Right of access

page

Under Article 36 of the Europol Regulation[1] , any individual is entitled to obtain information on whether personal data relating to him or her are processed by Europol. There is no charge for exercising this right.

Type of information

Europol shall provide you with confirmation as to whether or not operational personal data concerning you are processed, and where that is the case, to provide you with the right to access operational personal data and the following information:

(a) the purposes of and legal basis for the processing;

(b) the categories of operational personal data concerned;

(c) the recipients or categories of recipients to whom the operational personal data have been disclosed, in particular recipients in third countries or international organisations;

(d) where possible, the envisaged period for which the operational personal data will be stored, or, if not possible, the criteria used to determine that period;

(e) the existence of the right to request from the controller rectification or erasure of operational personal data or restriction of processing of operational personal data concerning the data subject;

(f) the right to lodge a complaint with the European Data Protection Supervisor and his or her contact details;

(g) communication of the operational personal data undergoing processing and of any available information as to their origin.

According to Article 81 of Regulation 2018/1725[2], applicable to Europol under Article 27a of the Amended Europol Regulation, Europol may restrict, wholly or partly, the data subject’s right of access to the extent that, and for as long as, such a partial or complete restriction constitutes a necessary and proportionate measure in a democratic society with due regard for the fundamental rights and legitimate interests of the natural person concerned, in order to:

  • avoid obstructing official or legal inquiries, investigations or procedures;
  • avoid prejudicing the prevention, detection, investigation or prosecution of criminal offences or the execution of criminal penalties;
  • protect the public security of Member States;
  • protect the national security of Member States;
  • protect the rights and freedoms of others, such as victims and witnesses.

How to exercise your right of access

According to Article 36 (3) of the Europol Regulation, you can exercise your right of access by making a request to the authority appointed for that purpose in the Member State of your choice or to Europol (please, see below the contact details of the authorities in the Member States). If you address your data subject access request via an authority, the latter should send it to Europol without delay and in any case within one month of receipt.

After receiving the request, Europol should provide you with an answer without undue delay and in any case within three months of receiving it. 

Send your request for access directly to Europol

To exercise your data subject access request directly to Europol, please send it to:

Europol  
Data Protection Function  
P.O.Box 90850  
2509 LW The Hague  
The Netherlands

Or to dpf-dsar@europol.europa.eu with subject matter: “Data Subject Access Request”. 

There are no specific requirements on the format of a request. However, you must attach a copy of your ID or the information page on your passport to in order to allow us to verify your identity. Only in case the request is exercised on your behalf by a lawyer a power of attorney should be attached. 

You can also exercise your right of access by sending a written request for access to one of the following competent authorities listed below. You may choose to which of these authorities to make your request to. 

National Competent Authorities 

Austria/Österreich

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Büro 2.2 Nationale Stelle EUROPOL   
Josef-Holaubek-Platz 1, 1090 Wien,   
Email: BMI-II-BK-2-2@bmi.gv.at   
2. Contact details of the national data protection authority   
Österreichische Datenschutzbehörde   
Barichgasse 40-42, 1030 Wien   
Tel: +43 1 52 152-0   
Email: dsb@dsb.gv.at   
 

België/Belgique

Contact details of the body to which requests for access, rectification or erasure should be addressed and police dedicated national data protection authority   
Controleorgaan op de politionele   
informatie/Organe de contrôle de   
l’information policière   
Leuvenseweg/Rue de Louvain 48   
1000 Brussel/Bruxelles   
België/Belgique   
Tel: +32 2 549 94 20   
Email : info@controleorgaan.be /   
info@organedecontrole.be   
Website: https://www.controleorgaan.be /  
https://www.organedecontrole.be   
Police processing monitoring:   
Controleorgaan op de politionele   
informatie/Organe de contrôle de l’information   
policière   
 

Bulgaria

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Ministry of Interior   
29, Shesti Septemvri Str.   
1000 SOFIA   
Tel: +359 2 9825 000   
Email: priemna@mvr.bg   
13 Coordinated Supervision Committee - A Guide for exercising data subjects’ rights July 2023   
Website: https://www.mvr.bg/   
2. Contact details of the national data protection authority   
Commission for Personal Data Protection   
2, Prof. Tsvetan Lazarov blvd.   
Sofia 1592   
Tel: + 359 2 915 3519   
Fax: +359 2 915 3525   
Email: kzld@cpdp.bg   
Website: https://www.cpdp.bg/   
 

Croatia

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Ministry of the Interior   
Ulica grada Vukovara 33   
HR - 10 000 Zagreb   
Email: pitanja@mup.hr   
Website: www.mup.hr   
2. Contact details of the national data protection authority   
Croatian Personal Data Protection Agency   
Selska cesta 136   
10000 Zagreb   
Tel: +385 1 4609 000   
Fax: +385 1 4609 099   
Email: azop@azop.hr   
Website: http://www.azop.hr/   
 

Cyprus

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Chief of Police   
(for EUROPOL National Unit),   
Antistratigou Evangelou Floraki Street,   
Police Headquarters,   
1478 Nicosia,Cyprus   
Email: cyeuropol@police.gov.cy   
2. Contact details of the national data protection authority   
Commissioner for Personal Data Protection   
15 Kypranoros Street   
1061 Nicosia   
14 Coordinated Supervision Committee - A Guide for exercising data subjects’ rights July 2023   
P.O. Box 23378, CY-1682 Nicosia   
Tel: +357 22 818 456   
Fax: +357 22 304 565   
Email: commissioner@dataprotection.gov.cy   
Website: http://www.dataprotection.gov.cy/  
 

Czech Republic

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Policie České republiky   
Policejní prezidium ČR   
Strojnická 27   
170 89 Praha 7   
Česká republika   
Email: epodatelna.policie@pcr.cz   
Website: www.policie.cz   
2. Contact details of the national data protection authority   
Úřad pro ochranu osobních údajů   
Pplk. Sochora 27   
170 00 Praha 7   
Česká republika   
Email: posta@uoou.cz   
Website: www.uoou.cz   
 

Estonia

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Europol National Unit   
Police and Border Guard Board   
Pärnu mnt 139, 15060 Tallinn, Estonia   
Email: ppa@politsei.ee   
Website: https://www.politsei.ee/en/   
2. Contact details of the national data protection authority   
Estonian Data Protection Inspectorate   
(Andmekaitse Inspektsioon)   
Tatari 39   
10134 Tallinn   
Tel: +372 6274 135   
Email: info@aki.ee   
Website: http://www.aki.ee/   
15 Coordinated Supervision Committee - A Guide for exercising data subjects’ rights July 2023   
 

Finland/Suomi

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
National Bureau of Investigation   
Tikkurilantie 30   
PL 285   
FIN-01301 Vantaa   
Suomi/Finland   
Email: kirjaamo.keskusrikospoliisi@poliisi.fi   
2. Contact details of the national data protection authority   
Office of the Data Protection Ombudsman   
Lintulahdenkuja 4   
P.O. Box 800   
FIN-00531 Helsinki   
Suomi/Finland   
Tel: +358 29 566 6700   
Email: tietosuoja@om.fi   
Website: http://www.tietosuoja.fi/en/   
 

France

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Commission Nationale de l'Informatique et   
des Libertés (CNIL)   
3 Place de Fontenoy   
TSA 80715 - 75334 Paris CEDEX 07   
France   
Tel: +33 1 53 73 22 22   
Website: http://www.cnil.fr   
2. Contact details of the national data protection authority   
Commission Nationale de l'Informatique et des   
Libertés (CNIL)   
3 Place de Fontenoy   
TSA 80715 - 75334 Paris CEDEX 07   
France   
Tel: +33 1 53 73 22 22   
Website: http://www.cnil.fr   
16 Coordinated Supervision Committee - A Guide for exercising data subjects’ rights July 2023   
 

Germany/Deutschland

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Bundeskriminalamt   
65173 Wiesbaden   
Germany   
Email: ds-petenten@bka.bund.de   
2. Contact details of the national data protection authority   
Federal Commissioner for Data Protection and   
Freedom of Information   
Graurheindorfer Str. 153   
53117 Bonn   
Germany   
Tel: +49 228 997799 0   
Email: poststelle@bfdi.bund.de   
De-mail: poststelle@bfdi.de-mail.de   
Website: https://www.bfdi.bund.de   
 

Greece/Ελλάδα

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Ministry of Citizen Protection   
Hellenic Police HQ   
International Police Cooperation Division   
Europol National Unit   
4, P. Kanellopoulou Street   
101 77, Athens   
Greece   
Tel. 1: +30210 69 842 86   
Tel. 2: 213 1520334   
Email: europol@police.gr   
2. Contact details of the national data protection authority   
Hellenic Data Protection Authority   
Kifisias Av. 1-3, PC 11523   
Ampelokipi Athens   
Greece   
Tel: +30210 64 75 600   
Fax: +30210 64 75 628   
Email: contact@dpa.gr   
Website: http://www.dpa.gr/   
17 Coordinated Supervision Committee - A Guide for exercising data subjects’ rights July 2023   
 

Hungary

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
National Police Headquarters   
International Law Enforcement Cooperation   
Centre   
Address: H-1139 Budapest, Teve u. 4-6   
Postal address: H-1903 Budapest, Pf.: 314/15   
Tel: +36 1 443 5596   
Fax: +36 1 443 5815   
Email: nebek@nebek.police.hu   
Website: http://www.police.hu   
2. Contact details of the national data protection authority   
National Authority for Data Protection and   
Freedom of Information   
H-1055 Budapest, Falk Miksa u.9-11.   
Postal address: H-1363 Budapest, Pf.:9   
Tel: +36 1 391 1400   
Email: ugyfelszolgalat@naih.hu   
Website: http://www.naih.hu   
 

Ireland

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Europol National Unit   
Liaison & Protection   
Garda Headquarters   
Phoenix Park   
Dublin 8   
Tel: +353 1 666 0000   
Website: http://www.garda.ie   
2. Contact details of the national data protection authority   
Data Protection Commission   
21 Fitzwilliam Square,   
Dublin 2, D02 RD28,   
Ireland   
Phone: +353 (01) 7650100   
Email: info@dataprotection.ie   
Website: www.dataprotection.ie   
18 Coordinated Supervision Committee - A Guide for exercising data subjects’ rights July 2023   
 

Italia

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Unità Nazionale Europol   
c/o Direzione Centrale della Polizia Criminale – Servizio per la Coop.ne Int.le di Polizia   
Via Torre di Mezzavia, 9   
00173 Roma – Italy   
2. Contact details of the national data protection authority   
Garante per la Protezione dei Dati Personali   
Piazza di Monte Citorio 121   
I-00186 Roma   
Italia   
Tel: +39 06 69677 1   
Fax: +39 06 69677 3785   
Email: garante@garanteprivacy.it   
Website: http://www.garanteprivacy.it/   
 

Latvia

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Data State Inspectorate   
Elijas Street 17,   
LV 1050 Riga   
Tel: +371 6722 3131   
Email: pasts@dvi.gov.lv   
Website: http://www.dvi.gov.lv/   
2. Contact details of the national data protection authority   
Data State Inspectorate   
Elijas Street 17,   
LV 1050 Riga   
Tel: +371 6722 3131   
Email: pasts@dvi.gov.lv   
Website: http://www.dvi.gov.lv/   
19 Coordinated Supervision Committee - A Guide for exercising data subjects’ rights July 2023   
 

Lithuania

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
International Liaison Office of Lithuanian   
Criminal Police Bureau,   
Saltoniskiu St. 19   
LT-08105 Vilnius   
Tel: +370 5 2719900   
Fax: +370 52719924   
Email: trv@policija.lt   
Website: www.policija.lt   
2. Contact details of the national data protection authority   
State Data Protection Inspectorate   
Sapiegos Str. 17   
LT-10312 Vilnius   
Tel: + 370 5 279 14 45   
Email: ada@ada.lt   
Website: https://vdai.lrv.lt   
 

Luxembourg

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Direction Générale de la Police Grand-Ducale   
A l’attention du délégué à la protection des données   
Cité Policière Grand-Duc Henri,   
B.P. 1007   
L-2957 Luxembourg   
Email : dpo@police.etat.lu   
Website: https://police.public.lu/fr/support/protection-des-donnees-a-caractere-personnel.html   
2. Contact details of the national data protection authority   
Commission Nationale pour la Protection des Données   
15, boulevard du Jazz   
L-4370 Belvaux   
Tel: +352 2610 60 1   
Fax: +352 2610 60 29   
Email: info@cnpd.lu   
Website: http://www.cnpd.lu   
20 Coordinated Supervision Committee - A Guide for exercising data subjects’ rights July 2023   
 

Malta

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
The Data Protection Officer   
Legal Unit   
Police Headquarters   
St. Calcedonius Square   
Floriana FRN 1530   
Tel: +35621224001   
Website: www.pulizija.gov.mt   
2. Contact details of the national data protection authority   
Office of the Information and Data Protection   
Commissioner   
Second Floor, Airways House   
High Street, Sliema SLM 1549   
Tel: +356 2328 7100   
Fax: +356 2328 7198   
 

Nederland

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Dutch National Police - Central Unit   
Privacy Desk   
PO Box 100   
3970 AC Driebergen   
The Netherlands   
Tel: +31 618 144 712   
Email: jz.le@politie.nl   
2. Contact details of the national data protection authority   
Dutch Data Protection Authority (Autoriteit Persoonsgegevens)   
PO Box 93374   
2509 AJ DEN HAAG   
The Netherlands   
Tel: +31-70-8888500   
Fax: +31-70-8888501   
Email: info@autoriteitpersoonsgegevens.nl   
Website: www.autoriteitpersoonsgegevens.nl   
21 Coordinated Supervision Committee - A Guide for exercising data subjects’ rights July 2023   
 

Poland

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
National Police Headquarters   
International Police Cooperation Bureau   
ul. Puławska 148/150 02-624 Warsaw   
Tel: +47 72 123 72   
Fax: +47 72 144 94   
Email: bmwp.kgp@policja.gov.pl   
Website: https://policja.pl/pol/kgp/bmwp   
2. Contact details of the national data protection authority   
Personal Data Protection Office   
ul. Stawki 2 00-193 Warsaw   
Tel: +48 22 531 03 00   
Email: kancelaria@uodo.gov.pl   
Website: https://uodo.gov.pl/   
 

Portugal

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Polícia Judiciária (PJ)   
Lisboa   
Email: Epd-dpo@pj.pt   
Website: https://www.policiajudiciaria.pt/   
2. Contact details of the national data protection authority   
Comissão Nacional de Proteção de Dados - CNPD   
Av. D. Carlos I, 134-1°   
1200-651 Lisboa   
Tel: +351 21 392 84 00   
Fax: +351 21 397 68 32   
Email: geral@cnpd.pt   
Website: https://www.cnpd.pt/   
 

Romania

1. Contact details of the body to which requests for rectification or erasure should be addressed   
Center for International Police Cooperation   
22 Coordinated Supervision Committee - A Guide for exercising data subjects’ rights July 2023   
1-5 Calea 13 Septembrie, Bucharest,   
5th District Romania   
Tel: +40 21 315 96 26, +40 21 314 05 40,   
+40 21 314 00 25   
Fax: +40 21 314 12 66, +40 21 312 36 00   
Email: ccpi@mai.gov.ro   
Website: www.politiaromana.ro/ccpi.htm   
National   
2. Contact details of the national data protection authority   
National Supervisory Authority for personal   
data processing   
B-dul Magheru 28-30 (5th floor)   
1st District   
010336 - BUCHAREST   
Tel: +40 31 805 9211   
Fax: +40 31 805 9602   
Email: anspdcp@dataprotection.ro   
Website: http://www.dataprotection.ro/   
 

Slovenia

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Policija, Ministrstvo za notranje zadeve   
Štefanova 2   
1501 - LJUBLJANA   
Tel: +386 1 428 47 80   
Email: gp.policija@policija.si   
Website: https://www.policija.si   
2. Contact details of the national data protection authority   
Information Commissioner of the Republic of Slovenia   
Dunajska 22   
1000 LJUBLJANA   
Tel: +386 1 230 97 30   
Email: gp.ip@ip-rs.si   
Website: https://www.ip-rs.si/   
 

Slovak Republic

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Ministerstvo Vnútra Slovenskej Republiky   
Pribinova 2   
81272 - BRATISLAVA   
Fax: +421 2 5094 4397   
Website: http://www.minv.sk   
2. Contact details of the national data protection authority   
Office for Personal Data Protection of the   
Slovak Republic   
Hraničná 12   
82007 – BRATISLAVA   
Tel: + 421 2 32 31 32 14   
Fax: + 421 2 32 31 32 34   
Email: statny.dozor@pdp.gov.sk   
Website: http://www.dataprotection.gov.sk/   
23 Coordinated Supervision Committee - A Guide for exercising data subjects’ rights July 2023   

 

Spain/España

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
División de Cooperación Internacional,   
Dirección General de la Policía,   
POLICÍA NACIONAL   
Avda Pío XII, 50   
28016-MADRID   
Tel: 9133227638   
Fax: 913103620   
Email: dcr.gabinete@policia.es   
2. Contact details of the national data protection authority   
Agencia Española de Protección de Datos   
(AEPD)   
C/Jorge Juan, 6   
28001 Madrid   
Tel: +34 91399 6200   
Fax: +34 91455 5699   
Email: internacional@agpd.es   
24 Coordinated Supervision Committee - A Guide for exercising data subjects’ rights July 2023   
 

Sweden

1. Contact details of the body to which requests for access, rectification or erasure should be addressed   
Swedish Police Authority   
106 75 Stockholm   
Sweden   
Tel: +46 114 14   
E-mail: registrator.kansli@polisen.se   
Direct e-mail to Data Protection Officer:   
dataskyddsombud@polisen.se   
2. Contact details of the national data protection authority   
IMY (Integritetsskyddsmyndigheten)   
Fleminggatan 14, 7th floor   
Box 8114   
104 20 Stockholm   
Sweden   
Tel: +46 8 657 6100   
Email: imy@imy.se   
Website: https://www.imy.se   
 

EDPS

European Data Protection Supervisor 
Postal address: Rue Wiertz 60, B-1047 Brussels 
Office address: Rue Montoyer 30, B-1000 Brussels 
Tel: +32 2 283 19 00 
Email: edps@edps.europa.eu 
Website: edps.europa.eu

 

How to exercise your right to rectification, erasure and restriction

Any data subject wishing to exercise the right to rectification or erasure of personal data or of restriction of processing of personal data that relate to him or her referred to in Article 82 of Regulation (EU) 2018/1725 may make a request to that effect, through the authority appointed for that purpose in the Member State of his or her choice, or to Europol. Where the request is made to that authority, it shall refer the request to Europol without undue delay and within one month of receipt.

Europol’s tasks

According to Article 36 (5) Europol shall consult the competent authorities of the Member States and the provider of the data concerned prior taking a decision regarding your request for access.

A decision on access to personal data shall be conditional on close cooperation between Europol and the Member States and the provider of the data directly concerned by the access of the data subject to such data.

If a Member State or the provider of the data objects to Europol's proposed response, it shall notify Europol of the reasons for its objection. Europol shall take the utmost account of any such objection. 

Europol shall subsequently notify its decision to the competent authorities concerned and to the provider of the data.

Europol shall restrict rather than erase personal data if there are reasonable grounds to believe that erasure could affect the legitimate interests of the data subject. Restricted data shall be processed only for the purpose of protecting the rights of the data subject, where it is necessary to protect the vital interests of the data subject or of another person, or for the purposes laid down in Article 82(3) of Regulation (EU) 2018/1725.

Right to lodge a complaint with the EDPS

Under Article 47 of the Amended Europol Regulation, you have the right to lodge a complaint with the European Data Protection Supervisor (EDPS) [3]   if you consider that the processing by Europol of personal data relating to you does not comply with the Amended Europol Regulation. 

Where a complaint relates to a decision taken on the right of access or right to rectification, erasure or restriction, the EDPS shall consult the national supervisory authorities of the Member State that provided the data or the Member State directly concerned. In adopting his or her decision, which may extend to a refusal to communicate any information, the EDPS shall take into account the opinion of the national supervisory authority.

Where a complaint relates to the processing of data provided by a Member State to Europol, the EDPS and the national supervisory authority of the Member State that provided the data shall, each acting within the scope of their respective competences, ensure that the necessary checks on the lawfulness of the processing of the data have been carried out correctly. 

Where a complaint relates to the processing of data provided to Europol by Union bodies, third countries or international organisations, or of data retrieved by Europol from publicly available sources or resulting from Europol's own analyses, the EDPS shall ensure that Europol has correctly carried out the necessary checks on the lawfulness of the processing of the data.

Right to a judicial remedy against the EDPS

According to Article 47 of the Europol Regulation any action against a decision of the EDPS shall be brought before the Court of Justice of the European Union.

Under Article 42(4) of the Europol Regulation, you have the right to request the national supervisory authority to verify the legality of any transfer or communication to Europol of data concerning you in any form and of access to those data by the Member State concerned. That right shall be exercised in accordance with the national law of the Member State in which the request is made.

Other rights

One of the main objectives of data protection law is to enhance data subjects’ control over their data. In order to guarantee this control, data subjects have a number of rights within the right to data protection such as the right of information, access, rectification, portability, right to erasure under Regulation 2018/1725 applicable to Europol for the processing of administrative personal data in accordance with Article 27a (1) of the Amended Europol Regulation.

However, according to EU secondary legislation these rights could be restricted in exceptional circumstances and with the safeguards laid down in Regulation (EU) 2018/1725. The EU institutions, bodies and agencies should adopt such restrictions only where strictly necessary and always based on a legal act or, in the absence of such a legal act, on internal rules adopted by the highest level of management and published in the Official Journal of the European Union. 

For Europol, the internal rules concerning restrictions of certain rights of data subjects in relation to processing of administrative personal data were adopted by the Management Board of Europol on 09/06/2020 (active link to Decision of the Management Board of Europol of 9 June 2020 on internal rules concerning restrictions of certain rights of data subjects in relation to processing of administrative personal data by Europol  (https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32020Q0810%2802%29) , OJ L 260, 10.8.2020, p. 15–20). 

[1] Regulation (EU) 2022/991 of the European Parliament and of the Council of 8 June 2022 amending Regulation (EU) 2016/794, as regards Europol’s cooperation with private parties, the processing of personal data by Europol in support of criminal investigations, and Europol’s role in research and innovation, OJ L 169, 27.6.2022, p. 1–42

[2] Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (Text with EEA relevance.) PE/31/2018/REV/1, OJ L 295, 21.11.2018, p. 39–98

[3] DPS postal address: Rue Wiertz 60, B-1047 Brussels, Belgium. email: edps@edps.europa.eu, website: www.edps.europa.eu

Tags

    • Data Protection Function (DPF)
    • European Data Protection Supervisor (EDPS)