Data Protection Notice for the EU Open for Business campaign 2019


Your personal data is processed in accordance with Regulation (EU) No 2018/17251 on the protection of individuals with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data.

The data co-controllers of the processing operation are:
The Head of Unit GROW A.1 Communication and Document Management of DG Internal Market, Industry, Entrepreneurship and SMES, European Commission. GROW-A1@ec.europa.eu and the Head of Unit A.1 COSME, Executive Agency for Small and Medium-sized Enterprises (EASME), EASME-COSME@ec.europa.eu 

The following entities process your personal data on behalf of the data controller:

These entities process your personal data in accordance with Regulation (EU) No 2018/1725 or Regulation (EU) 2016/679, respectively.

The legal basis for the processing activities are Article 5(a) of Regulation EU 2018/1725 because processing is necessary for the performance of a task carried out in the public interest (or in the exercise of official authority vested in the Union institution or body)2 and Article 5(d) of Regulation EU 2018/1725 based on your explicit consent for your non- mandatory personal data indicated below.

The purposes of this processing operation are: to reply to questions sent through the contact form; to register and manage your participation at the Info Days of the EU Open for Business campaign 2019; to provide you with access to the event venue; include you in the list of participants; to allow networking among participants; to inform the participants about follow-up activities of the events/related to the topic of the events, including feedback collection and specific, related communication activities, such as phone calls and emailin, to monitor and evaluate the communication campaign.

The following of your personal data are collected through the contact form: your first name, last name, e-mail address, are mandatory for the purpose outlined above.

The following of your personal data are collected for the Info Days registration: your first name, last name, gender, title, organisation, function, professional e-mail address, phone number, office address are mandatory for the purpose outlined above.

In addition, the following non-mandatory personal data are collected in case of participation at the Info Days: your photo and videos, mobile phone number, fax number, your social media accounts. These can only be processed based on your explicit prior consent. It is indeed possible that photographs and video of you will be taken during the event and might be used for related communication purposes, including web streaming, on Internet and social media such as LinkedIn, Twitter and Facebook3. Upon registration, you can give your explicit consent to have your images recorded and published on related communication channels. In the absence of your consent, the organiser will offer suitable alternatives, so that you can fully take part in the event.

The recipients of your personal data will be EASME and Commission staff in charge of the management of the EU Open for Business campaign, staff of ICF MOSTRA in charge of the campaign and the events, staff of the Enterprise Europe Network (as co-organiser of the campaign and the events), agents of the security personnel, participants of the event as well as the bodies charged with monitoring or inspection tasks in application of EU law (e.g. internal audits, Court of Auditors, European Anti-fraud Office (OLAF)).   

Your personal data will not be transferred to third countries or international organisations.

The processing of your data will not include automated decision-making (such as profiling).

Your personal data will be kept for a maximum period of 3 years starting from 08/04/2019. Data will be deleted at the end of this period.

You have the right to access your personal data and to request your personal data to be rectified, if the data is inaccurate or incomplete; where applicable, you have the right to request restriction or to object to processing, to request a copy or erasure of your personal data held by the data controller. If processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent before its withdrawal.

Your request to exercise one of the above rights will be dealt with without undue delay and within one month.

If you have any queries concerning the processing of your personal data, you may address them to GROW-A1@ec.europa.eu (entity acting as data controller).

You shall have right of recourse at any time to the Commission Data Protection Officer at DATA-PROTECTION-OFFICER@ec.europa.eu and to the European Data Protection Supervisor at https://edps.europa.eu.


1 Regulation (EU) 2018/1725 of the European Parliament and of the  Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L295/39 of 21.11.2018).
2 Act of Establishment: Commission Implementing Decision C(2013/771/EU) of 17 December 2013 establishing the 'Executive Agency for Small and Medium-sized Enterprises' and repealing Decisions 2004/20/EC and 2007/372/EC.  
Regulation (EU) No 1287/2013 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 11 December 2013 establishing a Programme for the Competitiveness of Enterprises and small and medium-sized enterprises (COSME) (2014 - 2020) and repealing Decision No 1639/2006/EC.
3 European Commission, Executive Agency for Small and Medium-sized Enterprises (EASME), Enterprise Europe Network social media accounts and web pages, EU Open for Business Info Days’ registration page, and Info Days participants’ social media accounts.