You are here


Legal information

The Napo Consortium produces the Napo films on behalf of a small group of European health and safety organisations: AUVA (Austria); DGUV (Germany); HSE (UK); INAIL (Italy); INRS (France), SUVA (Switzerland); and the European Agency for Safety and Health at Work (EU-OSHA). In addition, EU-OSHA has an agreement with DGUV (on behalf of the Consortium) to reproduce and supply copies of the Napo films to national Focal Points in all EU Member States, candidate and EFTA countries.

The Napo Consortium is administered by the

German Social Accident Insurance (DGUV)
Glinkastraße 40
D-10117 Berlin

Tel.: +49 30 288763800
Fax: +49 30 288763808

E-mail: info [at] dguv [dot] de; Internet:
Contact: gregor [dot] doepke [at] dguv [dot] de (Gregor Doepke)

The Napo website is managed and hosted by the European Agency for Safety and Health at Work (EU-OSHA)
Important: No liability can be accepted for the completeness or correctness of the information, nor for editorial or technical errors, omissions, etc.

In particular, no guarantee can be given for the correctness and completeness of external information accessible via links to external sites.

Privacy notice

Organisational part of the Agency entrusted with the processing of personal data

Andrew Smith, Head of Communication and Promotion Unit

Purpose of processing

For the purpose of producing anonymous statistics on the use of this website, log files are created for each access to the website, containing the following aggregated data: total number of visits, countries of the users, duration of sessions, and the path followed by the users during the sessions.

Type of data processed

Those log files contain the following information:

  • The user’s IP address
  • The date and time when the user’s request to access the website reached the web server
  • The requested URL
  • The HTTP return code served to the requester (the user)
  • The requester’s processing time
  • The requester’s user agent string.

Legal basis

Council Regulation (EC) No. 2062/94 of 18/07/1994 establishing the European Agency for Safety and Health at Work and subsequent amendments.

Lawfulness of processing

The processing is based on Article 5(a) of Regulation (EC) No. 45/2001 of the European Parliament and the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (hereinafter, Regulation (EC) No. 45/2001).

Data recipients

Access to the personal data is granted on the basis of the role and responsibilities of the subjects involved (“need to know” principle):

  • Duly appointed EU-OSHA staff
  • External provider hosting EU-OSHA’s server
  • Legal Service, Civil Service Tribunal, the European Data Protection Supervisor, the European Anti-Fraud Office (OLAF), the European Ombudsman, the Court of Auditors, the Internal Audit Service, if applicable.

All the recipients mentioned above are bound by Regulation (EC) Nº 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data. EU-OSHA will not disclose personal data to third parties. EU-OSHA will not divulge personal data for direct marketing for commercial purposes.


This website will set temporary session cookies whenever you visit the site. These cookies are needed to allow the session. They will be deleted when you close your browser session. The user’s IP address is not stored in any cookie. Cookies have a unique ID to identify the sessions which is completely anonymous for the purpose of enabling the session.

This website uses Piwik, a software to generate web statistics, that is entirely hosted in EU-OSHA’s servers, located in the European Union. Piwik will store cookies in your computer, but no personal data will be collected. An anonymous ID will enable piwik to identify your session, but this ID is meaningless to anybody else, and it cannot be used to identify an individual user.

If you do not want EU-OSHA to track your activity through Piwik, you can opt-out from Piwik by clicking in the box below.

This website uses, as well, Google Analytics, a web analytics service provided by Google, Inc. ('Google'). Google Analytics uses 'cookies', which are text files placed on your computer, to help EU-OSHA analyse how users use the website.

The information generated by the cookie about your use of the website (no personal data is collected) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Cookies do not contain any personal information about you and cannot be used to identify an individual user.

If you do not want Google Analytics to track, you can use Google browser tools to opt-out.

The data subject’s rights

Data subjects have the right to access, rectify and block their information (in case of inaccuracy of data), request their cancellation and object about their processing on the cases foreseen in Articles 13,14,15, 16 and 18 of Regulation (EC) N. 45/2001.

Should you have queries or complaints regarding the collecting, processing or use of your personal data, please contact us at: information [at] osha [dot] europa [dot] eu, including in the subject the words “data protection”.

Information on the conservation period of data

The information contained in the log files are kept for 2 years in EU-OSHA’s server hosted by an external provider located in the European Union.

Data for the creation of anonymous statistical reports will be kept for a longer period.

Security measures

We take appropriate security measures to protect against unauthorised access to or unauthorised alteration, disclosure or destruction of data. These include internal reviews of our data collection, storage and processing practices and security measures, including appropriate encryption of communication and physical security measures to guard against unauthorised access to systems where we store personal data.

Request for information

For any further information regarding the handling of their personal data, data subjects can address their request to EU-OSHA Data Protection Officer at: dpo [at] osha [dot] europa [dot] eu.

Recourse to the EDPS

Data subjects are entitled to make recourse to the European Data Protection Supervisor:, should they consider that the processing operations do not comply with Regulation (EC) No. 45/2001.

© 2015 EU-OSHA | an agency of the European Union