Data Protection Athens 2024

Conference ‘CITIZENS CAN DEFEAT DISINFORMATION. 
Civil society for an open democratic debate’

27 November 2024, Greece, Athens– Press Centre of the Secretariat General for Communication & Media, 
Frangoudi 11 & Alexandrou Pantou

Data Protection Notice

Who is responsible for the processing of your personal data?

The Conference is organised by the European Economic and Social Committee (EESC), which is the data controller in charge of the processing of your personal data. The service responsible for processing your personal data on behalf of the controller is the EESC REX Section rex@eesc.europa.eu.

What is the purpose of the processing?

Your personal data will be processed in order to:

• confirm your participation in the Conference
• give you access to the premises of the Secretariat General for Communication & Media, hosting the event
• fulfil the communication objectives of the Conference (e.g. webstreaming of the event)

The EESC is not responsible for recordings (such as photographs or videos) made by participants in a private capacity.

What is the legal basis for the processing?

Regulation (EU) 2018/1725 applies to the processing of your personal data collected for the organisation and management of the Conference. The legal basis for the processing of your personal data is Article 5(1)(a) of Regulation (EU) 2018/1725, as the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in a Union institution or body.

The processing of certain categories of your personal data as described in this data protection notice will be carried out based on your consent (Article 5(1)(d) of Regulation (EU) 2018/1725.

What personal data are processed?

The following personal data will be processed:

• information necessary for confirming your participation: first name, last name, e-mail, name of organisation

Your consent is required for:

• sharing certain data (first name, last name, name of organisation) with the Secretariat General for Communication & Media, for the purpose of the participants’ admittance into the conference room
• photos related to the Conference
• attendee list containing your name and organisation, which will be shared among participants.

Who are the recipients or categories of recipients of your personal data?

The recipients of your data will be the EESC REX staff in charge of the organisation, management and follow-up of this event. Your name and organisation will be shared with the Secretariat General for Communication & Media, for the purpose of participants’ admittance into the room. Your email address will not be shared.

Under certain conditions defined in law, we may disclose your information to third parties (such as the European Anti-Fraud Office, the Court of Auditors or law enforcement authorities) if it is necessary and proportionate for lawful, specific purposes.

We will never share your personal data for direct marketing purposes.

Photographs could be published in the context of the Conference and in the framework of EESC activities on the web, including via social media.

We use social media to provide information about and promote the Conference. The use of social media does not in any way imply endorsement of their privacy policies. In the event that one or more social media are unavailable, we accept no responsibility for lack of service due to their downtime. Each company explains its policy of data collection and processing, its use of data, user rights and the ways in which users can protect their privacy when using these services.

Are your personal data transferred to a third country (non-EU Member State) or international organisation?

No.

How can you exercise your rights?

You have the right to request access to your personal data. You also have the right to request rectification or erasure of your personal data or restriction of the processing of your personal data. You also have the right to withdraw your consent at any time. Please note that withdrawal of consent will not have retroactive effect (processing of your personal data based on your consent before withdrawal is lawful up to the moment when you withdraw your consent).

Where applicable, you have the right to object to the processing of your data. Where applicable, you have the right to receive your personal data provided to the controller or to have your personal data transmitted directly to another controller (data portability).

You can direct your queries to rex@eesc.europa.eu. Your query will be dealt without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary.

You have the right to lodge a complaint with the European Data Protection Supervisor if you consider that your rights under Regulation (EU) 2018/1725 have been infringed as a result of the processing of your personal data.

How long are your personal data kept for?

Your data (excluding photos that have been published) will be kept for a maximum period of 12 months after the end of the event, unless you explicitly agree to your contact details being kept in order to receive invitations to future similar events organised by the EESC.

If you wish to delete these data at any time after you have given your consent, please contact us at rex@rex@eesc.europa.eu and we will do so within 15 working days upon receipt of your request or after the latest correspondence with you about your request.

Your photos that have been published (for example on the web or in publications) will remain in that format indefinitely.

Are personal data collected used for automated decision-making, including profiling?

The EESC will not use your personal data to make automated decisions about you. ‘Automated decisions’ are defined as decisions made without human intervention.

Will your personal data be further processed for a purpose other than that for which the data were obtained?

Your personal data will not be further processed for a different purpose than the ones mentioned above.

Who can you contact if you have queries or complaints?

If you have any further questions about the processing of your personal data, please contact the unit in charge of the processing of your personal data: REX Section unit and contact rex@eesc.europa.eu.

You may also contact the EESC data protection officer by using the relevant contact form and/or the European Data Protection Supervisor by using the relevant contact form  at any time.