Search results

by Article 6(1) GDPR, after hiring a handwriting expert to determine that an alleged signature was fake. The Bulgarian DPA examined a complaint lodged

The data protection commissioner's office requested an explanation from the data controller with an explanation request dated July 4, 2023. On 10 August

rule incorrectly or makes an incorrect assessment of the facts, this could result in an incorrect decision. If NAV has used an incorrect understanding of

Nordic has stated that an order confirmation by mail is not as good documentation of a contract as an audio recording, since an order confirmation, for

punishable by a fine of 20,000,000 euros as maximum or, in the case of an enterprise, an amount equivalent to 4% as maximum of the total annual overall turnover

July 2019. Again, on 17 July 2019, NRA requested an all-round audit of its information systems by an independent external organization. NRA also developed

wanted to book accommodation in an hotel, the controller, which offered three options to do so on its website: through an external service provider, through

Protection Authority (Datatilsynet) issued a reprimand concerning the use of an acquired development and testing environment without implementing the appropriate

management platform’ (CMP), which is an interface that appears when a data subject first navigates to a websites or uses an application for the first time.

German Supreme Court (BGH - VI ZR 60/21), the court came to an opposite conclusion that an online platform collecting and publishing personal data of doctors

a company had obtained access to an employee's emails. In the first case, the company had accessed her inbox due to an acute situation where they needed

fines Vodafone €10,000 for transferring personal data from their customers to an advertising company without prior consent. After requesting the provision

The Portuguese DPA considered that an organisation is the controller of personal data when employing the services of a direct marketing company to promote

addresses in the "To" section instead of the "BBC" section while sending an email. At an unspecified time, the controller, a Romanian water supplier, incurred

In October 2020, the Polish DPA received an anonymous tip informing about this incident. The DPA started an investigation and requested information from

that CP&A maintained an online register, containing data on the cause of absenteeism in its employees. In response, it launched an own volition investigation

data as follows: 2 «any information about an identified or identifiable natural person (« the registered »); An identifiable natural person is a person who

associated an email address and/or phone number with a business account (whether as a mandatory requirement of switching prior to September 2019, or on an optional

In 2019, after conducting an internal risk analysis and a Data Protection Impact Assessment (DPIA) the hospital introduced an encryption solution for secure

CI Plus module as an alternative to a loan receiver (quasi an adapter that replaces the zapping receiver and can be inserted into an existing receiver