Privacy Statement

For the processing activity: Gov2Gov Platform

1. Introduction

This Privacy Statement describes the measures taken to protect your personal data with regard to the present data processing operation and the rights you have as a data subject.

The European Defence Agency (EDA) safeguards the fundamental rights and freedoms of individuals, especially the right to privacy in relation to the processing of personal data (Article 1.1 of Regulation No 2018/1725).

2. Controller of the Processing Operation

European Defence Agency (EDA)
Rue des Drapiers 17-23
B-1050 Brussels
www.eda.europa.eu

3. Purpose of the Processing

The purpose of this processing is to register authorised governmental users to the Gov2Gov Platform, which is maintained by EDA to support Member States in coordinating joint initiatives. Personal data is shared among registered users to facilitate this coordination.

4. Data Processed

Categories of persons: Registered users acting on behalf of Member States’ authorities.

Data collected: Name, surname, email address, telephone number, representing Member State, professional affiliation, contact details of MS project managers, and associated project titles.

5. Recipients of the Data

Internal: EDA IT administrators and CAP Directorate staff.

External: Other registered Gov2Gov users.

6. Protection and Safeguarding of the Data

EDA applies technical and organisational measures (e.g. firewalls, antivirus) to protect your data from unauthorised access, accidental destruction, loss or alteration, and other unlawful processing activities.

7. Rights of the Data Subject

Data subjects may exercise the following rights:

• Access to personal data
• Rectification of inaccuracies
• Erasure
• Restriction of processing
• Objection to processing
• Withdrawal of consent
• Right not to be subject to automated decision-making

To exercise these rights, contact: g2g@eda.europa.eu
Or contact the Data Protection Officer at: dataprotection@eda.europa.eu

8. Time Limit for Storing Data

Personal data is retained as long as the account is active. It is deleted upon account deactivation or platform closure.

9. Legal Basis for Processing

Based on Article 5(1)(a) and (d) of Regulation 2018/1725.

Processing is necessary for tasks in the public interest under Article 5 of the Council Decision (CFSP) 2015/1835. Consent is also required for registration to the platform.

10. Contact DPO

For queries on data protection, contact the Data Protection Officer: dataprotection@eda.europa.eu

11. Recourse to EDPS

You may contact the European Data Protection Supervisor (EDPS) at any time:
www.edps.europa.eu
edps@edps.europa.eu

12. Additional Information

More information on data protection can be found at:
https://www.eda.europa.eu/Aboutus/how-we-work/data-protection