PROTECTION OF YOUR PERSONAL DATA
This privacy statement provides information about
the processing and the protection of your personal data.
Processing operation: Assessing impacts regarding asbestos screening in buildings, asbestos registries and national asbestos
strategies, reference 960/PP/GRO/IMA/22/2123/13416
Data Controller: European Commission, Directorate-General for Internal Market, Industry, Entrepreneurship and SMEs
Data Processor: Deloitte and empirica
Table of Contents
1. Introduction
2. Why do we process your data and on what legal ground(s)?
3. Which data do we collect?
4. How do we process and protect your data?
5. Who has access to your personal data and to whom is it disclosed?
6. How can you verify, modify or delete your data?
7. How long do we keep your personal data?
8. Contact information
9. Recourse
10. Where to find more detailed information?
1. Introduction
The European Commission (hereafter ‘the Commission’ or ‘the controller’) and Deloitte and empirica (hereafter ‘the
contractor’ or ‘the processor’) are committed to protect your personal data and to respect your privacy. Personal data is
collected and further processed pursuant to Regulation (EU) 2018/17251 of the European Parliament and of the Council of 23
October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions,
bodies, offices and agencies and on the free movement of such data (repealing Regulation (EC) No 45/2001).
This privacy statement explains the reason for the processing of your personal data, the way we collect, handle and ensure
protection of all personal data provided, how that information is used and what rights you have in relation to your personal
1 https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2018.295.01.0039.01.ENG&toc=OJ:L:2018:295:TOC
data. It also specifies the contact details of the responsible data controller and data processor with whom you may exercise
your rights, the Data Protection Officer and the European Data Protection Supervisor.
2. Why do we process your data and on what legal ground(s)?
Purpose of the processing operation:
Your personal data are collected and processed for the purpose of conducting an interim evaluation of assessing impacts
regarding asbestos screening in buildings, asbestos registries and national asbestos strategies, reference
960/PP/GRO/IMA/22/2123/13416. More specifically, this concerns the following processing activities to obtain the views of:
• The respondents of the targeted interview activity. These interviews can help elicit the tacit knowledge that lies within
particular stakeholder groups and generate qualitative insights that may not be the case in other data collection tools.
• Stakeholders to collect data that may be lacking in more quantitative aspects. A survey will gather the views and opinions
of a larger part of an intervention’s target population. For reasons of transparency and openness, in principle, your views
will be published on a final assessment report evaluating the SET Plan. However, your identity or any personal data
provided will not be published.
Lawfulness of the processing operation:
The processing operations on personal data for the survey are necessary and lawful under the following articles of the
Regulation (EC) 2018/1725:
• Article 5 (a): processing is necessary for the performance of a task carried out in the public interest on the basis of the
Treaties establishing the European Communities or other legal instruments adopted on the basis thereof.
• Article 5 (d): the data subject has unambiguously given his or her consent
3. Which data do we collect?
The personal data collected and further processed are data necessary for the participation in the survey, and comprise the
following: the country where you are based.
4. How do we process and protect your data?
The collected personal data is stored on a computer of the processor, who has to guarantee the data protection and
confidentiality required by the Regulation (EC) 2018/1725.
The processer uses a range of physical, electronic and managerial measures to ensure that we keep your personal data secure,
accurate and up to date. These measures include:
• Education and training to relevant staff to ensure they are aware of our privacy obligations when handling personal data
• Administrative and technical controls to restrict access to personal data on a ‘need to know’
• Technological security measures, including fire walls, encryption and anti-virus software
• Physical security measures, such as staff security passes to access our premises.
Your personal data are also transmitted to the Commission, where they are recorded in secured and protected database hosted
by the Data Centre of the European Commission, the operations of which abide by the Commission's security decisions and
provisions established by the Security Directorate for this kind of servers and services. The database is not accessible from
outside the Commission. Inside the Commission the database can be accessed using a UserId/Password.
All personal data in electronic format (e-mails, documents, databases, uploaded batches of data, etc.) are stored on the servers
of the European Commission. All processing operations are carried out pursuant to Commission Decision (EU, Euratom)
2017/246 of 10 January 2017 on the security of communication and information systems in the European Commission.
In order to protect your personal data, the Commission has put in place a number of technical and organisational measures.
Technical measures include appropriate actions to address online security, risk of data loss, alteration of data or unauthorised
access, taking into consideration the risk presented by the processing and the nature of the personal data being processed.
Organisational measures include restricting access to the personal data solely to authorised persons with a legitimate need to
know for the purposes of this processing operation.
The survey system uses “cookies”, the aim of which is to identify you when you visit the system’s webpage. The cookies are set
when you visit the survey webpage and take a survey, and they are used to identify whether you are logged in, for security
purposes, and to allow the use of software features. You can change the settings on your browser to prevent new cookies from
being set, or to notify you when a new cookie is set. Each browser is different, but the Help section for the browser will be able
to show you how to change cookie preferences or clear your cookies from time to time. If you do block cookies it may impact
your experience and you may not be able to take advantage of all features of our software. All data containing the survey
participants’ input is stored on a primary database server with multiple active clusters for redundancy. The database servers
utilize RAID disks and multiple data paths to ensure reliability and safety. The data is encrypted in transit, at rest, and on all
backups.
5. Who has access to your information and to whom is it disclosed?
The access to all personal data in the context of this survey is only granted to a defined population of users, i.e. staff of the
Commission and of the Contractor, without prejudice to a possible transmission to the bodies in charge of monitoring or
inspection tasks in accordance with European Union law.
No personal data is transmitted to other parties or processed outside the legal framework mentioned. The European
Commission will not share personal data with third parties for direct marketing.
Replies and views gathered in the context of the survey will only be published anonymously or in aggregate form.
6. How can you verify, modify or delete your information?
You have specific rights as a ‘data subject’ under Chapter III (Articles 14-25) of Regulation (EU) 2018/1725, in particular the
right to access your personal data and to rectify them in case your personal data are inaccurate or incomplete. Under certain
conditions, you have the right to erase your personal data, to restrict the processing of your personal data, to object to the
processing and the right to data portability.
You have the right to object to the processing of your personal data, which is lawfully carried out pursuant to Article 5(1)(a),
on grounds relating to your particular situation. Insofar you have consented to the certain processing of your personal data to
the Data Controller for the present processing operation, you can withdraw your consent at any time by notifying the Data
Controller. The withdrawal will not affect the lawfulness of the processing carried out before you have withdrawn the consent.
You can exercise your rights by contacting the Data Controller, or in case of conflict the Data Protection Officer. If necessary,
you can also address the European Data Protection Supervisor. Their contact information is given under Heading 9 below.
Where you wish to exercise your rights in the context of one or several specific processing operations, please provide their
description (i.e. their Record reference(s) as specified under Heading 10 below) in your request. Any request for access to
personal data will be handled within one month. Any other request mentioned above will be addressed within 15 working days.
2 https://eur-lex.europa.eu/legal-content/EN/TXT/?qid=1548093747090&uri=CELEX:32017D0046
7. How long do we keep your data?
Your personal data will be kept by the processor until the results of study have been completely analysed and at the latest until
the completion of the study which is scheduled for 31 May 2023.
Your views and information provided will be then rendered anonymous and transmitted to the Data Controller. The Data
Controller only keeps your personal data for the time necessary to fulfil the purpose of collection or further processing, namely
for a maximum of five years after the closure of the file to which the present targeted consultation belongs.
8. Contact Information
Data controller: European Commission, Directorate-General for Internal Market, Industry, Entrepreneurship and SMEs, Avenue
d'Auderghem 45, 1040 Brussels, Belgium
Data processors: Deloitte Consulting & Advisory CVBA, Gateway Building, Luchthaven Brussel, Nationaal 1 J, 1930 Zaventem,
Belgium; empirica Gesellschaft für Kommunikations- und Technologieforschung mbH, Oxfordstr. 2, 53111 Bonn, Germany
9. Recourse
You have the right to lodge a complaint to the European Data Protection Supervisor (
[email protected];
https://edps.europa.eu/) if you consider that your rights under Regulation (EU) 2018/1725 have been infringed as a result of
the processing of your personal data.
Remarks can be addressed to the Commission Data Protection Officer (
[email protected]).
10. Where to find more detailed information?
The Commission Data Protection Officer publishes the register of all operations processing personal data. You can access the
register on the following link: http://ec.europa.eu/dpo-register.
Saatja: Melodia, Bianca <
[email protected]>
Teema: Study on asbestos screening in buildings, asbestos registries and national asbestos strategies
Dear Madam, Sir,
My name is Bianca Melodia and I am a member of the Contractor team (Deloitte and empirica) that currently assists the European Commission (DG GROW) in preparing the impact assessment on asbestos screening in buildings, asbestos registries and national asbestos strategies. Considering your experience and knowledge of asbestos, your insights and opinions are very valuable for our assessment and we would appreciate it if you could share your thoughts with us by filling out this questionnaire <https://ec.europa.eu/eusurvey/runner/50829e64-2396-8c1a-3e9d-812f4156d3ad> .
Please note that the questionnaire is available in all languages of the EU. Alternatively, we can schedule a call to discuss the matter, if that is the case, please let us know your availability for a 45 mins meeting.
Since the timeframe for this study is limited, we kindly ask you to complete the questionnaire by 20th January.
Furthermore, we would highly appreciate it if you shared this email with other relevant colleagues or contacts that could be interested in providing feedback for our assessment.
Thank you very much in advance for contributing to this initiative: your input will add to policy-making.
Please do not hesitate to reach out should you have doubts or remarks.
Kind regards,
Bianca Melodia
This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed.
If you are not the named addressee or an employee or agent responsible for delivering this message to the named addressee, you are hereby notified that you are not authorized to read, print, retain, copy or disseminate this message or any part of it.
If you have received this email in error we request you to notify us by reply e-mail and to delete all electronic files of the message.
E-mail transmission cannot be guaranteed to be secure or error free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the content of this message, and shall have no liability for any loss or damage suffered by the user, which arise as a result of e-mail transmission.
Ref. Ares(2022)8524405 - 08/12/2022
EUROPEAN COMMISSION
DIRECTORATE-GENERAL FOR INTERNAL MARKET, INDUSTRY, ENTREPRENEURSHIP
AND SMES
Ecosystems III: Construction, Machinery and Standardisation
H.1 – Construction
Brussels, 08/12/2022
GROW.H.1
Subject: Assessing Impacts regarding Asbestos Screening in Buildings, Asbestos
Registries and National Asbestos Strategies
Dear Sir/Dear Madam,
The European Commission, Directorate General for Internal Market, Industry,
Entrepreneurship and SMEs (DG GROW), has commissioned Deloitte Consulting &
Advisory together with Empirica to conduct a study on assessing impacts regarding
asbestos screening in buildings, asbestos registries and national asbestos strategies
(contract ref. 960/PP/GRO/IMA/22/2123/13416).
The contract started on 24 November 2022 and will continue until 23 August 2023.
This study aims to assist the Commission in collecting available evidence on asbestos in
buildings, the implications of its presence on environment and the population, asbestos-
relevant national policies and to analyse the environmental, health and socio-economic
impacts of identified policy options. Based on the provided evidence, the Commission
will suggest a legislative proposal on asbestos screening, registration and national
asbestos strategies, reflecting national building codes and circumstances.
Given the importance of the study for a safer environment and higher protection for EU
citizens, I would kindly ask you to offer Deloitte and its partner the necessary assistance
in collecting the required information on behalf of the Commission.
For additional information about the contract and its main objectives, please contact the
DG GROW Policy Officer, Mr Pablo Gutierrez Velayos (e-mail: pablo.gutierrez-
[email protected]; tel. +32 2 29 68 079).
For specific questions about the study, please contact the project team leader, Mr Benoît
Vandresse (e-mail:
[email protected]).
I thank you in advance for your cooperation and support.
Yours faithfully,
(Electronically signed)
Katharina Knapton‑Vierlich
Head of Unit
Commission européenne/Europese Commissie, 1049 Bruxelles/Brussel, BELGIQUE/BELGIË – Tel. +32 22991111
Office: BREY 10/093 – Tel. direct line +32 229-68079
[email protected]
Electronically signed on 08/12/2022 10:34 (UTC+01) in accordance with Article 11 of Commission Decision (EU) 2021/2121
Saatja: Melodia, Bianca <
[email protected]>
Saadetud: 12.01.2023 11:27
Teema: Study on asbestos screening in buildings, asbestos registries and national asbestos
strategies
Manused: image001.png; 221207 - Asbestos IA - Accreditation letter_DG GROW.pdf;
Disclaimer for privacy statement.pdf
Dear Madam, Sir,
My name is Bianca Melodia and I am a member of the Contractor team (Deloitte and empirica) that
currently assists the European Commission (DG GROW) in preparing the impact assessment on asbestos
screening in buildings, asbestos registries and national asbestos strategies. Considering your
experience and knowledge of asbestos, your insights and opinions are very valuable for our assessment
and we would appreciate it if you could share your thoughts with us by filling out this questionnaire.
Please note that the questionnaire is available in all languages of the EU. Alternatively, we can schedule a
call to discuss the matter, if that is the case, please let us know your availability for a 45 mins meeting.
Since the timeframe for this study is limited, we kindly ask you to complete the questionnaire by 20th
January.
Furthermore, we would highly appreciate it if you shared this email with other relevant colleagues or
contacts that could be interested in providing feedback for our assessment.
Thank you very much in advance for contributing to this initiative: your input will add to policy-making.
Please do not hesitate to reach out should you have doubts or remarks.
Kind regards,
Bianca Melodia
This email and any files transmitted with it are confidential and intended solely for the use of the
individual or entity to whom they are addressed.
If you are not the named addressee or an employee or agent responsible for delivering this
message to the named addressee, you are hereby notified that you are not authorized to read,
print, retain, copy or disseminate this message or any part of it.
If you have received this email in error we request you to notify us by reply e-mail and to delete
all electronic files of the message.
E-mail transmission cannot be guaranteed to be secure or error free as information could be
intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender
therefore does not accept liability for any errors or omissions in the content of this message, and
shall have no liability for any loss or damage suffered by the user, which arise as a result of e-
mail transmission.