(31) Regulation (EU) 2016/679 applies to the processing of personal data carried out under this Regulation. In that respect, for the sake of legal certainty, it is appropriate to clarify that the representative of the group of organisers or, where applicable, the legal entity created for the purpose of managing the initiative, and the competent authorities of the Member States are to be considered to be the data controllers within the meaning of Regulation (EU) 2016/679 in relation to the processing of personal data when collecting statements of support, email addresses and data on the sponsors of the initiatives, and for the purposes of verification and certification of statements of support, and to specify the maximum period within which the personal data collected for the purposes of an initiative can be retained. In their capacity as data controllers, the representative of the group of organisers or, where applicable, the legal entity created for the purpose of managing the initiative, and the competent authorities of the Member States should take all appropriate measures to comply with the obligations imposed by Regulation (EU) 2016/679, in particular those relating to the lawfulness of the processing and the security of the processing activities, the provision of information and the rights of data subjects.


0 - Preamble (clauses 1-40)


Regulation on the European citizens’ initiative(pdf).
#tagcoding hashtag: #euci31p