Search results

includes a list of the "Group companies" and an annex with details of the consent collection process (corresponds to an extract of the training given to employees

order to solve an issue of an inheritance. In carrying out this management, the BANKIA office has informed you that being a client, with an internal number

transferred several tens of thousands of personal data of club members to an external service provider between 2016 and 2017. This included data of underage

constitute a violation of the GDPR. It also held that Article 77 GDPR grants an independent right to lodge a complaint with a DPA, irrespective of Member

that it had an interest in secrecy that justified its refusal to provide a copy under Article 15(4) GDPR. Unsatisfied, the data subject brought an action with

carry out an audit of the data importer, and any sub-processor, who has the same scope and is subject to the same conditions that would apply to an audit of

the monitoring activity for which an accreditation was granted , in fact cannot be exercised. Likewise, in this case, an effective interaction of the respective

factors (Article 83 (2) GDPR) to determine the level of the sanction: It is an intentional negligent action (art. 83 (2) (b) GDPR). The AEPD became aware

of this body may be considered an administrative offence in accordance with the provisions of the RGPD, classified as an infringement in its Article 83

The Spanish DPA dismissed a complaint about an unauthorised publication of nude photos of a minor on a pornographic website due to the lack of evidence

Spanish DPA (AEPD) fined an accommodation services company €6000 for signing a contract on behalf of the claimant without their consent. An action for breach

although in its historical file, there was an informed dischargeby Evo Finance on January 13, 2019, for an unpaid amount of € 738.76,which was terminated

year is a sufficient storage period. Statement received from the registrar An explanation has been requested from the registrar on May 27, 2020. The registrar

assignment of points in an evaluation of the organizational behavior of directors and executive personnel of an Italian municipality may cause an “unjustified and

Seguridad del Estado) in November 2019. In addition, the system does not have an informational poster indicating the responsible person for data processing

Assembly meeting. The notification document included the claimant's name and an outstanding debt of €286,81 in his name. The defendant claimed that notifying

key card as an employee or as a private person. The error only affected people with NemID key cards who logged in as an employee, which is an unknown proportion

("Gedragscode Verwerking Persoonsgegevens Financiële Instellingen"); 2) IVR is an internal register of ING, appellant failed to demonstrate that the record

welfare service's handling of confidential personal data in an e-mail on 7 December 2021. In an email to A on 23 February 2022, the Norwegian Data Protection

SL despite being on the "Robinson List". Raise Marketing has entered into an agency contract for teleshopping with Factor Energía SA. In this contract