Personal data protection

All personal data collected by the European Centre for the Development of Vocational Training (Cedefop) are processed in accordance with the provisions of Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC.

As a general principle, Cedefop only processes personal data for the performance of  tasks carried out in the public interest on the basis of the Treaties establishing the European Communities, Regulation (EU) 2019/128 of 16 January 2019 establishing a European Centre for the Development of Vocational Training or in the legitimate exercise of official authority vested in Cedefop or in a third party to whom the data are disclosed.

All processing operations of personal data are duly notified to Cedefop’s Data Protection Officer and, as the case may be, to the European Data Protection Supervisor.

Data subjects rights

Data subjects, i.e. the natural persons whose personal data are processed, have certain rights under the Regulation (EU) 2018/1725. In particular, the following rights are provided to the data subjects (under articles 16 to 24 of the Regulation):

• Right to be informed of any processing of their personal data, including information on the controller (who is in charge of the processing), the purpose and the legal basis, the types of data being processed, data recipients, time limits for the processing, as well as possible transfers of personal data to third counties;
• Right of access to one’s personal data, including information on the purpose of the processing of the data, the types of data, data recipients, time limits, as well as possible transfers of personal data to third counties;
• Right to rectify (correct) one’s personal data when inaccurate or incomplete;
• Right to have data erased (“right to be forgotten”) under certain circumstances (e.g. when the data is no longer necessary for the purpose for which they were collected);
• Right to restrict the processing of personal data under certain circumstances (e.g. when the accuracy of the data is contested);
• Right to object to the processing of personal data under certain circumstances;
• Right not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects him or her.

Restriction of data subjects rights

In certain cases, by virtue of article 25 of Regulation (EU) 2018/1725 and of the Internal Rules laid down under Cedefop's Management Board Decision 6/2020, one or several of the data subjects rights may be restricted for a temporary period of time inter alia, on the grounds of prevention, investigation, detection and prosecution of criminal offences or other applicable grounds (as laid down in the Internal Rules). 

For further information, please also see: EDPS guidance on article 25 of Regulation (EU) 2018/1725

Data subjects may at any time consult Cedefop’s Data Protection Officer or have recourse to the European Data Protection Supervisor.

Contact

Records register