The privacy notice is currently available only in English. For translation in other languages, please contact DARS Research Programme at dars.research-programme@easo.europa.eu.

PRIVACY NOTICE

Introduction
The European Asylum Support Office (hereafter “EASO”) is committed to protect your personal data and to respect your privacy. EASO collects and further processes personal data pursuant to Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data (repealing Regulation (EC) No 45/2001).This privacy statement explains the reason for the processing of your personal data, the way we collect, handle and ensure protection of all personal data provided, how that information is used and what rights you have in relation to your personal data. It also specifies the contact details of the responsible Data Controller with whom you may exercise your rights, the Data Processor (who is entrusted with part of the data processing), the Data Protection Officer and the European Data Protection Supervisor.The survey is provided by the EASO Research Programme by using LimeSurvey web platform. The survey targets individual subjects who are asylum-related migrants (asylum-seekers, asylum-applicants, persons with refugee or subsidiary protection status, people with a negative asylum decision that did not return to their country of origin). In the context of this survey, EASO is the data controller, meaning, the natural or legal person, public authority, agency or other body which determines the purposes and means of the processing of personal data. EASO is also the processor, meaning, a natural or legal person, public authority, agency or other body which processes the personal data.

2.  What is the purpose of this data collection?
The purpose of this data collection activity is to support the EASO Research Programme to learn more about the asylum situation in Europe, migration experiences, journeys, expectations, and needs of asylum-related migrants in Europe. The insights from this survey will help EASO to better understand asylum-related migration and contribute to a fairer and more efficient asylum-system in Europe, providing further assistance, more efficient support, higher quality and consistency within the field of asylum.

3. What personal data do we collect and further process?
The present survey does not collect personal data per se, as defined in Article 4 (1), neither any special categories of personal data as defined in Article 9 (1) and Article 10 of GDPR. During the survey, the participants are asked for socio-demographic information, such as age, gender, marital status, education, citizenship, asylum legal status. All questions allow the possibility to answer, “I don’t know” or “I prefer not to say”. Participants are further asked about their migration journey, experiences, and expectations. For the purpose of avoiding duplicated answers, the survey software will use cookies. IP address is not collected.  EASO adheres to the principles of data minimization, necessity and proportionality. The collection of personal data is limited to what is directly and strictly relevant and necessary for the purpose of the survey.

4. How do we collect your data?
We collect data through the application of a questionnaire using LimeSurvey. Data collected and stored for further analysis is based solely and exclusively on the answers given by participants in the survey. The survey uses mostly closed-ended questions (multiple questions). All answers collected are fully anonymised and no connection with a person’s ID, asylum-application or any other form of identification is possible.

5. How we will process and use your data?
All data collected will be processed at group level (country-level or EU level). This means that your answers will be aggregated to the answers of other participants and only then analysed. The processing of data will be exclusively linked to the purposes of the survey, no further analysis will be performed. No third parties will have access to the data collected. EASO employs appropriate security procedures to protect the confidentiality and security of the survey responses. 

6. On what legal ground(s) do we process your personal data?
The legal basis and lawfulness of the processing operation is based on data subjects’ informed consent - Article 5(1)(d) of Regulation (EU) 2018/1725. The participation is purely done on a voluntary basis and consent is collected directly from data subjects.

7. How long do we keep your personal data?
In line with Article 4(1)(e) of the Regulation, personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.

8. How do we protect and safeguard your personal data?
The EASO Research Programme and ICT employ appropriate security procedures to protect the confidentiality and security of the survey responses. Data is collected using the surveying tool LimeSurvey, installed in an EASO server, located in EU. Any data collected and processed is done strictly within the legal requirements and respecting all data protection requirements under legislation in the EU.

9. What are your rights and how can you exercise them?
As a data subject (i.e. the identifiable individual whose personal data is processed), you have a number of rights:
Right to be informed – You have the right to be informed about the collection and use of your personal data. This Privacy Statement provides information on how EASO collects and uses your personal data.
Right to access – You have the right to access your personal data. You have the right to request and obtain a copy of the personal data processed by EASO.
Right to rectification – You have the right to obtain - without undue delay - the rectification or completion of your personal if it is incorrect or incomplete. 
Right to erasure – You have the right to require EASO to delete or stop processing your data, for example where the data is no longer necessary for the purposes of processing. In certain cases, your data may be kept to the extent it is necessary, for example, to comply with a legal obligation of the Agency or if it is necessary for reasons of public interest in the area of public health.
Right to object – If the Agency processes your data for the performance of a task in the public interest (without your consent or another lawful basis), you have the right to object to this processing on grounds related to your particular situation.
Right to restrict processing – In a few, codified cases, you have the right to obtain the restriction of the processing, meaning that your data will only be stored, but not actively processed by the data controller for a limited period of time.
The right to object processing – You have the right to request that EASO restrict the processing of your personal data, under certain conditions.
The right to data portability – You have the right to request that EASO transfers the data collected to another organisation, or directly to you, under certain conditions. You can exercise your rights by contacting the Data Controller, the Data Processor, or in case of conflict the Data Protection Officer. If necessary, you can also address the European Data Protection Supervisor. Their contact information is given under point 9 below. 

10. Contact information-The Data ControllerIf you would like to exercise your rights under Regulation (EU) 2018/1725, or if you have comments, questions or concerns, or if you would like to submit a complaint regarding the collection and use of your personal data, please feel free to contact the Data Controller, dars.research-programme@easo.europa.eu.
-The Data Protection Officer (DPO) You may contact the EASO’s Data Protection Officer (dpo@easo.europa.eu) with regard to issues related to the processing of your personal data under Regulation (EU) 2018/1725.
-The European Data Protection Supervisor (EDPS)You have the right to have recourse (i.e. you can lodge a complaint) to the European Data Protection Supervisor (edps@edps.europa.eu) if you consider that your rights under Regulation (EU) 2018/1725 have been infringed as a result of the processing of your personal data by the Data Controller.