Table of Contents
This privacy statement explains the reason for the processing, the way we collect, handle and ensure protection of all personal data provided, how that information is used and what rights you may exercise in relation to your data (the right to access, rectify, block etc.).
The European institutions are committed to protecting and respecting your privacy. As this HerStoryOurStory campaign collects and further processes personal data, Regulation (EC) N°45/2001, of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data, is applicable.
This statement concerns the processing of the data undertaken for the execution and follow-up of the HerStoryOurStory campaign through web and social media channels. HerStoryOurStory is a digital engagement campaign, under EU-UN Spotlight Initiative, which aims to raise awareness about violence against women and girls. Through interactive animations, it aims to educate players about the issues and demonstrate that we can all take action to help end discrimination and violence against women and girls. It is undertaken by European Commission Directorate-General for International Cooperation and Development, Communication and Transparency Unit. The data controller is the Head of Unit, DG DEVCO Communication and Transparency.
Purpose of the processing operation: European Commission Directorate-General for International Cooperation and Development, Communication and Transparency Unit (referred to hereafter as Data Controller) collects and uses your personal information to implement the HerStoryOurStory digital engagement campaign, which is designed to raise awareness of violence against women and girls and the EU-UN Spotlight Initiative which aims to eliminate it.
The processing operations on personal data linked to the organisation and management of the HerStoryOurStory campaign is necessary in order to help raise awareness of the issue of violence and discrimination against women and girls, and individual actions which can be taken to help eliminate it. The legal basis for such processing is consent provided via a clear, affirmative action on the part of the data subject.
In addition, the processing is necessary as part of the European Commission’s obligation to provide information about EU-financed external action. The legal basis is in the documents governing the Union’s international cooperation and aid, the most important of which is the Common Implementation Regulation of 11 March 2014, Article 4.5.
Data is collected and processed for the following specific purposes:
The personal data collected and further processed are:
European Commission Directorate-General for International Cooperation and Development, Communication and Transparency Unit only keeps the data for the time necessary to fulfil the purpose of collection or further processing.
Data may be kept for the life-time of the EU-UN Spotlight Initiative, which the campaign is designed to raise awareness of. The EU-UN Spotlight Initiative runs from 2017-2024. Data subjects will be reminded annually that they have given their consent, and of what they consented to. Data subjects will be asked to renew their consent when reminded. If data subjects do not renew their consent, their data will be deleted within 15 days. If a data subject does not respond within 30 days, their data will be deleted. All data will be deleted at the end of the Initiative.
The data subject may request for their data to be deleted at any moment by sending an email to: EUROPEAID-Webmaster@ec.europa.eu.
All data in electronic format (e-mails, documents, uploaded batches of data etc.) are stored either on the servers of the European Commission or of its contractors; the operations of which abide by the European Commission’s security decision of 16 August 2006 [C(2006) 3602] concerning the security of information systems used by the European Commission;
The Commission’s contractors and subcontractors are bound by a specific contractual clause for any processing operations of your data on behalf of the Commission, and by the confidentiality obligations deriving from Regulation (EU) 2018/679).
Access to your data submitted as part of the pledge, avatar generator and newsletter(s) sign-up is provided to staff and authorised consultants of the Data Controller and its contractor and sub-contractor, according to the “need to know” principle.
Consultants will be authorised to access your data by written agreement of the Data Controller.
Such staff, consultants, contractors and sub-contractors abide by statutory, and when required, additional confidentiality agreements.
The recipients of your data are staff and authorised consultants of the European Commission Directorate General for International Cooperation and Development and its contractor Novacomm, under a framework contract.
Data submitted to create your campaign avatar (your name, optional) will be available publicly on the campaign website, and via your social networks should you decide to include this data before publishing and sharing your avatar.
According to Regulation (EC) n°45/2001, you are entitled to access your personal data and rectify and/or block it in case the data is inaccurate or incomplete. You can exercise your rights by contacting the data controller, or in case of conflict the Data Protection Officer and if necessary the European Data Protection Supervisor using the contact information given at point 8 below.
If you have comments or questions, any concerns or a complaint regarding the collection and use of your personal data, please feel free to contact the Data Controller using the following contact information:
The Data Controller:
The Data Protection Officer (DPO) of the Commission: DATA-PROTECTION-OFFICER@ec.europa.eu
The European Data Protection Supervisor (EDPS): firstname.lastname@example.org.
The Commission Data Protection Officer publishes the register of all operations processing personal data. You can access the register on the following link: http://ec.europa.eu/dpo-register
This specific processing has been notified to the DPO.
 Regulation (EC) N° 45/2001 (OJ L8 of 12/01/2001).
We use Google Analytics to better understand website traffic and webpage usage. Please confirm whether you agree with the use of Google Analytics or whether you wish to opt-out.