Data Protection

Introduction

This section explains how the Agency for Support for BEREC (BEREC Office) manages and protects personal data (any information relating to an identified or identifiable person) processed in the context of its activities.

BEREC Office, as a European Union (EU) agency, collects and further processes personal data in accordance with the provisions of Regulation (EU) 2018/1725 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data. In complement to this text, the Decision of the Management Board to adopt implementing rules on data protection also governs the processing of personal data by the BEREC Office.

European Data Protection Supervisor

The Agency's supervisory authority, in terms of processing personal data, is the European Data Protection Supervisor (EDPS). The EDPS is responsible for the monitoring of EU institutions, agencies, and bodies and their compliance with data protection rules, ensuring that the rights to privacy and data protection are respected.

For more information, please visit the EDPS website.

Data Protection Officer

In order to ensure compliance with Article 43 of Regulation (EU) 2018/1725, the Agency appointed a Data Protection Officer (DPO).

The main task of the DPO is to ensure, in an independent manner, the internal application of data protection requirements imposed by Regulation (EC) 2018/1725 within the Agency.

How personal data is processed by the BEREC Office

BEREC Office only processes personal data for the performance of tasks carried out in the public interest in accordance with EU law or whilst legitimately exercising the official authority vested to the Agency. Furthermore, the processing of personal data is lawful as a part of a legal or contractual obligation or when the data subject concerned has given his or her unambiguous consent. In any case, BEREC Office will not process personal data for marketing or commercial purposes.

All processing operations of personal data are duly reported to the BEREC Office DPO, and, if the situation requires, to the EDPS.

Register

According to Article 31 of Regulation (EU) 2018/1725, the BEREC Office has a legal obligation to keep a register of all personal data processing operations which have been notified to the DPO. The register aims at ensuring transparency to the public and it is accessible to any interested person.

Visit the register of processing operations.

In order to have further information regarding processing operations at the Agency, contact the DPO ([email protected]). Extracts of the register can be requested in writing.

Your rights when we process your personal data

As a data subject, you have the right to access, rectify and, where processed on the basis of your consent, transfer your data to another controller at any time. You may also request the erasure of your data under certain conditions. Moreover, you also have the right to object to and restrict certain processing of your data.

We will review your requests and grant your rights provided that certain conditions are met. You also have the right to recourse to the EDPS.

For more information about your rights please read the specific privacy notice that specifies in detail your data protection rights and how to exercise them.

The list of privacy notices is available on our Privacy Notices website page.

How to contact us

You can contact us for any aspect regarding your personal data, by sending a written request to the BEREC Office data controller, or to the BEREC Office DPO as follows: