Privacy statement for the awarding of prizes following the EuroSteps walking challenge

The European Central Bank (ECB) and the Eurosystem National Central Banks are organising the EuroSteps Walking Challenge to promote financial literacy in an engaging, accessible way across all euro‑area countries. The walking challenge is carried out via the App Walk15 and runs (including registration period) from 08:00 CET on 1 March to 23:59 CET on 30 April. At the end of the challenge, the following prizes will be awarded to ten (10) participants with the highest step count, as well as ten (10) participants chosen at random:

• Four four-day Europe-wide Interrail pass for 2 people;
• Six Bembel (a traditional Frankfurt jug);
• Ten goodie bags filled with ECB memorabilia;
• Other prizes will be awarded on a national level. Dedicated privacy statements can be found on the respective National Central Bank's website. 

Prize winners will be contacted via Walk15 to obtain consent that allows the provider to share personal information (e.g. email, postal address) with the European Central Bank and the National Central Banks to send the prizes.

Detailed terms and conditions are available on the ECB website.

What is our legal framework?

All personal data are processed in accordance with European Union data protection law, that is to say in line with Regulation (EU) 2018/1725 (‘EUDPR’).

Why do we process personal data?

All personal data are collected and processed based on the participants’ consent for the purpose of arranging the delivery of the prizes in the context of the EuroSteps walking challenge such as contacting and providing the participants with relevant information, awarding the prizes and publishing the usernames of the winners on the ECB and/or Walk15 websites, as well as on their social media channels (Facebook, Instagram, X (Twitter) and LinkedIn).

By providing the personal data requested, participants consent to the aforementioned processing. Participants can withdraw their consent at any time by contacting the ECB’s Directorate General Communication at IntWomensDay@ecb.europa.eu. Future processing of their personal information will stop once they have withdrawn their consent, but prior processing will remain lawful.

What is the legal basis for processing your personal data?

Your personal data are processed by the ECB:

• because you consented to this processing by providing the personal data requested. You may withdraw your consent at any time by contacting the above-mentioned contact point. All processing of your personal information will stop once you withdraw your consent; however, any processing that has already taken place remains lawful.

Who is responsible for processing your personal data?

The ECB is the data controller and the ECB’s Directorate General Communications is responsible for processing your personal data. Contact details can be found on ECB’s website.

Who will be the recipients of your personal data?

The recipients of your personal data (including entities who have access to that personal data) are employees at the Design and Digital Division in the ECB’s Directorate General Communications.

The usernames of the winners published on the ECB and/or Walk15 website and social media channels will be accessible to the general public.

What categories of personal data are collected?

The ECB processes the following personal data:

• personal details (title, name and surname);
• contact details (email address, postal address)
• gender

For the interrail pass, the following additional data are requested and processed:

• date of birth;
• additional personal data as indicated on your personal ID/passport

Will your personal data (in a clear or encrypted form) be processed (e.g. transferred, accessed or stored) in third countries or by international organisations?

The ECB does not foresee any transfers of your personal data to third countries or international organisations. However, your personal data might exceptionally be processed in third countries/international organisations based on the derogations for specific situations set out in Article 50(1) EUDPR.

How long will the ECB keep personal data?

Your personal data will be stored for a maximum of three (3) months, starting from the date of providing your consent to receive the awarded prize. After the three-month period has expired the data will be deleted.

What are your rights?

You have the right to access your personal data and correct any data that is inaccurate or incomplete. You also have (with some limitations) the right to delete your personal data and to object to or to restrict the processing of your personal data in line with EUDPR. The ECB may restrict your rights to safeguard the interests and objectives referred to in Article 25(1) EUDPR.

Who can you contact for queries or requests?

You can exercise your rights by contacting IntWomensDay@ecb.europa.eu. You can also directly contact the ECB’s Data Protection Officer at dpo@ecb.europa.eu for all queries relating to your personal data.

Addressing the European Data Protection Supervisor

If you consider that your rights under the EUDPR have been infringed as a result of the processing of your personal data, you have the right to lodge a complaint with the European Data Protection Supervisor at any time.