Privacy statement for the ECB survey to gather questions about the digital euro pilot Call for Expression of Interest

WHAT IS OUR LEGAL FRAMEWORK?

All personal data are processed in accordance with European Union data protection law, that is, in line with Regulation (EU) 2018/1725 (the EU’s data protection regulation – EUDPR).

Why do we process personal data?

Completing this survey is voluntary. If you choose to provide personal data, we will process it solely for the purposes described below and in line with this privacy statement. Please only share information that is strictly necessary.

Handling enquiries: this means receiving, reviewing and responding to questions submitted in relation to the digital euro pilot Call for Expression of Interest (the process through which payment service providers (PSPs) can apply to participate in the digital euro pilot) so that PSPs have the information they need before submitting an application.

Improving information and transparency: we process data to help us understand the recurring information needs of PSPs and other prospective applicants and improve the clarity, accessibility and transparency of information and communications relating to the Call for Expression of Interest.

What is the legal basis for processing your personal data?

The legal basis for processing your personal data is your consent, as provided by your voluntary participation in this survey. You may withdraw your consent at any time by contacting the digital euro pilot team at digitaleuro-pilot@ecb.europa.eu. All processing of your personal information will stop once you withdraw your consent; however, any processing that has already taken place will remain lawful.

Who is responsible for processing your personal data?
The European Central Bank (ECB) is the controller for the processing of your personal data. The Market Rollout Division, Directorate Digital Euro, is responsible for the processing itself.

Who are the recipients of your personal data?

Recipients are limited to authorised ECB staff within the Directorate Digital Euro who are involved in handling enquiries about the Call for Expression of Interest. Processing is restricted to (i) receiving, reviewing and answering questions submitted via the form and (ii) supporting transparency and clarity for PSPs and other prospective applicants before they submit an application to participate in the digital euro pilot. No recipients outside the ECB will receive your personal data.

What categories of personal data are collected?

We collect the following categories of personal data, if provided by you:

• Identification data: name, company, industry.
• Contact data: email address.
• Content of your enquiry: the information you include in the open text field “question” when submitting your question about the digital euro pilot. If you include personal data in this field, the ECB will process it for the purposes described in this privacy statement. Please avoid including any personal data that is not strictly necessary.

Will your personal data (in clear or encrypted form) be processed (e.g. transferred, accessed or stored) in countries outside the European Union or by international organisations?

The ECB will not transfer your personal data to countries outside the European Union or to international organisations.

How long will the ECB keep personal data?

Your personal data will be stored for a maximum of 14 months (starting from the day on which the data are collected) before being deleted.

What are your rights?

You have the right to access your personal data and correct any data that are inaccurate or incomplete. You also have (with some limitations) the right to ask for your personal data to be erased and to object to or restrict the processing of your personal data in line with the EUDPR. The ECB may restrict your rights in order to safeguard the interests and objectives referred to in Article 25(1) of the EUDPR.

Who can you contact for queries or requests?

You can exercise your rights by contacting the digital euro pilot team at digitaleuro-pilot@ecb.europa.eu. You can also directly contact the ECB’s Data Protection Officer for all queries relating to your personal data.

Contacting the European Data Protection Supervisor

If you consider that your rights under the EUDPR have been infringed as a result of the processing of your personal data, you have the right to lodge a complaint with the European Data Protection Supervisor at any time.