Privacy policy

Articles 15 and 16 of Regulation (EU) 2018/1725 of the European Parliament and the Council of 23 October 2018 apply to the processing of personal data carried out by the European Parliament1.


1) Who processes your personal data?

  • The European Parliament is acting as the controller2 and the entity responsible for the processing is the Civil Society Outreach Unit, represented by the Head of Unit.
  • You can contact the controller/entity at luxaward@ep.europa.eu.

2) What is the purpose of the processing of your personal data?

  • We will process your personal data to to perform a vote count and to select the winner who will attend the LUX Audience Award Ceremony or the European Film Awards.

3) What is the legal basis for the processing?

  • The Bureau’s decisions of 3 April 2006 (PE 371.152/BUR) and of 23 October 2019 (D (2019)35479).

4) What personal data is processed?

  • We only collect your name and/or surname and email address so that we can link it to your vote on the nominated films.

5) How will your personal data be processed?

  • Email addresses with votes are processed. The purpose of the processing is to collect ratings for the nominated films, and to choose the winning film by identifying the one with the highest ranking. Its second purpose is to enable us to contact the randomly selected persons by email to offer them a prize for their participation in the vote, by inviting them to attend either the LUX Audience Award Ceremony in the European Parliament or the European Film Awards.

6) For how long will your personal data be stored?

  • Your personal data will be stored for approximately 12 months, for auditing purposes. After this period, your data will be erased.

7) Who are the recipients of your personal data?

  • There are no other recipients of your personal data.

8) Will your personal data be shared with a non-EU country or international organisation?

  • No, your personal data will not be shared with or transferred to a non-EU country or any international organisation.

9) Are any automated processes3 and/or profiling4 used to make decisions which could affect you?

  • Not applicable.

10) If personal data have not been obtained by you, what is their source?

  • Not applicable.

11) What rights do you have?

  • You have the following rights:
    • The right to the rectification of your personal data.
    • The right to the erasure of your personal data.
    • The right to withdraw your consent at any time during the voting period, without affecting the lawfulness of processing based on your consent before it was withdrawn.
    • The right to contact the European Parliament’s Data Protection Officer at data-protection@europarl.europa.eu.
    • The right to lodge a complaint with the European Data Protection Supervisor at edps@edps.europa.eu.

1 Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC, OJ L 295, 21.11.2018, p. 39.

2 A controller is defined as the public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of the personal data. The controller is represented by the head of the entity.

3 Automated processes involve making a decision solely by automated means and without any human involvement. (Hypothetical examples: (1) selecting certain options on a web page will automatically place you on various mailing lists so that you are sent the corresponding monthly newsletter, or (2) using an automated system to mark multiple choice test answers and assign a pass mark according to the number of correct answers).

4 Profiling analyses aspects of an individual’s personality, behaviour, interests and habits to make predictions or decisions about them. Profiling is typically used to analyse or predict aspects concerning the data subject’s performance at work, economic situation, health, personal preferences or interests, reliability or behaviour, location or movements, etc. (Hypothetical example: when using social media tools, data is collected and your trends registered. This data is then used to form new and/or a number of different predictions about you).