Search results

process personal data with an appropriate level of security, as required by Article 32 GDPR. The company accepted applications via an applicant portal integrated

Does the tracking of a company vehicle (which an employee is also free to use in his leisure time) by an employer via a GPS positioning system require

indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors

indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors

requests from an Airbnb customer (the data subject) to Airbnb Ireland UC (the controller); an access request under Article 15 GDPR and an erasure request

The Spanish DPA held that sending an e-mail without using the BCC (Blind Carbon Copy) option is an infringement of Article 5(1)(b) and (f) GDPR. In particular

travel services to Russia offered on the website, and an offer for a group trip is requested by sending an e-mail to the registrar. Visa types other than group

of […] euros in 2015. 5. During the summer of 2015, during an internal research project on an anti-fraud mechanism, the company reused personal data contained

although Member States are in principle free to fix an appropriate fee for bringing an appeal before an administrative authority, that fee may not be set

The controller requested a copy of an identity document for identification purposes. Following the request of an official identity document, the data

recidivism to be an aggravating circumstance. Se / on el / e, / 'the absence of an aggravating circumstance does not mean the existence of an aggravating circumstance

basis. The Slovenian DPA (IP) was asked for an opinion concerning the scope of GDPR Article 15. Within the GDPR, an individual can only request their own personal

the law if (i) there is an infringement of a subjective right, (ii) an act or omission is in breach of a statutory duty or (iii) an act or omission is in

claimed, from the email address: ***EMAIL.1 sent an email email to the SGT and General Directorates, in which an Excel sheet was attached where you could see

Adherence to an approved code of conduct within the meaning of Article 40 or to a certification mechanism approved under Article 42 may serve as an element

October 2019, - an internal audit subcontracted to an audit firm covering organizational aspects, - an external audit carried out by an audit firm, in order

educational magazines, received an e-mail from the individual in charge of its web-portal. This individual stated that an external alleged researcher had

within 30 days by either: - an appeal to the Data Protection Inspectorate pursuant to the Administrative Procedure Act; or - an appeal to Tallinn Administrative

that was available to the creditors came from the surrender of an insurance policy and (for an amount of € 10,757) from a son of [applicants] et al. would

carried out an online control mission on the "discord.com" website and on the DISCORD mobile application on 17 November 2020. 8. On 29 December 2020, an off-site