Search results

the principles of lawfulness and fairness of Article 5 GDPR and without a legal basis under Article 6 GDPR. A bank (the controller) organized prize games

under Article 6(1)(f) GDPR is not a valid legal basis for the processing of cookies. The Italian DPA also held that the controller violated Article 122 of

with the principle of fair and transparent processing contained in Article 5(1)(a) GDPR? Is the information relating to personal data processing operations

exemptions set out in Article 14(5) GDPR apply in this case, the DPA found a violation of the principle of transparency in Article 5(1)(a) GDPR and the obligations

held, that the powers of the DSB under the GDPR are extensive. Neither Article 55, Article 77 or Article 51 GDPR nor the DSG limit the DSB's competence regarding

obligations related to the processing operations pursuant to Article 5(1)(a) GDPR and Article 14(5)(b) GDPR. In that case, the DPA recommended that the information

the provisions of Article 6(1)(c) of the GDPR, or Article 6(1)(f) of the GDPR, or both provisions? 2. Does the answer to question 1 mean that a. the person

is covered by Article 6, clause 1 (c) of the AVG and not by Article 6, clause 6 (f) of the AVG. The BKR itself refers to Article 6, clause 1 (f) of the GCG

according to Article 15 GDPR, which has been directly applicable since May 25, 2018 (Article 99 (2) GDPR). According to Art. 15 Para. 1 GDPR, the person

dismissed the complaint on the grounds of (1) "lack of sufficient personal impact" for the purposes of Article 35 GDPR, and (2) "insufficient documentary evidence"

the Personal Data Act § 23 and the Privacy Ordinance Article 58 no. 1. Pursuant to Article 58 no. 1 letter a, the Authority has the competence to: "Instruct

alert on the SIS system under Article 17(1)(d) GDPR. The reason for the data subject invoking the GDPR is that Article 53(1) Regulation (EU) 2018/1861 which

Dispute Resolution Chamber validly found a breach of Article 21.1 AVG and Article 12.3 AVG - If Article 21.1 AVG imposes an obligation on the controller to make

data protection officer pursuant to Article 37(1)(a) of the GDPR 13. In law, Article 37, paragraph 1, a) of the GDPR provides that “The controller and the

that the GDPR applies to the request for removal. The request shall be based on Article 21 in conjunction with Article 79 of the GDPR and Article 35(2) of

to a claim under Article 82 (1) GDPR, which he could also base on Article 823 (1) BGB in conjunction with Article 2 (1) and Article 1 (1) GG. The defendant

Appeal considered Article 35(2) of the Implementing Act of the GDPR (UAVG), which follows from the right to object, Article 21 GDPR. Article 35(2) UAVG stipulates

finding likely violations of Article 5(1)(c), 8, 9, 13 and 35 GDPR. The AEPD found a likely violation of Article 35 GDPR. Article 35 GPDR requires that a data

obligations that follow from Article 12, 13, 14 and 26 GDPR, although this competence does not directly follow from Article 35 of the General Data Protection

according to Article 16 GDPR, because the certificate is not contained in a filing system or automated storage and therefore, pursuant to Article 2 GDPR, outside