Articles 15 and 16 of Regulation (EU) 2018/1725 of the European Parliament and the Council of 23 October 2018 apply to the processing of personal data carried out by the European Parliament.
1) Who processes your personal data?
- The European Parliament is acting as the controller and the entity responsible for the processing is the Medical Service in Brussels represented Dr Petra Claes.
- You can contact the controller at BMedical@europarl.europa.eu
2) What is the purpose of the processing of your personal data?
To offer COVID-19 tests, performed on a voluntary basis, to all MEPs and EP Staff working in Brussels also for pre-travel and post travel, including family-members.
3) What is the legal basis for the processing?
- Article 1 (e) of the Staff Regulations of officials according to which “Officials in active employment shall be accorded working conditions complying with appropriate health and safety standards at least equivalent to the minimum requirements applicable under measures adopted in these areas pursuant to the Treaties“.
- Article 5(1) (a) of Regulation 2018/1725, this “processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Union institution or body”.
- Article 5(1)(e) of Regulation 2018/1725, this “processing is necessary in order to protect the vital interests of the data subject or of another natural person”.
4) What personal data is processed?
In order to carry out this processing operation the Medical Service collects the following categories of personal data:
- Name, surname, date of birth, gender, nationality of the person concerned, and contact details including phone number, email address and, if provided, Passport number (for pre-travel testing).
- The reason why you are doing the test (High risk contact, pre-travel and post-travel screening, screening of staff members).
- The DG, Unit or Service and place of employment.
- Result of COVID-19 test.
5) How will your personal data be processed?
The Medical Service collects and uses your personal data to:
- Arrange the Covid-19 screening test with ECOLOG (Ecolog Deutschland GmbH) for taking the sample and with Eurofins Laboratory van Poucke (Belgium), which will analyse the test. These enterprises are processors bound by Article 29 of Regulation (EU) 2018/1725. Contracts fix terms and conditions for the processing operation and assure security and safety for personal data processed.
- Record results of tests for COVID-19 and to contact you with the results.
- Provide contact tracing and medical assistance in the event of a positive COVID-19 result.
6) For how long will your personal data be stored?
Data related to the test for the COVID-19 with ECOLOG and with Eurofins Laboratory will be kept by the enterprise and the controller until the end of the provision of services relating to processing, as stated in contract. Eurofins will keep data including results in accordance with Belgian legislation.
Data related to the test result will be stored in your medical file in accordance with the retention period applicable to those files.
7) Who are the recipients of your personal data?
The recipients of your personal data are the Parliament’s staff responsible for carrying out this processing operation according to the “need to know” principle. Such staff abide by statutory, and when required, additional confidentiality agreements:
- The Head of Unit of the Medical Service Brussels;
- The doctors and nurses in the Medical Service in Brussels appointed to follow the list of COVID-19 cases;
A positive test result implies the obligation of the laboratory conducting tests to inform the National Health Authority in Belgium (Sciensano).
8) Will your personal data be shared with a non-EU country or international organisation?
The information we collect will not be given to any third party, except to the extent and for the purpose we may be required to do so by law.
9) Are any automated processes and/or profiling used to make decisions which could affect you?
10) The source of personal data?
The source of your personal data is directly from the data-subject. (only the data introduced during the registration-process is processed)
11) What rights do you have?
You have the following rights:
- Specific rights as a ‘data subject’ under Chapter III (Articles 14-25) of Regulation (EU) 2018/1725, in particular the right to access, rectify or, if applicable, erase your personal data and the right to restrict the processing of your personal data. Where applicable, you also have the right to object to the processing or the right to data portability.
- You can exercise your rights by contacting the Data Controller, or in case of conflict the Data Protection Officer.
- Right to contact the European Parliament’s data protection officer at email@example.com.
- Right to lodge a complaint with the European Data Protection Supervisor at firstname.lastname@example.org.