Directorate for Members and Plenaries
YOUR RIGHTS WITH REGARD TO THE PROCESSING OF YOUR PERSONAL DATA
1.
Who is a data subject?
The data subject is the person whose personal data are processed by the controller.
Data pertaining to members (full members and alternates), members' assistants, coordinators of
national delegations, speakers, experts and persons regarded as third parties are saved in the Agora
application by the CoR's various departments.
2.
What are personal data?
2.1
Data types:
2.1.1
Basic data (which may be shared publicly in the case of members):
 Surname
 First name
 Title
 Office held in country of origin
 Languages spoken
 Professional address
 Telephone numbers(s), fax
 E-mail address(es)
 Website
 Photo
 Duties at the CoR
 National delegation at the CoR
 Membership of CoR bodies
2.1.2
Data reserved for internal administrative processing:
 Private address
 Bank account
 Private e-mail address
 Date of birth
 Place of birth
COR-2015-05711-00-01-ADMIN-TRA (FR) 1/4
The EU's Assembly of Regional and Local Representatives
Rue Belliard/Belliardstraat 101 — 1040 Bruxelles/Brussel — BELGIQUE/BELGIË — Tel. +32 22822211 — Fax +32 22822325
EN
3.
What is data processing?
This term has a very broad scope. It refers to any operation performed on personal data, such as
collection, recording, storage, consultation, use, transmission, publication or destruction.
4.
Who is responsible for processing your data?
The "controller" is the person responsible for processing personal data. In general, heads of unit or
directors act as controllers within the CoR, as they determine for what purposes and how data is
processed.
The data controller for members' data is the director of the Directorate for Members and Plenaries. The
storage, correction and deletion of members' data is carried out by the staff of the Services to members
and eCoR unit in the same directorate.
5.
Who protects your rights?
It is the responsibility of the data controller to make sure that data processing is carried out in
accordance with the EU data protection framework. There are two entities that monitor the correct
application of the rules and protect your rights: the Data Protection Officer, who operates within your
institution (data.protection@cor.europa.eu), and the European Data Protection Supervisor
(edps@edps.europa.eu), who is the supervising authority for all institutions and agencies.
6.
What are your rights?
To complete, correct or delete your data, please send a request to the Services to members and eCoR
unit (OneStopShop@cor.europa.eu) or use the tool available on "My page" (Members' Portal), which
allows you to configure, within the limits defined by the obligation of transparency, how your details
are published on public websites (CoR website, CoR political group websites, members' page
available on the Members' portal, the EU Whoiswho directory, Open Data Portal):
1. You can request that the following data not be displayed on the websites:
 Languages spoken
 Professional address
 Telephone numbers(s), fax
 E-mail address(es)
 Website
 Photo
2. You can also ask for the following data to be displayed on the websites:
 Name of your alternate
 Your blogs
 Your social networks
 Your areas of interest
COR-2015-05711-00-01-ADMIN-TRA (FR) 2/4



Your associations
Your biography
Your date of birth
To delete your data from SAGAP (an automated address and publications management system used
for the physical distribution of the products of the European institutions) and to stop receiving these
publications, please contact the Services to members and eCoR unit (OneStopShop@cor.europa.eu).
6.1
Right of access
You have the right to obtain access to the following information from the data controller:


6.2
confirmation as to whether or not data related to you are being processed;
information about data processing operations concerning you.
Right of rectification
You have the right to obtain the rectification of inaccurate or incomplete personal data by the
controller.
6.3
Right of erasure
You may have your data erased by the controller if the processing is unlawful.
6.4
Right of blocking
You have the right to ask the data controller to block your personal data:


6.5
if you contest the accuracy of the personal data1;
if the controller no longer needs the personal data or you consider the processing to be unlawful.
You can ask for your data to be blocked and for processing to cease until the data controller has
sent you his or her final decision.
Transfer of your data to third parties
Your data are transmitted to the Publications Office on the basis of the Agreement on the protection of
the data of members of the Committee of the Regions in EU Whoiswho, the official directory of the
European Union and in SAGAP, the automated address and publications management system. The
Open Data Portal, a portal managed by the Publications Office, provides access to members' data
published on the members' pages available on the Members' Portal.
1
For a period to allow the controller to verify the accuracy of the personal data.
COR-2015-05711-00-01-ADMIN-TRA (FR) 3/4
7.
Data retention
Your data are kept and published in different applications by the controller for the time necessary to
carry out the tasks of the various CoR departments during your term of office.
Your personal contact data are saved in the members' database for historical and statistical purposes
following your period of office.
8.
How can you enforce your rights?
The first point of contact is the data controller for the specific data processing operation.
For further information or for help with a specific problem you can contact the Data Protection Officer
of the European Committee of the Regions at data.protection@cor.europa.eu.
You have the right of recourse at any time to the European Data Protection Supervisor at
edps@edps.europa.eu.
_____________
COR-2015-05711-00-01-ADMIN-TRA (FR) 4/4