Privacy Statement
Data protection legal framework applicable to Banco de Portugal
All personal data provided by participants will be processed in accordance with EU and Portuguese data protection laws, in
particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural
persons with regard to the processing of personal data and on the free movement of such data and subsequent legislation
implementing these legal instruments.
What personal data are we processing?
We process:
The information that participants provide in the registration form such as name, surname, school name, address of the school,
e-mail addresses of the team leader and teacher, and names of up to four further team members;
Photos and videos of the participants taken during the competition.
Who is responsible for the processing of personal data?
Banco de Portugal is the data controller and is responsible for processing the personal data provided in the registration form.
Who will receive the personal data?
Personal data will be received by Banco de Portugal, the entity in charge of managing the competition, as well as by external
service providers involved in the organisation of the competition, such as hotels and event agencies, and external service
providers that host the Generation €uro website.
Personal data collected by the Generation €uro website will also be transferred to the European Central Bank and to euro area
national central banks to enable them to manage, where necessary, the competition at national level. The central banks to which
the personal data may be disclosed are: Nationale Bank van België/Banque Nationale de Belgique, Deutsche Bundesbank, Banc
Ceannais na hÉireann/Central Bank of Ireland, Bank of Greece, Banco de España, Eesti Pank, Banque de France, Banca d’Italia,
Central Bank of Cyprus, Latvijas Banka, Lietuvos bankas, Banque centrale du Luxembourg, Bank Centrali ta’ Malta/Central Bank
of Malta, De Nederlandsche Bank, Oesterreichische Nationalbank, Banka Slovenije, Národná banka Slovenska and Suomen
Pankki – Finlands Bank. Any further processing of the personal data by the national central banks is subject to the guarantees
provided in the General Data Protection Regulation (GDPR).
Why are we processing your personal data and what is the legal basis for the processing?
Those who wish to enter the competition have to be over the age of 16 and must fill in the registration form on the Generation
€uro website. All the participants’ data will be added to a database. All personal data are collected and processed for the
purposes of managing the competition, accessing competition-related information, ranking the participants, awarding the prizes
and contacting and providing the participants with relevant information. By entering their personal data, participants consent to
the publication of the name of the winning team and its members on the websites of the ECB and/or national central banks
and/or to their announcement at public events. It is also likely that photographs will be taken and short video recordings made of
the winning teams on the national award days and at the final award event, and that these will be published by the ECB and/or
national central banks on their websites, and/or by other EU institutions, and/or by ECB’s partners, as well as on social media
channels such as Facebook, Twitter and LinkedIn.
By providing the personal data requested, participants consent to their processing. Participants can withdraw their consent at
any time by contacting Banco de Portugal's Data Protection Officer (encarregado.protecao.dados@bportugal.pt). Future
processing of their personal data will stop once they have withdrawn their consent, but prior processing will remain lawful.
For how long do we keep personal data?
Personal data (such as name, surname, school name, address of the school, email address of the team leader and teacher)
provided when registering on the Generation €uro website are kept by Banco de Portugal for three (3) years, counting from the
day on which the personal data were submitted.
Personal data such as photos and videos taken during the competition will be kept by Banco de Portugal for five (5) years,
counting from the day on which the personal data (including portraits, photographs or videos) were obtained.
Personal data on social media related to the competition will be kept for as long as the social media channels indicate in their privacy statements.
Facebook privacy policy
Linkedin privacy policy
Twitter privacy policy
Participants’ rights
Participants have the right to access and rectify their personal data, to restrict the processing of the data and, under certain
conditions, to ask for data to be erased. Depending on the specifics of the data processing operation, participants may also have
the right to data portability and to object to their data being processed.
Participants can exercise their rights or ask for clarifications regarding personal data by contacting Banco de Portugal's Data
Protection Officer: encarregado.protecao.dados@bportugal.pt.
Participants have the right of recourse to the Portuguese Data Protection Authority (CNPD), as supervisory authority, regarding
the processing of your personal data.
Use of cookies
Cookies are small bits of data sent by a website server to the browser of your computer and stored on your hard drive. The
browser informs the server when you next visit that particular website. Cookies help us to store user preferences and track
usage trends on an aggregate basis. Servers automatically record information that your browser sends whenever you visit a
website. These server logs may include information such as the date and time of your visit, your internet protocol address,
browser type, browser language, browser screen size, and one or more cookies that identify your browser. The information
Banco de Portugal collects from the Generation €uro website (including via Google Analytics) is used only to compile statistics,
on an aggregate basis, on the usage of this website.
©2020 Central Bank of Ireland
