Privacy statement for subscription to the Supervision Blog Newsletter

The Supervision Blog Newsletter is circulated via email to all subscribers to alert them to the publication of Supervision Blog posts.

What is our legal framework?

All personal data are processed in accordance with European Union data protection law, that is, in line with Regulation (EU) 2018/1725 (“the EUDPR”).

Why do we process personal data?

Personal data, in this case email addresses only, are processed in order for us to be able to send you an automated email once a blog post is published on the Supervision Blog, and to inform subscribers of events organised around key Supervision Blog publications, such as webinars, background briefings and “meet the author” events.

What is the legal basis for processing your personal data?

Your personal data are processed by the ECB because you consented to this processing by providing your email address when subscribing to the Supervision Blog Newsletter. You may withdraw your consent at any time by contacting the Blog & Speakers team in the Public Communication Division at ecbblog@ecb.europa.eu. All processing of your personal information will stop once you withdraw your consent; however, any processing that has already taken place remains lawful.

Who is responsible for processing your personal data?

The ECB (the data controller) decides why and how your personal data should be processed. The Blog & Speakers team in the Public Communication Division (the data processor) is responsible for processing the data.

Who will be the recipients of your personal data?

The recipients of your email address (including entities who have access to that personal data) are authorised staff members of the Directorate-General Communication, as well as authorised staff members of CleverReach and of its subcontractors, all based in the European Union.

What categories of personal data are collected?

For the purposes of subscription to the Newsletter, the ECB processes email addresses only.

Will your personal data (in a clear or encrypted form) be processed (e.g. transferred, accessed or stored) in third countries or by international organisations?

The ECB does not foresee any transfers of your personal data to countries outside of the European Union (“third countries”) or international organisations. However, your personal data might exceptionally be processed in third countries/international organisations based on the derogations for specific situations set out in Article 50(1) of the EUDPR.

How long will the ECB keep personal data?

Your personal data will be stored for as long as you are subscribed to the ECB Blog Newsletter. If you choose to unsubscribe, your personal data will be deleted within three months.

What are your rights?

You have the right to access your personal data and correct any data that is inaccurate or incomplete. You also have (with some limitations) the right to delete your personal data and to object to or to restrict the processing of your personal data in line with the EUDPR. The ECB may restrict your rights to safeguard the interests and objectives referred to in Article 25(1) of the EUDPR.

Who can you contact for queries or requests?

You can exercise your rights by contacting the Blog & Speakers team in the Public Communication Division at ecbblog@ecb.europa.eu. You can also directly contact the ECB’s Data Protection Officer at dpo@ecb.europa.eu for all queries relating to your personal data.

Addressing the European Data Protection Supervisor

If you consider that your rights under the EUDPR have been infringed as a result of the processing of your personal data, you have the right to lodge a complaint with the European Data Protection Supervisor at any time.