eu-LISA is highly committed to processing personal data in a lawful way.

When eu-LISA processes personal data, it ensures the respect of rights to privacy and data protection foreseen by Articles 7 and 8 of the Charter of Fundamental Rights of the European Union. In this regard, eu-LISA processes any personal data collected according to the provisions in Regulation (EC) N° 45/2001 on the protection of the individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data. In complement to this text, the Decision of the Management Board on implementing rules relating to Regulation (EC) No 45/2001 also governs the processing of personal data by eu-LISA.

eu-LISA only processes personal data for the performance of tasks carried out in the public interest in accordance with European Union law or whilst legitimately exercising the official authority vested to the Agency. Furthermore, the processing of personal data is lawful as a part of a legal or contractual obligation or when the data subject concerned has given his or her unambiguous consent. In any case, eu-LISA will not process personal data for marketing or commercial purposes.

A "Contact" form is available on the eu-LISA website. When a data subject sends a message to eu-LISA, his or her personal data (surname, first name and email address) will only be used to the extent necessary to reply to the query. In this regard, please consult the privacy notice. For more information pertaining to the way eu-LISA handles queries, please refer to the data subject rights section.

eu-LISA's website provides links to other European Union institutional websites, within the 'europa.eu' domain. Since these are not administered by eu-LISA, we encourage you to review their privacy policies.

In order to ensure that personal data is processed lawfully, eu-LISA appointed a Data Protection Officer that controls the correct application of the data protection principles at the Agency.

Supervison

The Supervisory Authority, in terms of processing personal data, is the European Data Protection Supervisor (EDPS). The EDPS is responsible for the monitoring of European Union institutions and bodies and their compliance with data protection rules, ensuring that the rights to privacy and data protection, as fundamental human rights, are respected. For more information about the EDPS, please refer to this website.