RECORD OF PERSONAL DATA PROCESSING

31 of the REGULATION (EU) 2018/1725 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (henceforth the "Data protection regulation") Reco. [...] D.1, Directorate-General for Informatics (DIGIT) DIGIT-D1@ec.europa.eu 7 Purpose of the processing The purpose of this processing operation is to use personal data for analysing the quality and the scientific impact of the ERC-funded research (through a peer- reviewed evaluation). [...] C also receives an annex to this technical report with public information: the list of evaluated projects, the name of the PI and the project HI. [...] 11 Recipients of the data The information gathered for the evaluation and the raw data generated during the evaluation are accessible on a need to know basis to: selected ERCEA staff involved in the activity and on the basis of the assigned tasks external experts, under a confidential contract have access to data about projects. [...] 13 General description of the technical and The information gathered for the evaluation and the raw organisational security measures data generated during the evaluation are stored in the IT systems and ERCEA folders, accessible to ERCEA staff involved in the activity, IT staff, and DIGIT.