Data Protection

The EIF strives to implement the highest data protection standards in compliance with the Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data. In the context of the adoption of Regulation (EU) 2018/1725, the Board of Directors of the European Investment Bank (EIB) and of the European Investment Fund (EIF), adopted in November 2020, the EIB Group Personal Data Protection Policy. The Policy aims to demonstrate the common commitment of the EIB and the EIF to effectively apply the data protection principles enshrined in the Regulation.

In the context of the implementation of the Regulation the EIF has adopted the EIF Data Protection Rules implementing Regulation (EU) 2018-1725. These rules refer to the function of the Data Protection Officer (the DPO) and also to the obligations of other stakeholders inside the EIF (Controllers and Processors) and the rights of the data subjects.

In compliance with article 25 of the Regulation the EIF has adopted internal rules concerning the processing of personal data in relation to the provision of information to data subjects and the restriction of certain of their rights. This document was published on the Official Journal of the European Union on the 22nd of July 2020.

The EIF has appointed a Data Protection Officer who can be contacted by email at dpo@eif.org . If you wish to exercise your data protection rights (e.g. right of access, right to rectification, etc) please complete and submit this dedicated form

Here is the latest list of Records of Processing Activities (RopA) carried out by the EIF.

Data Protection Statements

EIF Investment and Advisory Activities

Prior to the subscription of any commitment, the EIF carries out an appropriate due diligence on all applicants and financial intermediaries in line with its Data Protection Statement as follows: Due Diligence on Applicants and Financial Intermediaries. 

The EIF also processes personal data of final recipients, i.e. of  individuals benefitting from EIF financial guarantees and equity investments provided to financial intermediaries. More information here: Processing of Final Recipients’ Personal Data.

In the context of the monitoring of the eligibility of final beneficiaries and of final recipient transactions in debt operations, the EIF processes personal data of the final beneficiaries and of other relevant individuals linked to the final beneficiaries and to the relevant transactions. More information here.

In the context of the EIF-NPI Equity Platform, the  EIF processes personal data. Read the statement here: Data Protection Statement related to the EIF-NPI Equity Platform.

The EIF acts as data controller for all data processing carried out in the context of the management of EU Microfinance platform FCP-FIS. More information here: EU Microfinance Platform FCP.

In the context of the WB EDIF Platform, the EIF processes personal data. Read the statement here: Data Protection Statement related to the WB EDIF Platform

In relation to non-incorporated Funds of Funds, the EIF processes personal data. More information on the data protection aspect of such processing is available here: Non-incorporated FoFs Privacy Statement

In relation to the EIF’s 4th pillar activity, the EIF processes personal data of potential interested parties (investors, distributors, associations,…) with a view to keep records of historical interactions with such parties who have been met/emailed/called. You can read the relevant statement here: Data Protection Statement Institutional Client Relationship – CRM tool

In order to perform its activities, the EIF holds a register of contacts for Equity and Private Credit Financial Intermediaries. You can read the relevant statement here: Register of contacts for Equity and Private Credit FIs 

EIF Marketing

In the context of the EIF’s Marketing activity, the EIF processes personal data of counterparts (intermediaries, final beneficiaries, and general public who submit inquiries). More detailed information on the legal basis, data subjects and categories, as well as the purpose and data recipients can be found here:

• Production of print material - Privacy Statement
• Production of video & written case-studies - Privacy Statement
• Social media - Privacy Statement

Furthermore, EIF Marketing, EIF OIM as well as other related services are processing data received through the relevent forms on the 'contact us' webpage. Details of this are further outlined in the privacy statement below: 

• Management of contact forms - Privacy Statement

Individuals who voluntarily subscribe to and participate in events organised by the EIF, may also be subject to rules related to personal data processing. Read the full statement: Data Protection Statement on Events.

Research & Market Analysis

In the context of EIF’s research and market analysis activity, the EIF also processes personal data of professionals and other individuals representing, directly or indirectly, EIF counterparts (intermediaries and final beneficiaries) as well as of other individuals relevant for the research-related purposes under consideration, including voluntary subscribers to the EIF mailing list for research-related updates.  More information here: Data Protection Statement Research and Market Analysis and here: Data Protection Statement on RMA Subscription List.

EIF procurement procedure

In relation to EIF procurement activities, the EIF processes personal data of tenderers and proposed subcontractors (natural and/or legal persons, incl. their staff or team members) in the context of their tender. More detailed information on the legal basis, data subjects and categories, as well as the purpose and data recipients can be found here: Data Protection Statement on Procurement.

EIF’s Governing Bodies & Legal Services

In relation to the functioning of the EIF’s governing bodies, the EIF processes personal data of members and alternate members of the Board of Directors, advisors and assistants of those members/alternates, and members of the Ethics and Compliance Committee. The EIF also processes personal data of members of the Audit Board. More detailed information on the legal basis, data subjects and categories, as well as the purpose and data recipients can be found here:

• Audio recording of Audit Board meetings - Privacy Statement
• Audio recording of Board of Directors meetings - Privacy Statement
• Confidentiality declarations Board assisting persons - Privacy statement
• Personal information of Board and Audit Board members - Privacy statement
• Personal information of members of the EIF Board of Directors and Ethics and Compliance Committee
• Storage of signature samples of the members of the Audit Board

In connection with EIF shareholder-related communications and information exchanges, the personal data of designated EIF shareholder representatives and associated contacts is processed. The corresponding data protection statement is available here.

In the context of providing selected EIF staff members and selected authorised signatories of EIF’s clients with qualified electronic signature, for the electronic signature of contracts, please refer to relevant data protection statement here. 

In the context of the storage, use and archiving of contractual and related documentation, the EIF processes personal data. Read the related statement here.

Compliance & KYC

In the context of the EIF Compliance monitoring program activity, the EIF processes personal data of the counterparts (intermediaries and final beneficiaries) and other relevant individuals linked to the counterparts/transactions. More information here: Processing of Natural Persons’ data for on-boarding/monitoring purposes

In relation to EIF suspicious transaction and activity reporting required by the 5th AMLD (Directive (EU) 2018/843 of the European Parliament and of the Council of 30 May 2018), the EIF processes personal data of counterparts, final beneficiaries and relevant individuals linked to EIF counterparts/transactions. More information here: Reporting activities on SAR and STR

In relation to the EIF AML/CFT standards and to its KYC activity, the EIF processes personal data of legal representatives of the respective applicant, financial intermediary and/or individuals. More information here: Detailed Integrity Risk Assessment and KYC Process Data Protection Statement

Investigations run by the EIB Group’s Fraud Investigations Division are administrative investigations for the purpose of detecting and preventing fraud, corruption and any other prohibited conduct affecting the EIB Group’s activities. You can find here the relevant data protection statement.

Operations and Information Management

In relation to GP’s quarterly reporting to investors, the EIF has outsourced the data input activity to an external service provider. In the scope of this service, the EIF shares quarterly reports with the service provider to enable the provision services. As such, personal data included in the quarterly reports are also shared with the service provider. More details here: Sharing fund managers’ quarterly reports – Data protection statement.

In relation to Financial Intermediaries’ regular quarterly reporting, the EIF has outsourced the data input activity to an external service provider. In the scope of this service, the EIF shares quarterly reports with the service provider to enable the provision of services. As such, personal data included in the quarterly reports are also shared with the service provider. Read the related data protection statement here.

In the context of the monitoring of final beneficiaries’ eligibility, and of final recipient transactions in debt operations, the EIF processes personal data related to those final beneficiaries and individuals linked to the final beneficiaries as well as the relevant transactions. More information on processing of final recipients' data for monitoring purposes. 

In the context of the information- and systems management activities, the EIF outsources some of its IT services to cloud solution partners who ensure the execution of support, maintenance and enhancement tasks under the control and supervision of the EIF. In this scope of services, the personal data managed within these solutions is subject to particular attention and control. The details about data protection within this domain of activity can be found here: Privacy Statement on EIF Corporate Platforms.

Human Resources

Recruitment panels are convened as part of the selection process for management staff vacancies positions at gra.

In the event of an alleged breach of professional obligations/misconduct, the EIF may carry out pre-disciplinary and disciplinary proceedings, which may result in disciplinary measures being taken. More detailed information on how personal data is processed in this context, which may include a report established by the relevant EIB/EIF services or the European Anti-Fraud Office, can be found here: Data protection statement on disciplinary measures