Privacy and data protection

Privacy Notice

This draft explains the intended treatment of personal information. It must be reviewed against the Commission's approved data-protection and retention rules before launch.

Information collected

Public pages should collect as little personal information as possible. General enquiries and complaints must remain separate.

  • Information you choose to provide
  • Basic technical security records where necessary
  • Complaint information only through the future secure complaint service

Why information is used

Information should be used only for the stated service, lawful institutional functions, security, and accountability.

Complaint information

Complaint information is sensitive. The current website does not submit complaint data to a backend. Future handling must include access controls, encryption, audit logs, and data minimization.

Retention, sharing, and your rights

Approved retention periods, lawful sharing rules, access and correction rights, and secure deletion procedures will be published after legal review.

Cookies and third parties

Only necessary site functionality should be used by default. Marketing trackers must not run on complaint pages, and non-essential cookies should not be introduced without an appropriate consent process.

Need this information in another format?

Review the available service and accessibility information, or visit the contact page for verified channels.