Skip to main content

Organisational part of the Agency entrusted with the processing of personal data

Head of Prevention and Research Unit (information(at)


The OSHwiki is an online encyclopaedia with the aim to provide relevant, reliable and updated information for the OSH community through a sustainable stock of OSHwiki articles. EU-OSHA enables authors to create and update OSHwiki articles for which personal data of the author is being processed in order to be able to determine whether the person has the relevant expertise in the field and to allow authors to create, access, manage their OSHwiki account and edit OSHwiki pages.

Legal basis

Council Regulation (EU) 2019/126 of the European Parliament and of the Council of 16 January 2019 establishing the European Agency for Safety and Health at Work (EU-OSHA), and repealing Council Regulation (EC) No 2062/94.

Type of data processed

The information processed when requesting an author account is:

  • Email address which is necessary to access the OSHwiki platform to create or edit an article
  • First and last name
  • Organisation
  • Professional experience in the field of expertise

Lawfulness of processing

The processing is based on Article 5.1(d) of Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data (hereinafter the Regulation).

Data recipients

Access to the personal data is granted on the basis of the role and responsibilities of the subjects involved (“need to know” principle):

  • Duly appointed EU-OSHA staff to the OSHwiki project
  • External provider hosting EU-OSHA’s server in case of technical problems

The data subject’s rights

Data subjects have the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or, where applicable, the right to object to processing or the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal (Articles 17, 18, 19, 20, 22, 23 and 24 of the Regulation).

Any requests to exercise one of those rights should be directed per email to info(at), including in the subject the words “data protection”.

Data subjects’ rights can be restricted only in the cases foreseen in Art 25 of the Regulation.

Information on the conservation period of data

Personal data related to authors is kept until the author sends an email to info(at) requesting the deletion of the account.

Security measures

We take appropriate security measures to protect against unauthorised access to or unauthorised alteration, disclosure or destruction of data. These include internal reviews of our data collection, storage and processing practices, appropriate encryption of communication and physical security measures to guard against unauthorised access to systems where we store personal data.

EU-OSHA stores data on our servers located in EU territory.

Request for information

For any further information regarding the handling of their personal data, data subjects can address their request to EU-OSHA Data Protection Officer at: dpo(at)

Recourse to the EDPS

Data subjects are entitled to make recourse to the European Data Protection Supervisor: , should they consider that the processing operations do not comply with the Regulation.

Date when processing starts

Date of log-in to the website/submission of author application form.