Information on data protection
- Introduction
- Why does Eurofound process your personal data?
- What types of personal data we process?
- What legal bases justify the processing of your personal data?
- Who has access to your personal data?
- How long do we keep your data?
- What are your rights?
- Complaint to the European Data Protection Supervisor
- Investigations by the DPO
Introduction
European data protection rules are all about empowering people, to give them control over how their personal data are used. At Eurofound we take this obligation seriously. Data protection and privacy are embedded in our daily work, from our communication activities to our European-wide surveys and research publications.
On this page you will find information on the reasons why we may process personal data and what types of data we process, as well as on your rights and contact details should you have any question.
Why does Eurofound process your personal data?
Eurofound may process your personal data (also known as personal information) for a number of reasons: from dealing with public requests for information, visitor information, handling of complaints, inviting you to a meeting or to one of our research projects, or simply because you submit them when subscribing to publications or events on our website. Regardless of the reason, processing is always carried out in accordance with Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018.
All purposes of processing can be found in our Data Protection Register, or in our data protection notices. Both are updated regularly, so we advise you to consult them periodically.
What types of personal data we process?
The types of personal data depend on the purpose of processing. They may include your name and contact details, your CV and any certifying documents (when applying for a job or traineeship), your dietary and mobility requirements (when attending an event organised by Eurofound), or the acceptance of cookies.
The exact categories of personal data are identified in the applicable data protection notice.
What legal bases justify the processing of your personal data?
In most of the situations, Eurofound processes your personal data for the performance of a task carried out in the public interest, for compliance with a legal obligation, or based on your consent. Other legal bases might apply, though. Detailed information on the legal basis is always provided in the applicable Data Protection Notice.
Who has access to your personal data?
Unless otherwise stated in a specific Data Protection Notice, access to your personal data will be given exclusively to our staff members, who need to comply with statutory obligations of confidentiality.
How long do we keep your data?
For each processing operation there is a defined retention period that specifies the period for which your personal data are kept. Depending on the processing operation, the retention period can vary. The exact retention period is specified in the applicable data protection notice.
What are your rights?
Regulation (EU) 2018/1725 grants you, as data subject, the possibility to exercise the following rights:
- know when your personal data is being processed
- access your personal data
- have a copy of your personal data
- rectify your personal data should it be inaccurate or incomplete
- have your data deleted
- restrict the processing of your data
- object to the processing of your data
- port your data, and
- not be subject to automated decisions (i.e., made solely by machines) affecting you.
The exercise of these rights is free. However, where requests are manifestly unfounded or excessive, Eurofound may refuse to act on the request. Should this be the case, you will be informed accordingly.
To exercise any of these rights, please send your request by email or by post in a sealed envelope. See Contacts below. You should make clear in your request what right(s) you are exercising.
You must also provide a copy of an identification document, for example an ID card or passport. The following data should be visible: name, identification number, country of issue, period of validity, and date of birth. Any other data (e.g., photo or signature) may be blacked out. We will use these data exclusively to verify your identity. Once your request has been dealt with, we will securely destroy the document. In principle, we will not accept any other means of evidence of your identity. Should you wish to propose alternatives, we will assess their adequacy on a case-by-case basis.
Complaint to the European Data Protection Supervisor
In addition to the rights listed above, you can also complain to the EDPS, our supervisory authority, in case you feel Eurofound has infringed provisions of Regulation (EU) 2018/1725 when processing your personal data. You will find more information on this on the EDPS website.
Investigations by the DPO
Eurofound’s Data Protection Officer (DPO) may, at the request of any individual, investigate matters and occurrences directly relating to his/her tasks. Should you wish to avail of this opportunity, please send your request for an investigation to DataProtectionOfficer@eurofound.europa.eu.
The DPO will send an acknowledgement of receipt within 15 working days and will verify whether the request falls under the DPO's responsibility and whether or not it shall be treated as confidential.
The DPO will report back to the person who commissioned the investigation no later than three months following receipt of the request, unless in the case of obvious misuse of this right, in which case no report will be done. This deadline may, however, be suspended until the DPO has obtained any information deemed necessary to conclude the investigation.
Contacts
Eurofound’s Data Protection Officer | European Data Protection Supervisor |
Data Protection Officer Wyattville Road, Loughlinstown, Co. Dublin, D18 KP65, Ireland Tel:(+353 1) 204 3100 | Rue Wiertz 60 Tel: (+32) 2 283 1900 Email: edps@edps.europa.eu |
Data protection notices
The following specific data protection notices apply to the processing of personal data by Eurofound.
Name of personal data processing operation / Web service | Purpose | Related document |
Investigations by the DPO | Data protection notice on investigations by the DPO | Privacy statement [38kb pdf] |
Handling data protection requests | Data protection notice on handling requests submitted under the data protection legal framework | Privacy statement [40 kb pdf] |
Recruitment | Selection and recruitment of Officials, Temporary Agents (TAs), Contract Agents, SNEs and trainees. | Privacy statement [250kb pdf] |
Traineeships | Data protection notice on the engagement of trainees. | Pivacy statement [93kb pdf] |
Procurement | The purpose of processing is the management and administration of procurement procedures by Eurofound. | Privacy statement [120kb pdf] |
Call for academic experts for Eurofound's Advisory Committees | Data protection notice on the processing of personal data provided in connection with the call for academic experts. | Privacy statement [162kb pdf] |
Financial transactions (ABAC) | The purpose of processing is to provide treasury services and general accounting services. | Privacy statement [93kb pdf] |
Personal data in CVs and Declarations of Interest (DoIs) – Management Board members | Management of conflicts of interests. | Privacy statement [132kb pdf] |
Personal data in CVs and Declarations of Interest (DoIs) – Eurofound Management Committee members | Management of conflicts of interests. | Privacy statement [129kb pdf] |
Customer Relationship Management (CRM) | Personal data processed for the targeted dissemination of Eurofound research findings/data, for subscriptions, events, visits and external communication. | Privacy statement [217kb pdf] |
DocuSign signature | Data protection notice on the use of DocuSign signature. | Privacy statement [100kb pdf] |
Microsoft Teams | Data protection notice on the use of Microsoft Teams. | Privacy statement [155kb pdf] |
Canva Teams | To treat images (i.e., editing, applying effects, downloading in various formats) for creating corporate content for use on social media so that we can disseminate our work. | Privacy statement [96kb pdf] |
Mail Registration System | The purpose of processing is record receipt and despatch of mail items (paper and electronic). The mail register is a centralised permanent record of formal incoming and outgoing correspondence including emails. | Privacy statement [83kb pdf] |
Public access to documents requests | The purpose of collecting personal data is to manage the applications for public access to specific Eurofound documents. | Privacy statement [112kb pdf] |
Video surveillance | Eurofound uses a video surveillance system with video recording (CCTV) for monitoring its premises and for guaranteeing safety, security and access control. | Privacy statement [304kb pdf] |
Use of Microsoft 365 | Data subjects of this processing operation include Eurofound staff members as well as any natural person whose personal data is being processed using M365 (e.g. a participant in a Teams call; an email recipient; a participant in a survey). | Privacy statement [182kb pdf] |
Electronic log file management | The purpose of processing is to ensure that Eurofound ICT systems work the way they should and to minimize the unavailability of such systems. In particular, personal data is processed to detect and prevent attacks. | Privacy statement [90kb pdf] |
CERT-EU services | The purpose of processing is to contribute to the security of the ICT infrastructure of the Agency and to enable CERT-EU to carry out its mission, which is to contribute to the security of the ICT infrastructure of all Union institutions, bodies and agencies. | Privacy statement [135kb pdf] |
Article 90 of the Staff Regulations: Requests or Complaints | Personal data are processed in order to establish the relevant facts and to assess them from a legal point of view, in order to provide the person who submits the request / complaint with a decision on his/her complaint or request. | Privacy statement [128kb pdf] |
User feeedback survey 2020 | The purpose of the survey is to get stakeholders' views on Eurofound research and communication and how these can be improved in the future to best suit users' information requirements. | Privacy statement [190kb pdf] |
Registration of visitors | The purpose of the processing is to register entry and exit on-site of all Eurofound visitors for security and health and safety purposes. | Privacy statement [306kb pdf] |
Joint event 22/11/2023 - Skills for jobs | The purpose of processing is to organise, together with the European Commission’s Representation Officer in Ireland, a joint event on Skills, under the banner of the European Year of Skills 2023 . In particular, the aim of the processing is to register individuals and to take photos of the event. | Privacy statement [157kb pdf] |
Europe Day 2022 – All about YOUth event | To ensure the proper organisation, operation and management of European Open Day as part of the European Year of Youth, Eurofound needs to collect and further process participants data. | Privacy statement [138kb pdf] |
Eurofound exhibition at the EP - October 2024 | The purpose of processing is to organise the Eurofound exhibition: 'The future of living and working in Europe', which will take place on 15–17 October at the premises of the European Parliament. | Privacy statement [100 kb pdf] |
Tripartite Exchange Seminar (TES) 2024 | Select the participants who will attend the Tripartite Exchange Seminar (TES) 2024 in Brussels | Privacy statement [176kb, pdf] |
Open Day 2024 | Eurofound is organising an Open Day to increase visibility, raise awareness, and raise the profile of the agency nationally, reaching out to local stakeholders, neighbourhoods and the community. | Privacy statement [110kb, pdf] |
Eurofound’s Summer Forum 2022 expression of interest | Select the participants who will attend the Eurofound Summer Forum 2022 in Dublin | Privacy statement [156kb pdf] |
Event: Youth first! Employment, skills and social policies that work for young Europeans in times of uncertainty | To organise and manage the event ‘Youth first! Employment, skills and social policies that work for young Europeans in times of uncertainty’, which will take place on 8 September 2022, and to support required follow-up. | Privacy statement [231kb pdf] |
Representativeness studies seminars | To organise events, in particular to register participants at the Representativeness studies seminars organised by Eurofound during October/ November 2022, as well as process travel-related expenses. | Privacy statement [138kb pdf] |
Meetings - Webinars - Briefings - Lectures | - Privacy statement for Board meetings. | Privacy statement [98kb pdf] |
- Privacy statement for Advisory Committee meetings. | Privacy statement [96kb pdf] | |
- Generic privacy statement for events (including online registration). | Privacy statement [98kb pdf] | |
- Data protection notice for research stakeholder meetings. | Privacy statement [176kb pdf] | |
- Disclaimer for webinars. | Privacy statement [91kb pdf] | |
- Data protection notice for #DublinBriefings | Privacy statement [93kb pdf] | |
- Data protection notice for #BrusselsBriefings | Privacy statement [150kb pdf] | |
- Data protection notice for Eurofound’s Annual Lecture | Privacy statement [150kb pdf] | |
Contact details of journalists | The purpose of processing is to collect, maintain and update contact information and subscription preferences of journalists, in order to regularly inform them about Eurofound's work. | Privacy statement [68kb pdf] |
European Restructuring Monitor (ERM) database | Eurofound processes personal data to facilitate access requests to the European Restructuring Monitor Events dataset and to analyse the use of ERM data for research purposes. | |
Processing of personal data in Eurofound’s website and subscription services | The purpose of processing is to ensure that Eurofound’s website functions properly, as well as to provide access to services hosted on Eurofound's website (i.e. subscriptions to key topics, CRM subscription management, subscription to forthcoming publications). | Privacy statement [118kb pdf] |
Eurofound’s Content Management System (website) | The CMS is used for the management of internal publishing workflows and interactions with contractors as well as stakeholders. | Privacy statement [125kb pdf] |
Qualitative research | Data protection notice for participants in qualitative research (case studies and interviews). | Privacy statement [144kb pdf] |
Surveys - ECS 2020: Follow-up survey on economic decisions and management practices | The 2022 Economic Decisions and Management Practices Survey is an online follow-up survey of the 4th European Company Survey and re-contacts managers across Europe who gave their permission to be re-contacted in the survey carried out in 2019. | Privacy statement, all languages [164kb pdf] |
Surveys - ECS 2020: Follow-up survey | The purpose of the follow-up survey of the 4th European Company Survey is to re-contact managers across Europe (who gave their permission to be re-contacted in the survey carried out in 2019). | Privacy statement, all languages [106kb pdf] |
Surveys - EWCS 2021: EWCS CATI fieldwork | Survey fieldwork using computer-assisted telephone interviewing. | Privacy statement [142kb pdf] |
Surveys - Living and working in the EU and neighbouring countries (2023) | This document contains information about the processing of personal data for carrying out the Living and working in the EU and neighbouring countries’ survey. | Privacy statement [206kb pdf] |
Surveys - Living and working in the EU (2024) | This document contains information about the processing of personal data for carrying out the Living and working in the EU | Privacy statement [175kb pdf] |