Okay, I need to create a concise summary of the given document based on the user's instructions. Let me start by reading through the content carefully.
The document is about a data processing activity notification under Article 31 of Regulation 2018/1725. The event is the FRA 'EU Charter of Fundamental Rights Experts Event' in Vienna on October 6-7, 2022. The controller is the European Union Agency for Fundamental Rights (FRA), and the responsible unit is Institutional Cooperation and Networks Unit. The DPO contact is provided.
Next, it mentions that the FRA itself processes the data, and a third party, MCI Benelux S.A., is involved. Sub-processors include Aventri for registration and Eagle Travel for travel and accommodation. The hotel, LINDNER Hotel am Belvedere, acts as a separate controller.
The purpose of processing is to organize the event, including invitations, registration, travel arrangements, security, access, minutes, follow-up actions like reimbursements and speaker payments, contact sharing, feedback, event reporting, collecting outputs and statements, and using photos/videos for publication. Evaluation is anonymous.
Categories of data subjects are FRA staff and non-FRA staff (Charter experts). The personal data categories include general data like names, contact info, employment details, financial info, and special categories like racial/ethnic origin from photos, political opinions, religious beliefs, health data from dietary needs, and criminal records (N/A). Also, cookies are used by Aventri for registration and emails, with 1st Party cookies only, not accessing other data.
I need to make sure the summary is detailed but concise, in English, without any markdown. Start directly with the content. Check if all the key points are covered: controller, third parties, purpose, data categories, and cookies. Also, note that the DPO is [email protected] and the responsible unit's contact is [email protected]. The event is in Vienna, and the hotel is a separate controller. The cookies are essential and used for analytics, not personal identification.
I should structure the summary to include each section briefly, using bullet points or short paragraphs. Make sure to mention the legal basis for processing, like the event organization and follow-up. Also, clarify that the special categories are only those that might be revealed through photos, health info from dietary needs, etc. And that criminal records are not collected.
Avoid any extra information not in the original text. Keep it factual and to the point. Ensure that the summary is clear and follows the structure of the original document's sections. Check for any missing details, like the reference number and dates. Also, note that the version is 1 and the last update is not specified, so maybe just mention the creation date.
Double-check the terms: "data subjects" are FRA staff and non-FRA experts. The personal data includes both general and special categories. The sub-processors are Aventri and Eagle Travel, with the hotel as a separate controller. Cookies are only first-party and not used for personal identification.
Make sure the summary is under the user's instructions, no titles or markers. Just the content. Alright, time to put this all together concisely.
European Union Agency for Fundamental Rights (FRA) processes personal data for the "EU Charter of Fundamental Rights Experts Event" held 6–7 October 2022 in Vienna, Austria. Reference: DPR-2022-167. Controller: FRA, Schwarzenbergplatz 11, A-1040 Vienna, [email protected]. Responsible unit: Institutional Cooperation and Networks Unit, [email protected]. Data Protection Officer: [email protected].
Processing is conducted by FRA and third-party contractor MCI Benelux S.A. ([email protected]), with sub-processors Aventri (registration, email campaigns, cookies) and Eagle Travel (travel/accommodation). The LINDNER Hotel am Belvedere acts as a separate controller for accommodation.
Purpose: Organize the event, including participant/speaker registration, travel logistics, security, access control, minute-taking, follow-up actions (reimbursements, speaker payments), contact list sharing, feedback collection, event reporting, and use of photos/videos for public dissemination. Event evaluation is anonymized.
Data subjects: FRA staff and non-FRA staff (Charter experts invited as participants/speakers).
Processed personal data categories:
- General: names, contact details (email, phone, residence), employment info (role, employer), financial data (bank details), education/training, travel/ accommodation.
- Special: racial/ethnic origin (via photos/videos), political opinions, religious/philosophical beliefs, genetic/biometric data (health/disability, e.g., dietary needs), and information on sex life/sexual orientation.
- Criminal records: Not applicable.
Cookies: Aventri uses essential cookies and anonymized statistics for registration and email campaigns. Cookies are first-party only, not accessing other data or user devices. They identify users via IP address, browser, OS, etc., but do not personally identify individuals.
Legal basis: Event organization and follow-up activities (including reimbursement and speaker payments) under FRA’s operational responsibilities.
