19–23 May 2025
Europe/Brussels timezone
SECURITY CLEARANCE REQUIRED: NATO SECRET

Privacy Information

Data controller
NAC IM

Privacy notice

Privacy Policy Marine

Introduction: The document outlines the General Data Protection Regulation (GDPR) compliance, explaining the processing, sharing, and retention of personal data, and the security measures taken to protect this data.

Basic Principles:

  • Lawfulness, Fairness, and Transparency: Personal data must be processed lawfully, fairly, and transparently.
  • Purpose Limitation: Data must be collected for specified, legitimate purposes and not processed further in a manner incompatible with those purposes.
  • Data Minimization: Data collected should be adequate, relevant, and limited to what is necessary.
  • Accuracy: Data must be accurate and kept up to date.
  • Storage Limitation: Data should not be kept longer than necessary.
  • Integrity and Confidentiality: Appropriate security measures must be taken to protect data.

 

Data and Target Groups:

  • Target Groups: Includes Defense personnel, their family members, reservists, third-party employees, external students, trainees, and visitors.
  • Personal Data: Includes identification data, contact details, age, gender, photos, family composition, vehicle details, job history, salary information, qualifications, and more.
  • Sensitive Data: Includes political opinions, religious beliefs, racial or ethnic origin, health data, and data related to legal matters.

Data Collection and Processing:

  • Purpose: Data is collected for analysis, evaluation, service provision, communication, legal compliance, and responding to official requests.
  • Data Collection: Data is collected from existing government sources or directly from individuals.
  • Data Retention: Data is retained as long as necessary for its intended purpose and then either archived or destroyed.

Data Protection:

  • Access Control: Only authorized personnel can access personal data.
  • Auditing: Audits are conducted to track data access and modifications.
  • Security Measures: Technical and organizational measures are in place to ensure data security.

Rights of Individuals:

  • Access and Correction: Individuals have the right to access and correct their personal data.
  • Deletion and Restriction: Individuals can request data deletion or processing restriction under certain conditions.
  • Objection and Consent Withdrawal: Individuals can object to data processing and withdraw consent at any time.
  • Data Portability: Individuals can request data transfer to another party.

 

Data Sharing:

  • Within Defense: Data is shared within Defense for administrative purposes.
  • Outside Defense: Data may be shared with external parties for social protection and legal compliance.
  • Outside EU: Data is generally not shared outside the EU unless adequate protection is ensured.

 

Contact Information: