Data Protection Policy.pdf

The Young European Federalists (JEF Europe) has a Data Protection Policy to ensure compliance with data protection law in Belgium, specifically the General Data Protection Regulation and related EU and national legislation. The policy applies to all members and employees of JEF Europe, except when acting in a private or external capacity. JEF Europe is identified as a data controller and is subject to legal obligations, including ensuring personal information is managed appropriately, understanding and applying data protection principles, and fulfilling the rights given to data subjects. The organization's Secretary-General acts as the statutory Data Protection Officer, responsible for monitoring and auditing compliance, advising on data protection law, and acting as a point of contact for complaints and breaches. Employees are responsible for completing data protection training, accessing and using personal information only as necessary, and reporting personal data breaches. JEF Europe uses personal data to manage relationships with members and supporters, including keeping in touch, providing opportunities for engagement, and retaining data indefinitely or until requested to do otherwise. The legal basis for processing personal data is legitimate interests, and individuals can ask for explanations of the organization's rationale.