Search results

concluded that processing of personal data carried out by I-DE violated data protection law (legal basis and data protection principles). The report highlighted

required by Regulation 21B(2)(b) and 21B(3)(b) PECR. Indeed, they obtained the data to make these calls from six competition/offer websites. EBAG could not provide

Agency for Data Protection and based on to the following BACKGROUND FIRST: On June 24, 2021, the Director of the Spanish Agency for Data Protection agreed

variously defined in sections 3(6), 5 and 6 of the Data Protection Act 2018 (“DPA”) and Article 4(7) of the UK General Data Protection Regulation (“UK GDPR”)

Sentence 94/1998, of May 4, that Through a fundamental right to data protection, the person is guaranteed the control over your data, any personal data, and over

Agency for Data Protection and based on to the following: BACKGROUND FIRST: On July 30, 2021, the Director of the Spanish Agency for Data Protection agreed

fundamental right to protection personal data represented by the unauthorized storage of its operational and location data of data constructs ipso facto

Bavaria and applies for Section 3 Paragraph 1 Sentence 2 in conjunction with Section 3a of the Fourteenth Bavarian Infection Protection Measures Ordinance (14th

Spanish Data Protection Agency and based to the following BACKGROUND FIRST: On April 22, 2024, the Director of the Spanish Agency for Data Protection agreed

duplicate of the data subject’s SIM card without the data subject’s consent. The third party accessed the data subject’s banking data as a result, causing

Agency for Data Protection and based on to the following: BACKGROUND FIRST: On July 19, 2021, the Director of the Spanish Agency for Data Protection agreed

the consent or knowledge of the data subject. The AEDP held that the controller had used the data subject's personal data to make them party to a contract

and (2) of the Spanish Data Protection Law (LOPDGDD) to highlight the importance of the principle of transparency in data protection law. The DPA then held

2016/679 (General Data Protection Regulation, hereinafter GDPR), and in accordance with the provisions of Title VII, Chapter I, Second Section, of the LOPDGDD

the fact that the data subject had requested an arbitration, the debt was not enforceable. Article 20 of the Spanish Data Protection Act allows for the processing

f) of its section 1 that personal data will be "Treated in such a way as to guarantee adequate data security personal data, including protection against

paragraph 2 FGO Section 91a Paragraph 1 Clause 2, Section 100 Paragraph 1 Clause 1, Section 102, Section 115 Paragraph 2 No. 1 and 2, Section 135 Paragraph

Spanish Protection Agency of data. Likewise, article 63.2 of the LOPDGDD determines that: “The procedures processed by the Spanish Data Protection Agency

based on personal data obtained in accordance with the regulations for the protection of applicable data (identification data and contact data) and with standardized

Agency for Data Protection and based on to the following BACKGROUND FIRST: On October 29, 2021, the Director of the Spanish Agency for Data Protection agreed