AKI (Estonia) - 2.1.-1/19/126: Difference between revisions
No edit summary |
m (Ar moved page AKI - 2.1.-1/19/126 to AKI (Estonia) - 2.1.-1/19/126) |
||
(2 intermediate revisions by 2 users not shown) | |||
Line 1: | Line 1: | ||
{ | {{DPAdecisionBOX | ||
|Jurisdiction=Estonia | |||
|DPA-BG-Color= | |||
|DPAlogo=LogoEE.png | |||
|DPA_Abbrevation=AKI (Estonia) | |||
|DPA_With_Country=AKI (Estonia) | |||
|Case_Number_Name=2.1.-1/19/126 | |||
|ECLI= | |||
|Original_Source_Name_1=AKI | |||
|Original_Source_Link_1=https://www.aki.ee/sites/default/files/vaideotsused/2019/vaideotsus_13.11.2019_isiku_andmete_kaitse_asjas_nr_2.1.-3-19-3971_eraisik__0.pdf | |||
| | |Original_Source_Language_1=Estonian | ||
| | |Original_Source_Language__Code_1=ET | ||
| | |Original_Source_Name_2= | ||
| | |Original_Source_Link_2= | ||
| | |Original_Source_Language_2= | ||
| | |Original_Source_Language__Code_2= | ||
| | |Type=Complaint | ||
| | |Outcome=Rejected | ||
| | |Date_Started= | ||
| | |Date_Decided=01.11.2019 | ||
| | |Date_Published=13.11.2019 | ||
| | |Year=2019 | ||
| | |Fine=None | ||
| | |Currency= | ||
| | |||
| | |GDPR_Article_1=Article 12(1) GDPR | ||
| | |GDPR_Article_Link_1=Article 12 GDPR#1 | ||
| | |GDPR_Article_2=Article 13(4) GDPR | ||
| | |GDPR_Article_Link_2=Article 13 GDPR#4 | ||
| | |GDPR_Article_3=Article 14(5)(a) GDPR | ||
|GDPR_Article_Link_3=Article 14 GDPR#5a | |||
| | |GDPR_Article_4=Article 15 GDPR | ||
| | |GDPR_Article_Link_4=Article 15 GDPR | ||
|GDPR_Article_5= | |||
|GDPR_Article_Link_5= | |||
|GDPR_Article_6= | |||
|GDPR_Article_Link_6= | |||
|EU_Law_Name_1= | |||
|EU_Law_Link_1= | |||
|EU_Law_Name_2= | |||
|EU_Law_Link_2= | |||
|National_Law_Name_1= | |||
|National_Law_Link_1= | |||
|National_Law_Name_2= | |||
|National_Law_Link_2= | |||
|Party_Name_1=Luminor Pank AS | |||
|Party_Link_1= | |||
|Party_Name_2=anonymous | |||
|Party_Link_2= | |||
|Party_Name_3= | |||
|Party_Link_3= | |||
|Appeal_To_Body= | |||
|Appeal_To_Case_Number_Name= | |||
|Appeal_To_Status= | |||
|Appeal_To_Link= | |||
|Initial_Contributor= | |||
| | |||
}} | |||
The AKI re-examined complaint about financial service provider’s incomplete response to data subject’s access request after appeal. | The AKI re-examined complaint about financial service provider’s incomplete response to data subject’s access request after appeal. | ||
Line 69: | Line 89: | ||
==English Machine Translation of the Decision== | ==English Machine Translation of the Decision== | ||
The decision below is a machine translation of the original. Please refer to the | The decision below is a machine translation of the original. Please refer to the original for more details. | ||
<pre> | <pre> | ||
To be completed ... | To be completed ... | ||
</pre> | </pre> |
Latest revision as of 10:30, 13 December 2023
AKI (Estonia) - 2.1.-1/19/126 | |
---|---|
Authority: | AKI (Estonia) |
Jurisdiction: | Estonia |
Relevant Law: | Article 12(1) GDPR Article 13(4) GDPR Article 14(5)(a) GDPR Article 15 GDPR |
Type: | Complaint |
Outcome: | Rejected |
Started: | |
Decided: | 01.11.2019 |
Published: | 13.11.2019 |
Fine: | None |
Parties: | Luminor Pank AS anonymous |
National Case Number/Name: | 2.1.-1/19/126 |
European Case Law Identifier: | n/a |
Appeal: | n/a |
Original Language(s): | Estonian |
Original Source: | AKI (in ET) |
Initial Contributor: | n/a |
The AKI re-examined complaint about financial service provider’s incomplete response to data subject’s access request after appeal.
English Summary
Facts
The appellant complained that the company, in response to his access request, provided an incomplete dataset in English.
Dispute
Could Article 15 GDPR be exercised although the personal are expected to be already possessed by the data subject?
Holding
The DPA found that much of the data that the complainant found as missing is data that the complainant is expected to possess. So, it concluded that the company is not obliged to provide data that the data subject already possesses under Articles 13(4) and 14(5)(a) GDPR. Thus, the DPA found that the company has adequately fulfilled the obligation to inform the data subject of the data processing as required by Articles 13-15 GDPR. Finally, the DPA pointed out that the complainant had indicated in its customer profile a language preference to use English, which justifies the data export in English (Article 12(1) GDPR).
Comment
Share your comments here!
Further Resources
Share blogs or news articles here!
English Machine Translation of the Decision
The decision below is a machine translation of the original. Please refer to the original for more details.
To be completed ...