Search results

key card as an employee or as a private person. The error only affected people with NemID key cards who logged in as an employee, which is an unknown proportion

("Gedragscode Verwerking Persoonsgegevens Financiële Instellingen"); 2) IVR is an internal register of ING, appellant failed to demonstrate that the record

welfare service's handling of confidential personal data in an e-mail on 7 December 2021. In an email to A on 23 February 2022, the Norwegian Data Protection

SL despite being on the "Robinson List". Raise Marketing has entered into an agency contract for teleshopping with Factor Energía SA. In this contract

entered by the user, an unauthorized use of the app by from other users could lead to the leaking of this data). They publish an information page in the

this body may be considered as an administrative offense in accordance with the provisions of the GDPR, classified as an infraction in its article 83.5

decide to submit an objection digitally or on paper to the Data Protection Authority article 38 of the UAVG suspends the submission of an objection to the

purpose. There was an additional breach in Article 2(4) GDPR and Article 24 GDPR, which relates to the principle of liability. This puts an obligation on the

account and the tribunal assumes that he will be given an overview of activities if he directs an inquiry to Microsoft Corporation. However, it will not

until 28 December 2044 by virtue of an agreement with the National Civil Aviation Authority (ENAC) - has adopted an organization, management and control

to the Spanish far-right political party VOX. The data controller had sent an email without blind copying, to the members of that political party, infringing

that audio is personal data when it is stored and it is possible to identify an individual. As such, companies must inform data subjects when they collect

Authority has ruled in a case in which an attempt was made to refuse the National Commissioner of Police to provide an individual with certain information

Disputes Chamber concludes that this case does not concern an assessment of a data processing by an authority in accordance with article 10/1, §1 of the decree

The Hellenic DPA imposed an administrative fine of €10,000 on Bank for failing to comply with a data subject access request, violating GDPR Article 12(3)

Religious Affairs for not conducting a Data Protection Impact Assessment (DPIA) in an appropriate manner before implementing a method of distance learning after

form containing personal data to the data subject's neighbour, resulting in an unauthorized disclosure of personal data to a third party. The Cyprus electricity

authority, and Article 56(2) GDPR offering an exception to this rule, in cases where "the subject matter relates only to an establishment in its Member State or

foreign controller, an entity within the jurisdiction on which the GDPR could bite with legal force to ensure data subjects have an effective remedy for

OP Financial Group (OP Ryhmä) from an applicant requesting comprehensive access to OP bonus account information in an account held by his wife. The Tietosuojavaltuutetun