Search results

OP Financial Group (OP Ryhmä) from an applicant requesting comprehensive access to OP bonus account information in an account held by his wife. The Tietosuojavaltuutetun

controller under the GDPR. The data controller did not process personal data with an appropriate level of security, as required by article 32, read in conjunction

"calls for tenders and contracts"; - "the act of summons was considered an annex and an integral part of the resolution"; - "in relation to the publication

submitted a claim against their former employer company (the controller) for an illegal communication of their previous trade union membership data. Specifically

Madridsedeagpd.gob.es Page 5 5/14as an ultimate object, avoid incidents such as those that occur and try at all times topromote an environment that advocates respect

the circulation of a report among other employees detailing the reasons for an employee's temporary assignment, and why they failed to meet the conditions

with Article 123 of the LPACAP, the interested parties may, on an optional basis, file an appeal for replacement to the Director of the Spanish Data Protection

Ombudsman (EOAK / 945/2016) that if an obligation to pay has been reasonably challenged in court in a way that may have an effect, the entry is in principle

indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic

of the Chamber, the problem that an employer collects a large amount of personal data about employees in the course of an employment relationship can only

notice of receipt in the file. FOURTH: On June 15, 2021, the claimant files an appeal optional replacement (***EXP.1) through the Electronic Registry of

with the sanction consisting of an administrative fine.1.c) of the GDPR, and could therefore entail the commission of an offence under Article 83.5 of the

until 22 April 2022. On August 8 2022, the controller responded that there was an error in the profile name. On August 29, the DPA made the same request as

However, the personal data collected in the specific case was for an article under an established newspaper with editorial control and with a clear public

as an addition to or substitute for the measures contemplated in article Article 58, section 2, letters a) to h) and j). When deciding to impose an administrative

Article 21 GDPR in conjunction with Article 23(4) LOPDGDD. Avilon Center SL made an voluntary, early and guilty payment of €12,000. The complainant filed a complaint

(AEPD) rejects A.A.A's claims against Google Spain, SL. The complaint concerned an alleged violation of the applicant's right of erasure (Article 17 GDPR). However

Article 123 of the LPACAP, the interested parties may lodge, on an optional basis, an appeal for reversal to the Director of the Spanish Data Protection

Italian DPA found that the violation of personal data was due to the lack of an adequate security framework in line with art. 5(1)(f) and 32 GDPR. More specifically:

granularity"). Finally, the Datatilsynet reiterated that "consent must be an expression of an unequivocal expression of will on the part of the data subject." As