Your personal data is processed in accordance with Regulation (EU) No 2018/1725[1] on the protection of individuals with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data.

The data controller of the processing operation is COSME unit A1 of the Executive Agency for Small and Medium-sized Enterprises (EASME).

The following entity/ies process your personal data on our behalf: Technopolis Group, WAAT Ltd, BCW, OFCORES  -

The legal basis for the processing activities is/are

- Article 5(1)(a) of Regulation EU 2018/1725 because processing is necessary for the performance of a task carried out in the public interest (or in the exercise of official authority vested in the Union institution or body)[2];

- Article 5(1)(d) of Regulation EU 2018/1725 based on your explicit consent for your non- mandatory personal data indicated below; - etc.].

The purposes of this processing are to receive and evaluate applications to the Intelligent Cities Challenge (ICC), to provide a platform for the network of cities joining the Challenge and deliver ongoing support throughout the initiative.  

The following of your personal data are collected: your first name, last name, city, country, role, organisation, e-mail address, phone number are mandatory for the purposes outlined above.

In addition, the following non-mandatory personal data may be collected: your social media profile, including Linkedin, Twitter and or Facebook account can only be processed based on your explicit prior consent.

The recipients of your personal data will be Commission contractors in charge of the ICC website and bodies charged with monitoring or inspection tasks in application of EU law (e.g. internal audits, Court of Auditors, European Anti-fraud Office (OLAF)).  

Your personal data will not be transferred to third countries or international organisations.

The processing of your data will not include automated decision-making (such as profiling). 

Your personal data will be kept for a maximum period of 6 months from the date you register to the Website for unsuccessful applicants to the ICC. Data will be deleted at the end of this period. For successful applicants to the ICC, your personal data will be kept for the duration of the initiative.

You have the right to access your personal data and to request your personal data to be rectified, if the data is inaccurate or incomplete; where applicable, you have the right to request restriction or to object to processing, to request a copy or erasure of your personal data held by the data controller. If processing is based on your consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on your consent before its withdrawal.

Your request to exercise one of the above rights will be dealt with without undue delay and within one month.

If you have any queries concerning the processing of your personal data, you may address them to COSME unit A1.

You shall have right of recourse at any time to the EASME Data Protection Officer at and to the European Data Protection Supervisor at

Version February 2020

[1] Regulation (EU) 2018/1725 of the European Parliament and of the  Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L295/39 of 21.11.2018).

[2] Act of Establishment: Commission Implementing Decision C(2013/771/EU) of 17 December 2013 establishing the 'Executive Agency for Small and Medium-sized Enterprises' and repealing Decisions 2004/20/EC and 2007/372/EC.