The GSA processes all personal data in compliance with the applicable rules on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data (currently Regulation (EU) No 2018/1725).
Although you can browse through most of the GSA Website without giving any information about yourself, in some cases personal information is collected and processed (such as data necessary for the subscription to our newsletter and for contacting us). Relevant privacy statements are available for each processing operation under the respective section of the GSA website. These privacy statements will give you details regarding the controller and data protection officer, the purpose(s) of the processing operation, the categories of personal data concerned, the categories of recipients of such personal data, your rights as a data subject and information on the retention period of your personal data.
In accordance with the applicable rules, the GSA maintains a central register with the records of all the personal data processing operations carried out by the GSA. Please note that this register constitutes a live document which is updated on a regular basis, whenever a new processing operation is undertaken. You can download the GSA’s central register here.