CNPD (Luxembourg) - Délibération n° 3018: Difference between revisions
From GDPRhub
(Created page with "{{DPAdecisionBOX |Jurisdiction=Luxembourg |DPA-BG-Color= |DPAlogo=LogoLU.png |DPA_Abbrevation=CNPD |DPA_With_Country=CNPD (Luxembourg) |Case_Number_Name=3018 |ECLI= |Origin...") |
|||
| Line 50: | Line 50: | ||
Luxembourg DPA argues it cannot proceed against a company established abroad that has not designated an EU Represenative. | Luxembourg DPA argues it cannot proceed against a company established abroad that has not designated an EU Represenative. | ||
== English Summary == | ==English Summary== | ||
=== Facts === | ===Facts=== | ||
Rocketreach is selling access to EU Personal Data Subjects without any legal basis. | Rocketreach is selling access to EU Personal Data Subjects without any legal basis. | ||
=== Dispute === | ===Dispute=== | ||
1. Deleting my information when I solely asked for access. | 1. Deleting my information when I solely asked for access. | ||
2. Legal basis of processing | 2. Legal basis of processing | ||
3. Mass processing | 3. Mass processing | ||
=== Holding === | ===Holding=== | ||
Luxembourg DPA argues it cannot proceed against a company established abroad that has not designated an EU Represenative. | Luxembourg DPA argues it cannot proceed against a company established abroad that has not designated an EU Represenative. | ||
== Comment == | ==Comment== | ||
== Further Resources == | ==Further Resources== | ||
https://blog.zoller.lu/2020/05/how-to-effectively-evade-gdpr-and-reach.html | |||
== English Machine Translation of the Decision == | ==English Machine Translation of the Decision== | ||
The decision below is a machine translation of the English original. Please refer to the English original for more details. | The decision below is a machine translation of the English original. Please refer to the English original for more details. | ||
Revision as of 10:40, 29 May 2020
| CNPD - 3018 | |
|---|---|
 | |
| Authority: | CNPD (Luxembourg) |
| Jurisdiction: | Luxembourg |
| Relevant Law: | Article 27 GDPR |
| Type: | Complaint |
| Outcome: | Other Outcome |
| Started: | |
| Decided: | 04.02.2020 |
| Published: | 29.05.2020 |
| Fine: | None |
| Parties: | n/a |
| National Case Number/Name: | 3018 |
| European Case Law Identifier: | n/a |
| Appeal: | Not appealed |
| Original Language(s): | English |
| Original Source: | Zoller Thierry (in EN) |
| Initial Contributor: | Thierry ZOLLER |
Luxembourg DPA argues it cannot proceed against a company established abroad that has not designated an EU Represenative.
English Summary
Facts
Rocketreach is selling access to EU Personal Data Subjects without any legal basis.
Dispute
1. Deleting my information when I solely asked for access. 2. Legal basis of processing 3. Mass processing
Holding
Luxembourg DPA argues it cannot proceed against a company established abroad that has not designated an EU Represenative.
Comment
Further Resources
https://blog.zoller.lu/2020/05/how-to-effectively-evade-gdpr-and-reach.html
English Machine Translation of the Decision
The decision below is a machine translation of the English original. Please refer to the English original for more details.
