Protection of personal data in relation to administrative inquiries and disciplinary proceedings within EASA
The European Union Aviation Safety Agency (EASA) is committed to respect the privacy of its Staff members. Within the framework of the processing of personal data collected through the video-surveillance system (CCTV), all personal data provided are dealt with in compliance with Regulation (EC) N° 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data. The following data protection information notice outlines the criteria by which EASA collects, manages and uses the data collected in the framework of its video-surveillance system.
Identity of controller:
Head of Business Services Department.
Purpose of processing:
For the safety and security of its buildings, assets, staff and visitors, EASA operates a video-surveillance system.
Data concerned and type of data processed
The CCTV system records digital images and is equipped with motion detection. It records any movement detected by the cameras in the area under surveillance, together with time, date and location. All cameras operate 24 hours a day, seven days a week. The image quality in most cases allows identification of those in the camera's area of coverage.
Recipients of the data processed:
Recorded video is accessible to the EASA Security, Health and Safety officer and the Security Teamleader only.
Live video is also accessible to security guards on duty.
Under exceptional circumstances, and subject to procedural safeguards, access may also be granted to:
- the European Anti-fraud Office (“OLAF”) in the framework of an investigation carried out by OLAF;
- the Commission's Investigation and Disciplinary Office ("IDOC") in the framework of a disciplinary investigation; or to those carrying out a formal internal investigation or disciplinary procedure within the Agency under the rules set forth in Annex IX of the Staff Regulations of Officials of the European Communities; Also, if appropriate, access will be given to the EASA Legal Department, the European Ombudsman, the Civil Service Tribunal and the European Data Protection Supervisor.
Lawfulness of processing:
In accordance with recital 27 and Article 5 (a) of Regulation (EC) Nº 45/2001, the processing is necessary for the managing and functioning of EASA and for performance of tasks carried out in the public interest on the basis of the Treaties establishing the European Communities.
The data subject’s rights of access and rectification:
The Data subject’s rights can be exercised in accordance with EASA implementing rules on Data protection.
Members of the public have the right to access the personal data we hold regarding them and to correct and complete them. Any request for access, rectification, blocking and/or erasing of personal data should be directed to the Head of the Corporate Services Department He or she may also be contacted in case of any other questions relating to the processing of personal data.
The right of access or rectification to personal data might be restricted to the data subject in accordance with Article 20(1) (a-e).
If specifically requested, a viewing of the images may be arranged. In case of such
a request, in accordance with the conditions specified in the EASA Policy on Video surveillance (par 11.2) might be filed by the data subject.
Retention period:
Data are stored for a period of 7 days. Thereafter all images are deleted, unless they have to be retained for the investigation of security incidents
Contact information:
For any questions on data subjects’ rights and on the exercise of rights related to the processing of personal data (like access and rectification of your personal data), please contact the Data Controller at the following address:
Head of Business Services
European Union Aviation Safety Agency
Konrad-Adenauer-Ufer 3, 50668 Köln Germany
Resource:
In case of conflict on any Personal Data Protection issue you can address the Data Controller at the above mentioned address. You can also contact the EASA Data Protection Officer at the following email address: dpo [at] easa.europa.eu (dpo[at]easa[dot]europa[dot]eu)
Should the conflict not be resolved by the Data Controller or the Data Protection Officer you may lodge a complaint with the European Data Protection Supervisor:
Website: http://www.edps.europa.eu
E-mail: edps [at] edps.europa.eu (edps[at]edps[dot]europa[dot]eu)