Privacy policy
Last updated: 17 June 2026
This Privacy Policy explains how the personal data of users visiting this website is collected, used and protected.
This website belongs to Antonio López-Istúriz and has an informational and institutional purpose. Its main purpose is to provide information about his public activity, biography, news, media content and contact channels.
1. General information on data protection
The protection of users’ personal data is a priority. Personal data is therefore processed confidentially and in accordance with applicable data protection legislation, in particular the General Data Protection Regulation, as well as this Privacy Policy.
When a person visits this website, certain personal data may be collected. Personal data means any information that can directly or indirectly identify a natural person.
This Privacy Policy explains what data is collected, for what purposes it is used, the legal basis for processing, how long it is kept and what rights users may exercise.
2. Data controller
The data controller responsible for the personal data collected through this website is:
Antonio López-Istúriz
Address:
European Parliament
ALTIERO SPINELLI Building
10E108
60, rue Wiertz / Wiertzstraat 60
B-1047 Brussels/Bruxelles
Email: antonio.lopezisturiz@europarl.europa.eu
Phone: 0032 2 28 45713
The data controller is the natural or legal person who determines the purposes and means of the processing of personal data.
3. How data is collected
Personal data may be collected in the following ways:
When the user directly provides their data, for example by contacting us by email, phone or contact form.
When the website is accessed, certain technical data may be collected automatically by the IT systems necessary for the operation of the website.
When cookies or similar technologies are used, always in accordance with the applicable consent settings.
4. Personal data that may be processed
The following categories of data may be processed through this website:
- Identification and contact data, such as name, surname, email address, phone number and any other information voluntarily included by the user in their communication.
- Technical browsing data, such as IP address, browser type and version, operating system, referrer URL, date and time of access, pages visited and other data necessary to ensure the proper functioning of the website.
- Data derived from the use of cookies or similar technologies, where applicable.
5. Purposes of processing
Personal data may be processed for the following purposes:
- To manage and respond to enquiries, requests or communications sent through the website, by email or through other enabled channels.
- To ensure the proper technical operation of the website.
- To maintain the security, stability and availability of the website.
- To prevent misuse, unauthorised access, cyberattacks or technical incidents.
- To analyse, where applicable, website use in an aggregated and statistical manner.
- To comply with applicable legal obligations.
6. Legal basis for processing
The processing of personal data is carried out on the following legal bases, depending on each case:
- The user’s consent, when the user voluntarily provides their data or accepts non-essential cookies.
- The legitimate interest of the controller, in order to ensure the proper functioning, security, stability and improvement of the website.
- Compliance with applicable legal obligations.
- The implementation of pre-contractual or contractual measures, where the user’s enquiry or request relates to a specific request for information or services.
- The user may withdraw consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal.
7. Hosting and technical providers
The website may be hosted on servers managed by external technical providers contracted to ensure the operation, security and availability of the website.
These providers may process technical data, such as IP addresses or server logs, only to the extent necessary to provide hosting, maintenance, security, technical management or support services.
Where these providers process personal data on behalf of the controller, the relevant data processing agreements will be entered into in accordance with applicable data protection legislation.
8. Server log files
The website provider may automatically collect and store information in server log files. This information may include:
- Browser type and version.
- Operating system used.
- Referrer URL.
- Host name of the accessing device.
- Date and time of the server request.
- IP address.
These data are not combined with other data sources and are processed on the basis of the legitimate interest in ensuring the technically correct, secure and optimised presentation of the website.
9. Contact by email, phone or form
When a person contacts us by email, phone, web form or any other enabled channel, the data provided is processed to manage and respond to the request.
Data sent in the context of an enquiry will be kept for as long as necessary to handle it and, thereafter, for the periods required under applicable legislation.
These data will not be disclosed to third parties unless required by law or necessary to properly handle the request.
10. Cookies and similar technologies
This website may use technical cookies that are necessary for its operation.
It may also use analytics or third-party cookies only where the user has given consent, where applicable, through the cookie banner or settings panel.
The user may configure, reject or withdraw consent at any time through the cookie settings panel, where available.
Technical cookies are necessary to enable browsing and the use of the basic functions of the website. Non-essential cookies will only be installed where prior consent has been given.
11. Social media and external links
This website may include links to official social media profiles, institutional pages or other external websites.
By clicking on such links, the user leaves this website and becomes subject to the privacy policies and terms of use of the relevant platform or website.
The controller of this website is not responsible for the data processing carried out by third-party platforms.
12. Recipients of the data
Personal data will not be transferred to third parties unless there is a legal obligation, it is necessary for the provision of the requested service, or another lawful basis allows it.
Certain technical providers, such as hosting, web maintenance, email, security, analytics or form management providers, may have access to personal data, always subject to the appropriate legal safeguards.
Personal data is not sold to third parties.
13. International data transfers
If providers located outside the European Economic Area are used, or if international data transfers may occur, appropriate safeguards under applicable law will be adopted.
Such safeguards may include adequacy decisions, standard contractual clauses or other legally valid mechanisms.
14. Retention period
Personal data will be kept only for as long as necessary to fulfil the purpose for which it was collected.
Where the user requests deletion of their data or withdraws consent, the data will be deleted unless there is a legal obligation to retain it or another lawful basis allows its continued retention.
Technical browsing data will be kept for the time necessary to ensure the security, operation and maintenance of the website.
15. User rights
The user may exercise the following rights:
- Right of access to their personal data.
- Right to rectification of inaccurate or incomplete data.
- Right to erasure.
- Right to object to processing.
- Right to restriction of processing.
- Right to data portability, where applicable.
- Right to withdraw consent at any time.
To exercise these rights, the user may send a request to:
antonio.lopezisturiz@europarl.europa.eu
The request must clearly indicate the right the user wishes to exercise and allow the identification of the applicant.
The user also has the right to lodge a complaint with the competent data protection supervisory authority.
16. Right to object
Where the processing of personal data is based on legitimate interest, the user has the right to object at any time to the processing of their data on grounds relating to their particular situation.
In the event of an objection, the affected personal data will no longer be processed unless there are compelling legitimate grounds for the processing that override the interests, rights and freedoms of the user, or where the processing is necessary for the establishment, exercise or defence of legal claims.
If personal data were processed for direct communication purposes, the user may object to such processing at any time. In that case, the data will no longer be used for that purpose.
17. Security
This website uses appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration or destruction.
For security reasons and to protect the transmission of confidential content, this website uses SSL/TLS encryption where available. An encrypted connection can be recognised by the fact that the browser address begins with “https://” and a lock icon appears in the browser bar.
However, data transmission over the Internet may involve security risks. It is not possible to guarantee absolute protection against third-party access.
18. Unsolicited communications
The use of contact details published on this website for sending unsolicited commercial, promotional or informational communications is prohibited.
The controller reserves the right to take appropriate legal action in the event of unsolicited communications.
19. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect legal, technical or organisational changes.
The version currently in force will always be the one published on this page.