Privacy statement for TARGET Services operational status updates

The operational status of the TARGET Services is updated daily on the ECB’s website and circulated via email to all subscribers. TARGET Services operational status updates provide information on the status and availability of T2, T2S and TIPS.

What is our legal framework?

All personal data are processed in accordance with European Union data protection law, that is to say in line with Regulation (EU) 2018/1725.

Why do we process personal data?

Personal data are processed in order to manage subscriptions for the TARGET Services operational status updates.

What is the legal basis for processing your personal data?

Your personal data are processed by the ECB because you consented to this processing by providing the personal data requested. You may withdraw your consent at any time by contacting the ECB’s website administration at [email protected]. All processing of your personal information will stop once you withdraw your consent; however, any processing that has already taken place remains lawful.

Who is responsible for processing your personal data?

The ECB is the controller for the processing of your personal data. The Directorate General Market Infrastructure and Payments is responsible for this processing.

In addition, CleverReach, a company headquartered in Germany, processes your data on behalf of the ECB.

Who will be the recipients of your personal data?

The recipients of your personal data (including entities who have access to that personal data) are authorised staff members of the Directorate General Market Infrastructure and Payments, as well as authorised staff members of CleverReach and of its subcontractors, all based in the European Union.

What categories of personal data are collected?

The ECB processes the following personal data:

• email address

Where are your personal data processed (e.g. transferred, accessed or stored)?

Your personal data might exceptionally and rarely be processed by recipients located outside the EEA based on the derogations for specific situations set out in article 50(1) EUDPR.

For example, when necessary to allow the ECB to comply with its supervisory mandates, your personal data might be transferred to non-EEA authorities based on the derogation for important reasons of public interest recognised in Union law, in line with article 50(1)(d).

How long will the ECB keep personal data?

Your personal data will be retained in CleverReach’s database for as long as you are subscribed to the TARGET Services operational status updates. If you choose to unsubscribe by clicking on the unsubscribe link (also available at the bottom of each status update email that you have received) and filling out the form, you will stop receiving updates immediately and your personal data will be deleted within one week.

What are your rights?

You have the right to access your personal data and correct any data that is inaccurate or incomplete. You also have (with some limitations) the right to delete your personal data and to object to or to restrict the processing of your personal data in line with Regulation (EU) 2018/1725. The ECB may restrict your rights to safeguard the interests and objectives referred to in Article 25(1) of Regulation (EU) 2018/1725.

Who can you contact for queries or requests?

You can exercise your rights by contacting the ECB’s website administration at [email protected]. You can also directly contact the ECB’s Data Protection Officer at [email protected] for all queries relating to your personal data.

Addressing the European Data Protection Supervisor

If you consider that your rights under Regulation (EU) 2018/1725 have been infringed as a result of the processing of your personal data, you have the right to lodge a complaint with the European Data Protection Supervisor at any time.