Privacy in the EU Institutions

Answer of 15 September 2008 to a notification for prior checking relating to the DG ENTREPRISE's ("DG ENTR") flexitime interface to TIM (Case 2008-111)

In this notification relating to Flexitime, DG ENTR intends to implement a button interface in working PCs to collect presence data. In his analysis, the EDPS considers that the purpose of the notified treatment by DG ENTR does not fully meet the purpose of flexitime, as derived from the analysis of TIM and opposes the sending of e-mails to a functional mailbox of the Head of Units. However, the EDPS recognises that the idea to have a user friendly interface to store timestamps into TIM without the need to use the graphical user interface of SYSPER2-TIM should not be prevented.

Opinion of 15 September 2008 on a notification for prior checking regarding the processing operations to manage calls for tenders and contracts (Case 2008-346)
The purpose of the data processing operations is to manage calls for tenders and contracts between the EESC and the CoR on one side and third parties on the other side.  The information is used in the context of evaluating tenders.The Opinion concludes by giving some recommendations to data controller towards ensuring full compliance with Regulation (EC) No 45/2001. In particular, it calls upon controllers to consider shortening conservation times and  to ensure that   observers and experts keep confidentially the information submitted to them.

Analysis of the EDPS on a consultation related to a request for access to public documents containing personal data

Opinion of 3 September 2008 on a notification for prior checking on "Dosimetry management system of radiological workers at JRC-IE in Petten" (Case 2008-020)

Answer to a notification for prior checking concerning the "access control to the premises" (Case 2008-195)