Dear Sir/Madam,

months ago I requested access to the correspondence between the EDPS and the European Parliament on plans to introduce a biometric attandance register. Could you please take care? No need to send correspondence before 2021.

Best regards
Patrick Breyer

-------- Weitergeleitete Nachricht --------
Betreff: Re: ODP: The EDPS opinion on the use of biometric technology in the EP
Datum: Tue, 7 Dec 2021 21:20:03 +0100
Von: BREYER Patrick <[email address]>
Organisation: Team Patrick Breyer (Piratenpartei)
An: WIEWIOROWSKI Wojciech
Kopie (CC): EDPS-CABINET, SALAS MORENO Maria Jose, UJAZDOWSKI Kazimierz

Dear Wojciech Wiewiorowski,

may I follow up on my access to documents request? Please share both the EP's reply and your reaction to it.

Thank you and best regards
Patrick Breyer

WIEWIOROWSKI Wojciech:
>
> Dear Mr Breyer,
>
> I am sorry, for some unknown reason your email has nThank you for
> bringing this matter to my attention. Thank you for your comments, which
> I asked my services to take into account.
>
>
> I can provide you with the materials sentv hby Parliamen, after a shott
> internal procedure since thisvis trhe Parliament who is the gestor
> ofcthis public information in the first place.
>
> Nevertheless I can confirm that as a follow-up to our opinion we have
> received a reply from the Parliament with extensive documentation. We
> are concluding the analysis and we will communicate to the EP the EDPS
> views on the proposed solutions.
>
> I will keep you posted of any developments on this side.
>
> Best regards,
>
> Wojciech Wiewiorowski
>
>
> ------------------------------------------------------------------------
> *Od:* BREYER Patrick <[email address]>
> *Wysłane:* wtorek, 19 października 2021 11:02:21
> *Do:* WIEWIOROWSKI Wojciech
> *DW:* EDPS-CABINET; SALAS MORENO Maria Jose; UJAZDOWSKI Kazimierz
> *Temat:* Re: The EDPS opinion on the use of biometric technology in the EP
> Dear Wojciech Wiewiórowski,
>
> may I ask for access to the EP's reply to your opinion, please?
>
> I am concerned the EP is not taking seriously your requirements to
> 1) justify why it considers the risk of impersonations for a badge-based
> system is „more than a fringe occurrence“ and whether such fraud has
> ever occurred while the badge-based system was tested
> 2) look into alternative solutions that rely on Members‘ mobile phones
> instead of biometrics (if smartphones are secure for remote voting they
> should surely be secure enough for registering attendance!).
> I would like to see for myself.
>
> Best regards
> Patrick Breyer
>

European Data Protection Supervisor, Europäischen Datenschutzbeauftragten

3 Attachments

Dear Ms Breyer,

 

We acknowledge receipt of your request, registered on 04.03.2022. In
accordance with Article 7(1) of Regulation (EU) No 1049/2001 regarding
public access to European Parliament, Council and Commission documents,
you will receive a reply within 15 working days (by 25.03.2022).

 

Your case number is 2022-0289.

 

Please note that your personal data will only be processed for the
purposes of replying to your request and in accordance with the privacy
statement set out below. More information on how the EDPS process personal
information can be found on our website.

 

Yours sincerely,

 

 

  EDPS Secretariat
[1]cid:image001.png@01D4D8CD.D37C9700
[2]| Tel. (+32) 228 31900  |
Fax +32(0)22831950  | ›  
Email  [3][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60,
B-1047 Brussels
Office address: Rue Montoyer 30,
B-1000 Brussels
[4]Twitter [5]@EU_EDPS  
[6]Website [7]www.edps.europa.eu

This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.

According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation) on the protection of natural persons with regard to the
processing of personal data by the Union institutions, bodies, offices and
agencies and on the free movement of such data, we are processing your
personal data, where proportionate and necessary, for the purpose of
answering your request. The legal base for this processing operation is
Regulation (EU) 1049/2001 and Article 52(4) of the Regulation (EU)
2018/1725. Subject to applicable rules under EU legislation, the personal
data relating to you, as provided in your request as well as personal data
that might be collected while processing your request, are used solely for
the purpose of replying to your request. EDPS staff members dealing with
the request will have access to the case file containing your personal
data on a need-to-know basis. All access to case files is logged. Your
personal data are not disclosed outside the EDPS. Your personal data will
be stored electronically for a maximum of ten years after the closure of
the case, or as long as the EDPS is under a legal obligation to do so. You
have the right to access your personal data held by the EDPS and to
relevant information concerning how we use it. You have the right to
rectify your personal data. Under certain conditions, you have the right
to ask that we delete your personal data or restrict its use. We will
consider your request, take a decision and communicate it to you. For more
information, please see Articles 14 to 21, 23 and 24 of the Regulation.
Please note that in some cases restrictions under Article 25 of the
Regulation may apply. Any request to exercise your rights should be
addressed to the EDPS at [8][EDPS request email]. You may contact the data
protection officer of the EDPS ([9][email address]), if you have
any remarks or complaints regarding the way we process your personal data.
You have the right to lodge a complaint with the EDPS, as supervisory
authority. Any such request should be addressed to the EDPS at
[10][EDPS request email]. You can reach the EDPS in the following ways:
E-mail: [11][EDPS request email]; EDPS postal address: European Data
Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium. For more
information, please refer to the extended version of the data protection
notice available on the EDPS website:
[12]https://edps.europa.eu/data-protection/o....

 

 

References

Visible links
2. file:///tmp/tel:+3222831900
3. mailto:[EDPS request email]
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/
8. mailto:[EDPS request email]
9. mailto:[email address]
10. mailto:[EDPS request email]
11. mailto:[EDPS request email]
12. https://edps.europa.eu/data-protection/o...

European Data Protection Supervisor, Europäischen Datenschutzbeauftragten

3 Attachments

Dear Mr Breyer,

 

We refer to your email of 04.03.2022, in which you make a request for
access to documents under the Regulation (EU) No 1049/2001, registered
with case number 2022-0289.

 

We have identified a large number of documents falling within the scope of
your request. Their processing will create unnecessary administrative
burden on the EDPS. We therefore invite you, pursuant to Article 6(2) of
Regulation (EU) No 1049/2001 and in order to decrease the number of
document to be processed and still meet your needs, to exclude from the
scope of your request the following:

 

1.             Acknowledgements of receipt

2.             Reminder letters/e-mails

3.             Duplicate letters/e-mails – identical communications saved
in separate cases with different ID numbers

4.             Chain of e-mails – in case an e-mail is a reply to previous
communications and they are in the text body we will provide you only with
the last e-mail. If the different e-mails contain attachments, then this
e-mail will be provided separately.

 

If you agree with this proposal, please send us a confirmation, so we
could speed up our work.

 

Thank you in advance.

 

 

  [1]cid:image001.png@01D4D8CD.D37C9700 EDPS Secretariat

[2]| Tel. (+32) 2 283 17 13 | Fax (+32) 2 283 19 50

Email  [3][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
[4]Twitter [5]@EU_EDPS   [6]Website [7]www.edps.europa.eu
This email (and any attachment) may contain information that is internal or confidential. Unauthorised access,
use or other processing is not permitted. If you are not the intended recipient please inform the sender by
reply and then delete all copies. Emails are not secure as they can be intercepted, amended, and infected with
viruses. The EDPS therefore cannot guarantee the security of correspondence by email.

According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the Regulation) on the protection of natural
persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies
and on the free movement of such data, we are processing your personal data, where proportionate and
necessary, for the purpose of answering your request. The legal base for this processing operation is
Regulation (EU) 1049/2001 and Article 52(4) of the Regulation (EU) 2018/1725. Subject to applicable rules
under EU legislation, the personal data relating to you, as provided in your request as well as personal data
that might be collected while processing your request, are used solely for the purpose of replying to your
request. EDPS staff members dealing with the request will have access to the case file containing your
personal data on a need-to-know basis. All access to case files is logged. Your personal data are not
disclosed outside the EDPS. Your personal data will be stored electronically for a maximum of ten years after
the closure of the case, or as long as the EDPS is under a legal obligation to do so. You have the right to
access your personal data held by the EDPS and to relevant information concerning how we use it. You have the
right to rectify your personal data. Under certain conditions, you have the right to ask that we delete your
personal data or restrict its use. We will consider your request, take a decision and communicate it to you.
For more information, please see Articles 14 to 21, 23 and 24 of the Regulation. Please note that in some
cases restrictions under Article 25 of the Regulation may apply. Any request to exercise your rights should be
addressed to the EDPS at [8][EDPS request email]. You may contact the data protection officer of the EDPS
([9][email address]), if you have any remarks or complaints regarding the way we process your personal
data. You have the right to lodge a complaint with the EDPS, as supervisory authority. Any such request should
be addressed to the EDPS at [10][EDPS request email]. You can reach the EDPS in the following ways: E-mail:
[11][EDPS request email]; EDPS postal address: European Data Protection Supervisor, Rue Wiertz 60, B-1047
Brussels, Belgium. For more information, please refer to the extended version of the data protection notice
available on the EDPS website:
[12]https://edps.europa.eu/data-protection/o....

 

 

 

References

Visible links
2. file:///tmp/tel:+3222831900
3. mailto:[EDPS request email]
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/
8. mailto:[EDPS request email]
9. mailto:[email address]
10. mailto:[EDPS request email]
11. mailto:[EDPS request email]
12. https://edps.europa.eu/data-protection/o...

Dear Sir/Madam,

I am very happy to agree to your proposal.

Yours sincerely,
Patrick Breyer

European Data Protection Supervisor, Europäischen Datenschutzbeauftragten

3 Attachments

Dear Mr Breyer,

We are writing you concerning your access to documents request case number
2022-0289.

In accordance with Article 7 (1) of Regulation (EU) No 1049/2001 regarding
public access to European Parliament, Council and Commission documents,
you are entitled to receive a reply within 15 working days.

However, due to the amount of documents, the EDPS will not be in a
position to respond within the original time limit of 15 working days. We
have therefore decided to extend the time limit by 15 working days in
accordance with Article 7(3) of Regulation (EU) 1049/2001.

You should expect to receive a reply from the EDPS by 15.04.2022 at the
latest.

Yours sincerely,

 

  [1]cid:image001.png@01D4D8CD.D37C9700 EDPS Secretariat

[2]Tel. (+32) 2 283 17 13 | Fax (+32) 2 283 19 50 
Email  [3][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
[4]Twitter [5]@EU_EDPS   [6]Website [7]www.edps.europa.eu
This email (and any attachment) may contain information that is internal or confidential. Unauthorised access,
use or other processing is not permitted. If you are not the intended recipient please inform the sender by
reply and then delete all copies. Emails are not secure as they can be intercepted, amended, and infected with
viruses. The EDPS therefore cannot guarantee the security of correspondence by email.

According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the Regulation) on the protection of natural
persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies
and on the free movement of such data, we are processing your personal data, where proportionate and
necessary, for the purpose of answering your request. The legal base for this processing operation is
Regulation (EU) 1049/2001 and Article 52(4) of the Regulation (EU) 2018/1725. Subject to applicable rules
under EU legislation, the personal data relating to you, as provided in your request as well as personal data
that might be collected while processing your request, are used solely for the purpose of replying to your
request. EDPS staff members dealing with the request will have access to the case file containing your
personal data on a need-to-know basis. All access to case files is logged. Your personal data are not
disclosed outside the EDPS. Your personal data will be stored electronically for a maximum of ten years after
the closure of the case, or as long as the EDPS is under a legal obligation to do so. You have the right to
access your personal data held by the EDPS and to relevant information concerning how we use it. You have the
right to rectify your personal data. Under certain conditions, you have the right to ask that we delete your
personal data or restrict its use. We will consider your request, take a decision and communicate it to you.
For more information, please see Articles 14 to 21, 23 and 24 of the Regulation. Please note that in some
cases restrictions under Article 25 of the Regulation may apply. Any request to exercise your rights should be
addressed to the EDPS at [8][EDPS request email]. You may contact the data protection officer of the EDPS
([9][email address]), if you have any remarks or complaints regarding the way we process your personal
data. You have the right to lodge a complaint with the EDPS, as supervisory authority. Any such request should
be addressed to the EDPS at [10][EDPS request email]. You can reach the EDPS in the following ways: E-mail:
[11][EDPS request email]; EDPS postal address: European Data Protection Supervisor, Rue Wiertz 60, B-1047
Brussels, Belgium. For more information, please refer to the extended version of the data protection notice
available on the EDPS website:
[12]https://edps.europa.eu/data-protection/o....

 

 

 

References

Visible links
2. file:///tmp/tel:+3222831900
3. mailto:[EDPS request email]
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/
8. mailto:[EDPS request email]
9. mailto:[email address]
10. mailto:[EDPS request email]
11. mailto:[EDPS request email]
12. https://edps.europa.eu/data-protection/o...

European Data Protection Supervisor, Europäischen Datenschutzbeauftragten

3 Attachments

Dear Mr Breyer,

 

In our letter of 24.03.2022 we notified you that EDPS decided to extend
the time limit by 15 working days in accordance with Article 7(3) of
Regulation (EU) 1049/2001. We also noted that you should receive our reply
by 15.04.2022. However, we just noticed that 14, 15 and 18 April 2022 are
non-working days for EDPS. Therefore, the date you should receive our
reply is 21.04.2022.

 

We apologies in advance for any inconveniences caused.

 

Kind regards,

 

  EDPS Secretariat
[1]cid:image001.png@01D4D8CD.D37C9700
[2]| Tel. (+32) 228 31900  |
Fax +32(0)22831950  | › Email
 [3][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60,
B-1047 Brussels
Office address: Rue Montoyer 30,
B-1000 Brussels
[4]Twitter [5]@EU_EDPS  
[6]Website [7]www.edps.europa.eu

This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.

Data Protection Notice

According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.

You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [8][EDPS request email]. You may also contact the data protection
officer of the EDPS ([9][email address]), if you have any remarks
or complaints regarding the way we process your personal data. You have
the right to lodge a complaint with the EDPS, as supervisory authority.
Any such request should be addressed to the EDPS at
[10][EDPS request email]. You can reach the EDPS in the following ways:
e-mail: [11][EDPS request email]; EDPS postal address: European Data
Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium.

 

 

 

 

References

Visible links
2. file:///tmp/tel:+3222831900
3. mailto:[EDPS request email]
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/
8. mailto:[EDPS request email]
9. mailto:[email address]
10. mailto:[EDPS request email]
11. mailto:[EDPS request email]

European Data Protection Supervisor, Europäischen Datenschutzbeauftragten

3 Attachments

Dear Mr Breyer,

We are writing to you concerning your access to documents request case
number 2022-0289. You will receive the signed reply to your request
tomorrow 22.04.2022.

 

We apologise for any inconveniences caused.

 

Kind regards

 

 

  EDPS Secretariat
[1]cid:image001.png@01D4D8CD.D37C9700
[2]| Tel. (+32) 228 31900  |
Fax +32(0)22831950  | › Email
 [3][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60,
B-1047 Brussels
Office address: Rue Montoyer 30,
B-1000 Brussels
[4]Twitter [5]@EU_EDPS  
[6]Website [7]www.edps.europa.eu

This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.

Data Protection Notice

According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.

You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [8][EDPS request email]. You may also contact the data protection
officer of the EDPS ([9][email address]), if you have any remarks
or complaints regarding the way we process your personal data. You have
the right to lodge a complaint with the EDPS, as supervisory authority.
Any such request should be addressed to the EDPS at
[10][EDPS request email]. You can reach the EDPS in the following ways:
e-mail: [11][EDPS request email]; EDPS postal address: European Data
Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium.

 

 

References

Visible links
2. file:///tmp/tel:+3222831900
3. mailto:[EDPS request email]
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/
8. mailto:[EDPS request email]
9. mailto:[email address]
10. mailto:[EDPS request email]
11. mailto:[EDPS request email]

European Data Protection Supervisor, Europäischen Datenschutzbeauftragten

4 Attachments

Dear Mr. Breyer,

 

Please find attached a letter to your attention electronically signed by
Leonardo Cervera Navas on the above-mentioned subject.

 

Best regards,

 

 

  EDPS Secretariat
[1]cid:image001.png@01D4D8CD.D37C9700
[2]| Tel. (+32) 228 31900  |
Fax (+32) 228 31950  | › Email
 [3][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60,
B-1047 Brussels
Office address: Rue Montoyer 30,
B-1000 Brussels
[4]Twitter [5]@EU_EDPS  
[6]Website [7]www.edps.europa.eu

This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.

Data Protection Notice

According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.

You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [8][EDPS request email]. You may also contact the data protection
officer of the EDPS ([9][email address]), if you have any remarks
or complaints regarding the way we process your personal data. You have
the right to lodge a complaint with the EDPS, as supervisory authority.
Any such request should be addressed to the EDPS at
[10][EDPS request email]. You can reach the EDPS in the following ways:
e-mail: [11][EDPS request email]; EDPS postal address: European Data
Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium.

 

 

References

Visible links
2. file:///tmp/tel:+3222831900
3. mailto:[EDPS request email]
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/
8. mailto:[EDPS request email]
9. mailto:[email address]
10. mailto:[EDPS request email]
11. mailto:[EDPS request email]