Correspondence between EDPS and Europol on draft internal rules
Dear European Data Protection Supervisor,
Under the right of access to documents in the EU treaties, as developed in Regulation 1049/2001, I am requesting documents which contain the following information:
All correspondence between the EDPS and Europol on Europol's internal rules, drafted in the context of the reform to Europol's mandate.
Yours faithfully,
Christina GENNET
Dear Ms Gennet,
We acknowledge receipt of your request, registered on 12.10.2022. In
accordance with Article 7(1) of Regulation (EU) No 1049/2001 regarding
public access to European Parliament, Council and Commission documents,
you will receive a reply within 15 working days (by 03.11.2022).
Your case number is 2022-1035.
Please note that your personal data will only be processed for the
purposes of replying to your request and in accordance with the privacy
statement set out below. More information on how the EDPS process personal
information can be found on our [1]website.
You have lodged your application via the AsktheEU.org website. Please note
that this is a private website which has no link with any institution of
the European Union. The European Data Protection Supervisor is not
accountable for any technical issues or problems linked to the use of this
system.
Yours sincerely,
EDPS Secretariat
[2]cid:image001.png@01D4D8CD.D37C9700
[3]| Tel. (+32) 228 31900 |
Fax (+32) 228 31950 |
› Email: [4][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60,
B-1047 Brussels
Office address: Rue Montoyer 30,
B-1000 Brussels
[5]Twitter [6]@EU_EDPS
[7]Website [8]www.edps.europa.eu
This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [9][EDPS request email]. You may also contact the data protection
officer of the EDPS ([10][email address]), if you have any remarks
or complaints regarding the way we process your personal data. You have
the right to lodge a complaint with the EDPS, as supervisory authority.
Any such request should be addressed to the EDPS at
[11][EDPS request email]. You can reach the EDPS in the following ways:
e-mail: [12][EDPS request email]; EDPS postal address: European Data
Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium.
References
Visible links
1. https://secure.edps.europa.eu/EDPSWEB/we...
3. file:///tmp/tel:+3222831900
4. mailto:[EDPS request email]
6. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
8. http://www.edps.europa.eu/
http://www.edps.europa.eu/
9. mailto:[EDPS request email]
10. mailto:[email address]
11. mailto:[EDPS request email]
12. mailto:[EDPS request email]
Dear Ms Gennet,
We are writing to you concerning your access to documents request case
number 2022-1035.
First of all, we would like to apologise that in our e-mail from
13.10.2022 to you we made a technical mistake. The submission deadline for
our reply was set to 03.11.2022, without taking into account that November
1^st and 2^nd are non-working days for EDPS. The correct deadline thus is
04.11.2022.
In accordance with Article 7 (1) of Regulation (EU) No 1049/2001
regarding public access to European Parliament, Council and Commission
documents, you are entitled to receive a reply within 15 working days.
However, due to the amount of documents, the EDPS will not be in a
position to respond within the original time limit of 15 working days. We
have therefore decided to extend the time limit by 15 working days in
accordance with Article 7(3) of Regulation (EU) 1049/2001.
You should expect to receive a reply from the EDPS by 25.11.2022 at the
latest.
EDPS Secretariat
[1]cid:image001.png@01D4D8CD.D37C9700
[2]| Tel. (+32) 228 31900 |
Fax (+32) 228 31950 |
› Email: [3][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60,
B-1047 Brussels
Office address: Rue Montoyer 30,
B-1000 Brussels
[4]Twitter [5]@EU_EDPS
[6]Website [7]www.edps.europa.eu
This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [8][EDPS request email]. You may also contact the data protection
officer of the EDPS ([9][email address]), if you have any remarks
or complaints regarding the way we process your personal data. You have
the right to lodge a complaint with the EDPS, as supervisory authority.
Any such request should be addressed to the EDPS at
[10][EDPS request email]. You can reach the EDPS in the following ways:
e-mail: [11][EDPS request email]; EDPS postal address: European Data
Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium.
References
Visible links
2. file:///tmp/tel:+3222831900
3. mailto:[EDPS request email]
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/
8. mailto:[EDPS request email]
9. mailto:[email address]
10. mailto:[EDPS request email]
11. mailto:[EDPS request email]
Dear Ms Gennet,
Please find attached a letter (+ annexes) to your attention electronically
signed by Leonardo Cervera Navas on the above-mentioned subject.
We will now proceed dealing with your next request from the queue – case
2022-1037. You will receive a reply within 15 working days (by
13.12.2022).
Best regards,
EDPS Secretariat
[1]cid:image001.png@01D4D8CD.D37C9700
[2]| Tel. (+32) 228 31900 |
Fax (+32) 228 31950 |
› Email: [3][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60,
B-1047 Brussels
Office address: Rue Montoyer 30,
B-1000 Brussels
[4]Twitter [5]@EU_EDPS
[6]Website [7]www.edps.europa.eu
This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [8][EDPS request email]. You may also contact the data protection
officer of the EDPS ([9][email address]), if you have any remarks
or complaints regarding the way we process your personal data. You have
the right to lodge a complaint with the EDPS, as supervisory authority.
Any such request should be addressed to the EDPS at
[10][EDPS request email]. You can reach the EDPS in the following ways:
e-mail: [11][EDPS request email]; EDPS postal address: European Data
Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium.
References
Visible links
2. file:///tmp/tel:+3222831900
3. mailto:[EDPS request email]
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/
8. mailto:[EDPS request email]
9. mailto:[email address]
10. mailto:[EDPS request email]
11. mailto:[EDPS request email]
Dear Ms Gennet,
We have discovered that in Annex 15 of our reply we have inadvertently
disclosed personal data of a EU Staff member. We kindly ask you to let us
know if you have used the information in question and if yes, how.
Furthermore, as a mitigation measures, please delete the received file and
replace it with the one attached to this communication.
Finally, if you have shared the Annex 15 with other recipients, could you
please request them to supply us with information on how the personal data
was used and apply, if need be, the mitigation measures, as appropriate.
Thank you very much in advance for your understanding and cooperation.
I look forward to hear from you.
Kind regards
Tsanko Tsankov
[1]cid:image001.png@01D69BD0.15A53620 Transparency Officer
[2]| Tel. (+32) 228 31902 | Fax +32(0)22831950 | MTS
06X038
Email [3][email address]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
[4]cid:image002.png@01D6A617.F0ED7200 [5]@EU_EDPS
[6]cid:image003.png@01D69BD0.15A53620 [7]www.edps.europa.eu
This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.
From: European Data Protection Supervisor <[email address]>
Sent: 21 November 2022 14:23
To: '[FOI #11972 email]'
<[FOI #11972 email]>
Subject: Your request for access to documents under Regulation (EC)
1049/2001 [EDPS ref: 2022-1035 - D-2749]
Dear Ms Gennet,
Please find attached a letter (+ annexes) to your attention electronically
signed by Leonardo Cervera Navas on the above-mentioned subject.
We will now proceed dealing with your next request from the queue – case
2022-1037. You will receive a reply within 15 working days (by
13.12.2022).
Best regards,
EDPS Secretariat
[8]cid:image001.png@01D4D8CD.D37C9700
[9]| Tel. (+32) 228 31900 |
Fax (+32) 228 31950 |
› Email: [10][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60,
B-1047 Brussels
Office address: Rue Montoyer 30,
B-1000 Brussels
[11]Twitter [12]@EU_EDPS
[13]Website [14]www.edps.europa.eu
This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [15][EDPS request email]. You may also contact the data protection
officer of the EDPS ([16][email address]), if you have any remarks
or complaints regarding the way we process your personal data. You have
the right to lodge a complaint with the EDPS, as supervisory authority.
Any such request should be addressed to the EDPS at
[17][EDPS request email]. You can reach the EDPS in the following ways:
e-mail: [18][EDPS request email]; EDPS postal address: European Data
Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium.
References
Visible links
2. file:///tmp/tel:+3222831900
3. mailto:[email address]
4. file:///tmp/http:/
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/
9. file:///tmp/tel:+3222831900
10. mailto:[EDPS request email]
12. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
14. http://www.edps.europa.eu/
http://www.edps.europa.eu/
15. mailto:[EDPS request email]
16. mailto:[email address]
17. mailto:[EDPS request email]
18. mailto:[EDPS request email]
Dear Ms. Gennet,
A kind reminder. Could you please reply to the e-mail I sent you on
20.12.2022.
Thank you!
Tsanko Tsankov
Transparency Officer
31902
MTS 06X038
From: EDPS Access to Documents
Sent: 20 December 2022 11:52
To: '[FOI #11972 email]'
<[FOI #11972 email]>
Subject: RE: Your request for access to documents under Regulation (EC)
1049/2001 [EDPS ref: 2022-1035 - D-2749]
Dear Ms Gennet,
We have discovered that in Annex 15 of our reply we have inadvertently
disclosed personal data of a EU Staff member. We kindly ask you to let us
know if you have used the information in question and if yes, how.
Furthermore, as a mitigation measures, please delete the received file and
replace it with the one attached to this communication.
Finally, if you have shared the Annex 15 with other recipients, could you
please request them to supply us with information on how the personal data
was used and apply, if need be, the mitigation measures, as appropriate.
Thank you very much in advance for your understanding and cooperation.
I look forward to hear from you.
Kind regards
Tsanko Tsankov
[1]cid:image001.png@01D69BD0.15A53620 Transparency Officer
[2]| Tel. (+32) 228 31902 | Fax +32(0)22831950 | MTS
06X038
Email [3][email address]
European Data Protection Supervisor
Postal address: Rue Wiertz 60, B-1047 Brussels
Office address: Rue Montoyer 30, B-1000 Brussels
[4]cid:image002.png@01D6A617.F0ED7200 [5]@EU_EDPS
[6]cid:image003.png@01D69BD0.15A53620 [7]www.edps.europa.eu
This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.
From: European Data Protection Supervisor <[8][email address]>
Sent: 21 November 2022 14:23
To: '[FOI #11972 email]'
<[9][FOI #11972 email]>
Subject: Your request for access to documents under Regulation (EC)
1049/2001 [EDPS ref: 2022-1035 - D-2749]
Dear Ms Gennet,
Please find attached a letter (+ annexes) to your attention electronically
signed by Leonardo Cervera Navas on the above-mentioned subject.
We will now proceed dealing with your next request from the queue – case
2022-1037. You will receive a reply within 15 working days (by
13.12.2022).
Best regards,
EDPS Secretariat
[10]cid:image001.png@01D4D8CD.D37C9700
[11]| Tel. (+32) 228 31900 |
Fax (+32) 228 31950 |
› Email: [12][EDPS request email]
European Data Protection Supervisor
Postal address: Rue Wiertz 60,
B-1047 Brussels
Office address: Rue Montoyer 30,
B-1000 Brussels
[13]Twitter [14]@EU_EDPS
[15]Website [16]www.edps.europa.eu
This email
(and any
attachment)
may contain
information
that is
internal or
confidential.
Unauthorised
access, use or
other
processing is
not permitted.
If you are not
the intended
recipient
please inform
the sender by
reply and then
delete all
copies. Emails
are not secure
as they can be
intercepted,
amended, and
infected with
viruses. The
EDPS therefore
cannot
guarantee the
security of
correspondence
by email.
Data Protection Notice
According to Articles 15 and 16 of Regulation (EU) 2018/1725 (the
Regulation), we are processing your personal data in order to reply to
your request. The controller is the European Data Protection Supervisor
(EDPS). The legal basis for this processing operation is Article 5(1)(b)
of the Regulation, since processing is necessary for compliance with a
legal obligation to which the EDPS is subject. The data processed include
your contact details, your request, as well as personal data that might be
collected during the investigation of your request. For the EDPS, case
handlers, administrative staff and hierarchy involved in the request
handling will have access to the case file containing your personal data
on a need-to-know basis. All access to case files is logged. Your data
will only be transferred to other EU institutions and bodies or to third
parties when it is necessary to ensure the appropriate investigation or
follow up of your request. Your data will be stored by the EDPS in
electronic files until the end of the reporting period of the current year
(as a rule, until mid-next year), unless legal proceedings require us to
keep them for a longer period. Afterwards, only a brief anonymous note
will be included in a file in order to keep record of the request.
You have the right of access to your personal data and to relevant
information concerning how we use it. You have the right to rectify your
personal data. Under certain conditions, you have the right to ask that we
delete your personal data or restrict its use. We will consider your
request, take a decision and communicate it to you. For more information,
please see Articles 14 to 21, 23 and 24 of the Regulation. Please note
that in some cases restrictions under Article 25 of the Regulation may
apply. Any request to exercise your rights should be addressed to the EDPS
at [17][EDPS request email]. You may also contact the data protection
officer of the EDPS ([18][email address]), if you have any remarks
or complaints regarding the way we process your personal data. You have
the right to lodge a complaint with the EDPS, as supervisory authority.
Any such request should be addressed to the EDPS at
[19][EDPS request email]. You can reach the EDPS in the following ways:
e-mail: [20][EDPS request email]; EDPS postal address: European Data
Protection Supervisor, Rue Wiertz 60, B-1047 Brussels, Belgium.
References
Visible links
2. file:///tmp/tel:+3222831900
3. mailto:[email address]
4. file:///tmp/http:/
5. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
7. http://www.edps.europa.eu/
http://www.edps.europa.eu/
8. mailto:[email address]
9. mailto:[FOI #11972 email]
11. file:///tmp/tel:+3222831900
12. mailto:[EDPS request email]
14. http://twitter.com/EU_EDPS
http://twitter.com/EU_EDPS
16. http://www.edps.europa.eu/
http://www.edps.europa.eu/
17. mailto:[EDPS request email]
18. mailto:[email address]
19. mailto:[EDPS request email]
20. mailto:[EDPS request email]