Privacy policy

This notice relates to the processing of personal data by ENISA through the general ENISA website and other related portals or services. For any other specific ENISA activity that involves the processing of personal data, specific privacy notices are available.

ENISA processes personal data in accordance with the Community Regulation (EC) No 45/2001 of the European Parliament and of the Council (OJ L8 of 12.01.2001, p1) on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data.[1]

The data controller for any processing of personal data performed via the general ENISA website is ENISA (Public Affairs Team).

The data processor is EaudeWeb SRL., which provides the hosting of ENISA web site and other relevant services.

The processing of personal data via the general ENISA website falls under the following cases:

  • Website contact forms: 

Sometimes ENISA invites communication via contact forms on the website or by activating the end user’s email client and inviting an email.

When you send us a message via a contact form or email, you indicate your consent for the collection and further processing of your relevant personal data by ENISA (based on article 5(d) of Regulation (EC) 45/2001), in order for us to provide you with a reply. Such data include your email address, first and last name, title/subject and content of your message.

If the management team of the mailbox is unable to answer your question, it will forward your email to another service within ENISA. You will be informed via email about which service your question has been forwarded to. Your personal data will not be transferred to any third party.

  • ENISA newsletter:

In order to subscribe to ENISA’s newsletter through our website, you need to provide us with the following information: email, first name (optional), last name (optional), occupation, country (optional).

Your subscription to the newsletter indicates your consent for the collection and further processing of your relevant personal data by ENISA (based on article 5(d) of Regulation (EC) 45/2001) for the provision of the newsletter service.  

ENISA relies on an external service provider (Mailchimp: for the registration and management of subscriptions to its newsletter. This service provider is based in the US and ENISA has signed with the company specific terms on data processing, compliant with the model contractual clauses of the European Commission. The external service provider processes your personal data solely for the purpose of your newsletter subscription and related services (alerts, notifications). Your personal data will under no circumstances be shared with any third party.

Your personal data will be retained by ENISA as long as you remain registered in our newsletter list. You may unsubscribe from the ENISA’s newsletter list at any time by clicking on the relevant link available in the newsletter body or by sending an e-mail to ENISA's Public Affairs Team.

In case that you have indicated, upon subscription to the newsletter or later, your consent to be informed about ENISA studies and events, your personal data will be used for dissemination of future relevant information. In case you would like to withdraw your consent, please contact: ENISA's Public Affairs Team using the following e-mail address: .

  • ENISA events and expert groups:

Sometimes the ENISA’s website is used to provide registration of participants to specific ENISA events, such as conferences or workshops organised by the Agency. The ENISA’s website or other related portals or services (e.g. Resilience portal) may also be used for the submission of applications to participate in specific ENISA’s experts groups. Please see the specific privacy notice of each event or expert group for further information about the processing of personal data in this particular context.

  • Cookies:

ENISA's website uses Piwik (, an open source web analytics service to help analyse the use of this website. For more information see our cookies policy page.

ENISA's resilience portal ( does not use any cookies.

You have the right to access your personal data, the right to correct any inaccurate or incomplete personal data and the right to delete your data. If you have any queries concerning the processing of your personal data in the context of the ENISA’s website, you may address them to following e-mail address: .

You shall have right of recourse at any time to the ENISA Data Protection Officer (DPO) at and to the European Data Protection Supervisor at


We use cookies on our website to support technical features that enhance your user experience.
We also use analytics. To opt-out from analytics, click for more information.

I've read it More information