Privacy statement for statistical information requests

The ECB is committed to user privacy. We only process personal data for the purposes described below. This privacy statement explains how the ECB processes, stores and manages the personal data obtained when it receives requests for data and statistical information.

What is our legal framework?

All personal data are processed in accordance with European Union data protection law, as set out in Regulation (EU) 2018/1725 (EUDPR).

Why do we process personal data?

Personal data are processed for the purpose of answering and handling support requests concerning statistical information sent to the ECB and for our internal management of user enquiries.

What is the legal basis for processing your personal data?

Your personal data are processed by the ECB:

• because you consented to this processing by providing the personal data requested. You may withdraw your consent at any time by contacting us via the webform; select the category “other”. All processing of your personal information will stop once you withdraw your consent; however, any processing that has already taken place remains lawful.

Who is responsible for processing your personal data?

The ECB is the controller for the processing of your personal data. The Directorate General Statistics is responsible for this processing. It can be contacted via the online webform; select the category “other”.

Who will be the recipients of your personal data?

The recipients of your personal data (including entities with access to the personal data) will be designated ECB staff members responsible for handling queries and optimising the reply process. The authorised staff are allocated on a “need to know” basis.

What categories of personal data are collected?

The ECB processes the following personal data:

• Name
• Email address
• Sector of occupation
• Organisation (not mandatory)

Your name, email address and sector of occupation are obtained from the information provided by the user via the statistical information request webform.

Will your personal data (in a clear or encrypted form) be processed (e.g. transferred, accessed or stored) in third countries or by international organisations?

The ECB does not foresee any transfer of your personal data to third countries or international organisations. However, your personal data might exceptionally be processed in third countries or by international organisations based on the derogations for specific situations set out in Article 50(1) EUDPR.

How long will the ECB keep personal data?

Your personal data will be stored for a maximum of five years, counting from the day when they were obtained,I before being deleted.

Data you provide will be further anonymised and aggregated in a way to ensure that you cannot be identified. The data are used for statistical purposes and to optimise and make our responses to the public more efficient by creating automatic rules that will help with the internal management of user requests.

What are your rights?

You have the right to access your personal data and correct any data that are inaccurate or incomplete. You also have (with some limitations) the right to delete your personal data and to object to or to restrict the processing of your personal data in line with the EUDPR. The ECB may restrict your rights to safeguard the interests and objectives referred to in Article 25(1) EUDPR.

Who can you contact for queries or requests?

You can exercise your rights by contacting the Statistics Hotline via the webform as described under “What is the legal basis for processing your personal data?”. You can also directly contact the ECB’s Data Protection Officer at dpo@ecb.europa.eu for all queries relating to your personal data.

Addressing the European Data Protection Supervisor

If you consider that your rights under the EUDPR have been infringed as a result of the processing of your personal data, you have the right to lodge a complaint with the European Data Protection Supervisor at any time.