the right to access your personal data and correct any data that are inaccurate or incomplete. You also have (with some limitations) the right to delete your personal data and to object to or restrict the processing of your personal data in line with the EUDPR. The ECB may restrict your rights to safeguard the interests and objectives referred to in Article 25(1) of the EUDPR.
Who can you contact for queries or requests?
You can exercise your rights by contacting it_bootcamp@ecb.europa.eu. You can also contact the ECB’s Data Protection Officer directly at dpo@ecb.europa.eu for all queries relating to your personal data.
Addressing the European Data Protection Supervisor
If you consider that your rights under the EUDPR have been infringed as a result of the processing of your personal data, you have the right to lodge a complaint with the European Data Protection Supervisor at any time.