Search results

processing of personal data (83 (2) (k) GDPR); the fact that basic personal identifiers are affected (83 (2) (g) GDPR); the intentionality or negligence

the GDPR, pursuant to Articles 58(2)(b) and (d) respectively. For the violation of Article 5(1)(f), it issued a fine of €10000, pursuant to Article 58(2)(i)

further additional corrective powers exercised in this second decision (IN-19-9-2) in light of how the first decision addressed the circumstances of the same

the controller violated the provisions of Article 13(1)(c) GDPR, Article 13(2)(a) GDPR and Article 13(2)(e) GDPR, according to which a controller is obliged

paragraph 2 and paragraph 3, letter b) of the Regulation; 9, paragraphs 1, 2, 4, of the Regulation, Articles 2-ter, paragraphs 1 and 3 and 2-septies, paragraph

health, culture, and emotional state. This combined with the fact that Article 4(2) GDPR includes "transmission" and "dissemination" in the definition of processing

of the unlawfully processed data in accordance with Article 58(2)(f) and Article 58(2)(g) GDPR. 2) There is no contradiction in concurrently referring

corrective powers under Article 58(2) GDPR, namely 58(2)(d) and (g) GDPR, may be exercised by the DPA on its own motion. Article 58(2)(c) GDPR, on the other hand

violated Article 5(1)(c) GDPR, Article 5(1)(e) GDPR, Article 12(2) GDPR, Article 12(6) GDPR and Article 25(2) GDPR. In accordance with Article 58(2)(c) GDPR

content: [article quoted] [article quoted] [article quoted] [article quoted] [article quoted] [article quoted] [article quoted] [article quoted] [article quoted]

violation committed by the Center of Registers listed in Article 83(2) (b), (c), (e), (f) and (h) GDPR, i. e. the absence of intent, the efforts made to restore

latter of the possibility to exercise their right of access according to Article 15 GDPR, regardless of the fact that the data controller is a public or private

publication of the photos a valid legal basis would be needed according to Article 6 GDPR. Consent would be the only proper legal basis here if it meets all the

the proceedings to a violation of Article 5(2) GDPR. Further proceedings regarding potential other violations of the GDPR were provisionally terminated pursuant

compliant with data protection rules, on the basis of Article 6(2) read in conjunction with Article 6(1)(e) GDPR. Then, the Datatilsynet focused on two specific

objection for data processing under Article 21 GDPR and the principle of liability under Article 2(4) GDPR and Article 24 GDPR. The complainant, the data subject

connection with Article 5 paragraph 1 point c, Article 9 paragraph 1, Article 58 paragraph 2 point f, point g and point i and with Article 83 paragraph 2 and 3,

of the data subject's right to access their data (Article 15 GDPR) and the violation of Article 11(2) Law 3471/2006 that concerns the protection of personal

game company to bring its processing operations into compliance with Article 12(2) GDPR as it found they should implement additional modalities to facilitate

reprimand to the controller in accordance with Article 58(2)(b) GDPR. Pursuant to Article 58(2)(d) GDPR, the DPA also ordered the controller to bring its