Data protection

Privacy policy

How the European Banking Authority processes the personal data collected through this website.

Privacy policy

1. Data controller

Personal data collected through this website are processed by the European Banking Authority (EBA), which manages the published content and related digital services.

For requests or reports about personal data protection you can reach us through the channels listed in the Contacts section.

2. Purposes of the processing

We may process personal data in order to:

  • respond to information requests submitted by users;
  • provide institutional updates and communications about the activities of the European Banking Authority;
  • ensure the technical and operational security of the website;
  • comply with legal obligations or requests issued by competent authorities.

3. Categories of processed data

  • User-provided data: details voluntarily entered in contact forms or other requests.
  • Navigation data: IP addresses, technical logs and other information collected automatically to keep the website secure and functional.
  • Voluntary communications: any additional content supplied spontaneously by the user.

4. Legal basis

  • the necessity to deliver a requested service or reply to a user enquiry;
  • compliance with legal obligations applicable to the European Banking Authority;
  • the legitimate interest in protecting the security and integrity of our digital services.

5. Data retention

Personal data are stored only for the time required to fulfil the stated purposes or for the period mandated by applicable legislation.

6. Data subject rights

Users may request access, rectification, updating or deletion of their personal data at any time and may object to processing in the cases provided for by law.

Requests can be submitted via the contact channels described on this website.

7. Data security

The European Banking Authority adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss or accidental disclosure.

8. Updates

This privacy policy may be updated following regulatory or organisational changes. Any revisions will be published on this page.