Data protection notice 

In order to carry out our duties to EU citizens, we may process some of your personal data (also known as ‘personal information’). We process this data pursuant to Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data.

We may process your personal data for a number of reasons, including dealing with public requests for information, petitions, parliamentary activities, events, visitor information, staff matters and complaints, just to name a few. Regulation 2018/1725 sets out the scope of the information about you that we might process, how we might use it and how you can request access to it.

We also keep records of activities involving personal data processing (e.g. data collection, storage and use). This register of activities is publicly accessible and must contain certain pieces of information explaining the purpose and conditions of the personal data processing operations. You can consult our Data Protection Register to find out more about how we process your personal data in the course of our activities.

This data protection notice covers the publicly available websites we publish online under the europarl.europa.eu domain (also named ‘europarl’).

It covers the basic navigation of our websites but does not cover e-services we may offer, such as contact or registration forms.

For each e-service made available on one of our websites, there will be a dedicated data protection notice informing you about the purpose of the processing of your personal data, the legal basis, the categories of personal data collected, how long we keep your personal data, details of your data protection rights and who to contact should you wish to exercise those rights.

We advise you to consult the specific data protection notice before using the e-service of the websites we publish. The processing of personal data through these e-services is described in the relevant records made available in our Data Protection Register.

The europarl domain is home to a variety of websites based on different technologies and maintained by different editorial and IT teams. There is therefore no single data controller for europarl, but several.

If you want to contact one of our data controllers, please contact the DG COMM Website Management Unit of the Directorate-General for Communication, which acts as a hub and will redirect your request to the appropriate data controller.

You may contact the Website Management Unit by email at webmaster@europarl.europa.eu or by post, in a sealed envelope, at:

European Parliament

Directorate-General for Communication,

Directorate for Communication Support and Analytics,

Website Management Unit, for the attention of the Head of Unit,

60 rue Wiertz / Wiertzstraat 60,

1047 - Bruxelles/Brussel,

Belgium

We collect your personal information only to the extent necessary to fulfil a specific purpose related to our institutional tasks. We process your personal data through our server logs to analyse, monitor, and diagnose our technical infrastructure and applications, as well as for security purposes. Additionally, server logs are used to produce aggregated website traffic statistics, helping us understand overall usage patterns and improve the performance and accessibility of our online services.

We are legally permitted to process data on the basis of Article 5 (1)(a) of Regulation (EU) 2018/1725 interpreted in the light of Recital 22, since it is necessary for the performance of tasks carried out in the public interest by the European Parliament.

We collect some of your personal data in our server logs. However, in line with the principle of data minimisation, we limit the collection of any personal data as much as possible.
The personal data we collect on our infrastructure is:

• Your device’s IP address;
• The protocol you used (http; https; rtmp, etc.);
• Your device’s operating system;
• Your browser;
• The date and time of your connection;
• The pages of the European Parliament’s website you visited;
• The volume of data you downloaded.

The European Parliament processes personal data in accordance with the principles and provisions of Regulation (EU) 2018/1725.

Your personal data is not subject to automated decision-making.

We share personal data exclusively with trusted recipients, when it is necessary for the purposes specified and only with the categories of recipients identified.

Our trusted recipients are:

• our colleagues in the European Parliament’s Directorate-General for Information Technologies and Cybersecurity (DG ITEC) who are in charge of internal IT and cloud infrastructure. They may access your personal data in order to provide appropriate technical support;
• our cloud service providers, which are bounded by specific contractual clauses and by the obligations deriving from Regulation (EU) 2018/1725.

We do not share your personal data with any non-EU country or international organisation.

Under certain legally permitted conditions we may disclose your personal information to third parties, such as the European Anti-Fraud Office, the Court of Auditors, or law enforcement authorities, if necessary and proportionate for specific lawful purposes.

Your data is recorded in daily log files, which are stored for between thirty days and six months and then backed-up for between six months and a year. We automatically delete all data at the end of the defined period.
For further information on the server logs and backups of our IT infrastructure, we invite you to consult records no 177 and 179 in our Data Protection Register:

• no 177: DG ITEC ICT infrastructure provision and supervision operations related to European Parliament’s ICT equipment, networks and systems (running on DG ITEC ICT infrastructure)
• no 179: DG ITEC backup operations on European Parliament’s ICT equipment, networks and systems (running on DG ITEC ICT infrastructure)

Yes, we use cookies.

Our cookie policy and the list of cookies we place on users’ devices are available online on  our cookie policy page and our cookie inventory page

We use your browser’s local storage to support our Multimedia Centre website, which hosts our videos, and for our web streaming platform, which enables the live streaming and the recording of all debates, such as plenary and committee meetings, as well as of specific events taking place within the European Parliament.

Below, you can find the data stored in your browser.

• bitmovinplayer_config
  Purpose: This information in local storage is used by the externally hosted Bitmovin player to track playback metrics and optimise video performance.
• europarl|{id}
  Purpose: to record the cache for the streaming player in the Multimedia Centre website.
• featured.content.list.filter
  Purpose: Used to record users’ choice to display a type of media in the “Most relevant media” section of the homepage in the Multimedia Centre.

Local storages specifically related to our video player.

• npaw.accCode
  Purpose: Indicates the platform or service generating the data, in this case "watchity".
• npaw.data
  Purpose: A JSON object containing playback session information like:
  o h: host of the stream or video server (e.g., infinity-c41.youboranqs01.com).
  o pt: likely playtime or a playback-related parameter (5).
  o st: duration or session expiration time (120) in seconds.
  o c: session or channel code (e.g., V_20001700_cdmpn8edh1ai95y).
• npaw.dataTime
  Purpose: Timestamp in milliseconds indicating when npaw.data was recorded.
• npaw.npawDeviceUUID
  Purpose: Unique device identifier (UUID), used for session tracking and consistent playback experience.
• npaw.session
  Purpose: Active session code, matching c within npaw.data.
• npaw.sessionExpire
  Purpose: Session duration in seconds (120), after which the data may expire.

Note:
For all those local storages, this information is stored when the player URL is manually altered—specifically, when parameters that are part of the system’s integrity controls are removed or modified. Such manipulation bypasses the standard configuration and triggers Watchity’s internal fallback behaviour, which may temporarily enable local storage.

You can find more information about the data processed by the Multimedia Centre and the web streaming platform in their dedicated records, available in the Data Protection Register.

We do not normally use tracking technologies such as web beacons, browser fingerprinting or tracking pixels. In specific cases when some form of tracking is required, we describe the process in a specific data protection notice made available on the website concerned.

Our websites are self-contained and do not rely on external third parties to load additional assets. However, there is one exception: our webstreaming platform is supported by an external provider. This provider uses its own platform to ensure the smooth functioning of the system and makes calls to it to guarantee the delivery of our video recordings.

Webstreaming platform: glcloud.eu.

You have the right:

• to access your personal data;
• to rectify your personal data if it is inaccurate or incomplete;
• to erase your personal data.

In some cases you may also have the right:

• to restrict the processing of your personal data;
• to data portability;
• to object to the processing of your personal data lawfully carried out pursuant to Article 5(1)(a) of Regulation (EU) 2018/1725 of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data.

If you would like to exercise your rights or have questions concerning the processing of your personal data, you may write to us:

• by email at webmaster@europarl.europa.eu
• by post, in a sealed envelope, at European Parliament, Directorate-General for Communication, Directorate for Communication Support and Analytics, Website Management Unit, to the attention of the Head of Unit, 60 rue Wiertz / Wiertzstraat 60, 1047 Bruxelles/Brussel, Belgium.

If you have any remarks or complaints regarding the way we process your personal data, please contact the Data Protection Officer of the European Parliament by writing to data-protection@europarl.europa.eu.

In all situations, you have the right of recourse to our supervisory authority, the European Data Protection Supervisor (EDPS), by writing to edps@edps.europa.eu. Further information can be found on the EDPS page about Complaints.

In addition to our websites, we also use social media platforms to promote our activities.

You can share our web pages and access our social media accounts via icons on our website. To protect your privacy, our icons do not store any cookies on your device. They will redirect you to the social media platform concerned by opening a new browser tab.

When we use a social media widget on our pages, the content is only displayed after you have explicitly accepted its privacy policy and consented to continue. As each social media channel has its own privacy policy, we strongly recommend that you read the policy carefully before using the channel.

If you have any questions or concerns about how we use social media platforms, you can find further information in our dedicated data protection record ‘European Parliament presence on social media’, available in our Data Protection Register.