News, events, publications

EDA-DPR-060 - FNC DWS-AppSecStore

Records and compliance checklist

Under Article 31 of the new Regulation, EUIs have to keep records of their processing operations. This template covers two aspects:

1.Mandatory records under Article 31 of the new rules (recommendation: publicly available)
2.Compliance check and risk screening (internal).

The header and part 1 should be publicly available; part 2 is internal to the EUI. By way of example, column 3 contains a hypothetical record on badges and physical access control in a EUI.
Nr Item Explanation
Header - versioning and reference numbers (recommendation: publicly available)
1. Last update of this record 05-09-2022
2. Reference number EDA-DPR-060
part 1 - article 31 record (recommendation: publicly available)
3. Name and contact details of controller
European Defence Agency

Rue des Drapiers 17-23
B-1050 Brussels
Belgium
4. Name and contact details of DPO

Head of the Legal Office, Legal Advisor / Data Protection Mr Pedro ROSA PLAZA

dataprotection@eda.europa.eu

5. Name and contact details of joint controller (where applicable)
N/A
6. Name and contact details of processor (where applicable)
N/A
7. Purpose of the processing
The Framework Nations Concept Digital Workspace (FNC DWS) is a web-based tool designed to support participating Member States in sharing information on FNC Clusters and Larger Formations. The application is restricted to governmental users representing FNC participating Member States and to governmental authorities that are participants and/or observers to FNC. Personal data are processed in order to allow participation and to provide information to the FNC DWS user community.
8. Description of categories of persons whose data EDA processes and list of data categories

The users are managed through Security Groups in AppSecStore:

  • FNC Country Administrator FNC Local Administrator FNC Publisher FNC Reader And the ECP Workspaces to the following FNC Clusters and Larger Formations: FNC Cluster Command and Control / Support - Logistics FNC Command and Control / Support - CBRN FNC Command and Control / Support - CIMIC FNC Cluster Command and Control / Support - Mission Networks FNC Command and Control / Support - Medical Support FNC Cluster Effects - Air C2 - Subcluster Joint Forces Air Component (JFAC) FNC Cluster Effects - Air C2 - Subcluster Tactical Air Command and Control Training Centre (TACCTC) FNC Cluster Effects - Anti Submarine Warfare (ASW) FNC Cluster Effects - Deployable Airbase Activation Modules (DAAM) FNC Cluster Effects - Joint Fire Support (JFS) FNC Cluster Protection - AMD - Subcluster Upper Layer (UL) FNC Cluster Protection - AMD - Subcluster Lower Layer (LL) FNC Cluster Protection - AMD - Subcluster Short Range Air Defence (SHORAD) FNC Cluster Operations Support - JISR - Subcluster MPA FNC Cluster Operations Support - JISR - Subcluster RPAS FNC Cluster Operations Support - JISR - Subcluster Coalition Shared Data (CSD) FNC Cluster Operations Support - GeoMETOC Support FNC Cluster Command and Control / Support - Multinational Helicopter Unit FNC Cluster Command and Control / Support - Multinational Air Transport Unit FNC Cluster Command and Control / Support - Multinational Basic Helicopter Training FNC Cluster Effects - Multinational Air Manoeuvre Training Center FNC Cluster Effects - Naval Mine Warfare FNC Cluster Effects - Military Engineering FNC Cluster Command and Control / Support - Multinational Military Police FNC Cluster Command and Control / Support - Enhanced Host Nation Support (eHNS) FNC Larger Formations - Land Divisions FNC Larger Formations - Multinational Air Group (MAG) FNC Larger Formations - Baltic Maritime Component Command (BMCC) FNC Larger Formations - Multinational Medical Coordination Centre (MMCC) FNC Larger Formations - Joint Logistics Support Group Headquarter (JLSG HQ) The total number of users is currently 100 and subject to daily change. We process the following data on every person who opens an user account: Name, E-Mail, Phone, Mobile, Address (Street, Postalcode, City), Employer. The data processed are not sensitive personal data in the sense of Article 10 of Regulation 2018/1725.
9. Time limit for keeping the data
Data will be retained for the period of the conduct of the specific FNC clusters and larger formations and will be deleted one month after the end of the cluster/larger formation activity. Data might be stored for longer periods if users retain their EDA Account in AppSecStore.
10. Recipients of the data
EDA Administrators of the FNC DWS (role is managed by the PO CDP & CODABA) have access to all FNC DWS user data. All FNC DWS national PoCs have access to all personal data of other users of their country. All Users of the FNC DWS have access to contact details (E-Mail Address and Telephone number) of all FNC DWS national PoCs. All Participants or Observers of FNC DWS have access to the contact details (E-Mail Address, and if provided Tel.) of the PoCs to this project of the participating or observing Member States. All FNC DWS users may contact any other FNC DWS users. By sending a message through the FNC DWS, the user discloses his/her e-mail address to the other user and may be contacted by this other user through e-mail.
11. Are there any transfers of personal data to third countries or international organisations? If so, to which ones and with which safeguards?
N/A
12. General description of security measures, where possible.
The measures implemented in the framework of AppSecStore and ECP are applicable also in this case, namely firewalls, checkpoints, antivirus, in order to ensure a level of security appropriate to the risks represented by the processing and the nature of the personal data to be protected. Such measures have been taken in particular to prevent any unauthorised disclosure or access, accidental or unlawful destruction or accidental loss, or alteration and to prevent all others unlawful forms of processing.
13. For more information, including how to exercise your rights to access, rectification, object and data portability (where applicable), see the privacy statement
Additional information is available by following the link to privacy statement here.