An e-service on our web site is a service or resource made available on the Internet in order to improve the communication between citizens and businesses on the one hand and the European Railway Agency on the other hand.

Three types of e-services are or will be offered by the European Railway Agency:

• Information services that provide citizens, media, business, administrations and other decision makers with easy and effective access to information, thus increasing transparency and understanding of the policies and activities of the Agency;
• Interactive communication services that allow better contacts with citizens, business, civil society and public actors thus facilitating policy consultations, and feedback mechanisms, in order to contribute to the shaping of policies, the activities and the services of the European Railway Agency;
• Transaction services that allow access to all basic forms of transactions with the European Railway Agency, e.g. procurement, financial operations, recruitment, event enrolment, acquisition or purchase of documents etc.

A specific privacy policy statement will contain the following information about the use of your data:

• What information is collected, for what purpose and through which technical means the Agency collects personal information exclusively to the extent necessary to fulfil a specific purpose. The information will not be re-used for an incompatible purpose;
• To whom your information is disclosed. The Agency will only disclose information to third parties if that is necessary for the fulfilment of the purpose(s) identified above and to the mentioned (categories of) recipients. The Agency will not divulge your personal data for direct marketing purposes;
• How you can access your information, verify its accuracy and, if necessary, correct it. As a data subject you also have the right to object to the processing of your personal data on legitimate compelling grounds except when it is collected in order to comply with a legal obligation, or is necessary for the performance of a contract to which you are a party, or is to be used for a purpose for which you have given your unambiguous consent;
• How long your data is kept. The Agency only keeps the data for the time necessary to fulfil the purpose of collection or further processing;
• What are the security measures taken to safeguard your information against possible misuse or unauthorized access;
• Whom to contact if you have queries or complaints.

Many web pages on our site have a "Contact" button, which invites you to send your comments to a specific functional mailbox.

When you send such a message, your personal data is collected only to the extent necessary to reply. If the team of officers handling inflow to that mailbox is unable to answer your question, it will forward your e-mail to another unit within the Agency. You will be informed, via e-mail, about which unit your question has been forwarded to.

If you have any questions about the processing of your e-mail and related personal data, do not hesitate to include them in your message.

​Regulation 45/2001 applies to processing operations of personal data carried out by ERA.
 
Further to Articles 11 and 12 of this Regulation, ERA provides the data subjects with the following information:

• The purpose of this process is to launch online surveys. The surveys are being carried out by ERA, through the current website. Individual responses will be processed by ERA staff in accordance with Regulation 45/2001 and this specific privacy statement.
• Replies to the questions included in the online survey are voluntary.
• The website uses a session cookie which is essential for the survey to operate. It will be set when you submit the web survey.
• ERA will not use your personal data for any purpose other than carrying out the survey and collecting, aggregating and further analysing the results thereof. ERA will only have access to the content of the answers provided through the survey form and the website will not trace the identity of the respondents in any way.
• ERA will not disclose any of this personal data to any other person or body, nor divulge this data for marketing purposes.
• ERA takes appropriate security measures to safeguard this data from misuse by third parties.
• The controller is the European Railway Agency.
• Data Information is given through this specific privacy statement.
• The legal basis for this processing is Regulation (EC) 881/2004 establishing the European Railway Agency.
• Rights of the data subject: you have the right to obtain access to and rectification of your personal data. You may also under certain circumstances ask to have this data blocked and for the erasure of data about them which you consider to have been unlawfully processed. Finally you have the right to object to the processing of your personal data at any time, on legitimate compelling grounds relating to your particular situation.
• To exercise your rights or to obtain any further information you can apply directly to ERA Data Protection Officer. You can also apply to the ERA Data Protection Officer at dataprotectionofficer@era.europa.eu.
• Data retention period: ERA only keeps the data for the time necessary to fulfill the purpose of collection or further processing. It will be deleted once the survey is closed and the results of the survey have been aggregated and published.

Registration to an ERA conference

This website gives you the possibility to register to an ERA conference. Your personal data will be collected and further processed for the purposes detailed hereafter. The relevant processing operations thereof and the conference are under the responsibility of the Head of Unit managing the conference acting as the data controller.

• What personal information do we collect, for what purpose and through which technical means?

The personal data collected and further processed are:

• data necessary for the organisation and management of the conference, e.g. such as gender (needed for the right title), name, surname, profession, postal & e-mail addresses, phone number, fax number;
• photographs/pictures which could be published in the context of the conference.
• Purposes

The purpose of the processing of personal data performed in the context of the conference is the management/organisation of the conference, including management of lists for contacts, invitations, participants, reports, distribution of reports, feedback on reports, follow-up actions, news, publications photographs/pictures, presentations, publication on the internet.

The participants who prefer their images are neither taken nor published on any support have the possibility to object.

The processing operations on personal data linked to the organisation and management of this conference is necessary for the Agency’s management and functioning, as mandated by Regulation (EC) 881/2004.

• Who has access to your information and to whom is it disclosed?

Some of your personal data (list of participants with names, first names and photos) may be published on the web.

If you do not agree with this publication of your personal data, please opt-out where required or inform the data controller by using the contact information of the conference and explicitly specifying your request.

• How do we protect and safeguard your information?

The collected personal data and all information related to the above mentioned conference are stored on the Agency’s servers, the operations of which abide by the Agency's security decisions and provisions established for this kind of servers and services. Audio and video recordings as well as information displayed on the internet/intranet might be stored on servers of external contractors abiding by the necessary security provisions.

• How can you verify, modify or delete your information?

In case you want to verify which personal data is stored on your behalf by the responsible controller, to have it modified respectively corrected or deleted, please contact the Controller by using the Contact Information of the conference and by explicitly specifying your request. Special attention is drawn to the consequences of a request for deletion, in which case any possibility to be able to contact you will be lost.

• How long do we keep your data?

Your personal data will be part of a list of contact details shared internally amongst the staff of the ERA services for the purpose of contacting you in the future in the context of the ERA's activities. If you do not agree with this, please contact the Controller by using the Contact Information of the conference and by explicitly specifying your request.

• Contact Information

If you have questions regarding the organisation of the conference, or concerning any information processed in the context of the conference, or on your rights, feel free to contact the support team, operating under the responsibility of the data controller, using the contact information of the conference.

• Recourse

Remarks can be addressed to the ERA Data Protection Officer. Complaints can be addressed to the European Data Protection Supervisor.