Search results

i. a misdemeanour, p. e p. by Article 5(1)(f) in conjunction with Article 5(1)(f) a) don.0 5 of article 83.0 , both of the RGPD, sanctioned with a fine

Agency for Data Protection and based on to the following: BACKGROUND FIRST: On March 22, 2021, the Director of the Spanish Agency for Data Protection agreed

Agency for Data Protection RESOLVES: FIRST: IMPOSE A.A.A. with NIF *** NIF.1, for a violation of article 13 of the RGPD, typified in article 83.5 of the RGPD

alleged infringement of Article 5.1 a) of the RGPD in relation to Article Article 9.1 of the same RGPD, in accordance with Article 83.5.a) of the said RGPD.

disclosure of personal data. The Danish Data Protection Agency must initially state that the Personal Data Act per. May 25, 2018 has been repealed and replaced

gob.es 2/11 SECOND: In accordance with article 65.4 of Organic Law 3/2018, of 5 December, Protection of Personal Data and guarantee of digital rights (in

that the data is processed lawfully, fairly, and in a transparent 3(11) manner in relation to the data subject (Article 5 (1) a) of the General Data Protection

process data in a manner compatible with the purposes for which they were collected pursuant to Article 5, paragraph 1, b) of the GDPR 22. Article 5.1.b)

personal data and the free circulation of these data (hereinafter, GDPR); and in article 47 of Organic Law 3/2018, of December 5, Protection of Personal

principle (article 5(1)(e) GDPR). After a complaint in 2018, the CNIL conducted both online and on-site investigations of the company resulting in a €400,000

provide additional proofs. The data protection authority held that DEYA X violated the data minimization principle under Article 5(1)(c) of the GDPR by inappropriately

2020 [CONFIDENTIAL] […] Pursuant to Article 30 Implementing Act, General Data Protection Regulation (UAVG) Article 9, subsection 2 b, of the AVG prohibiting

content of Article 11.5 1 invoked, now replaced by Article 1-9 § 5. 1Article 1-9 § 5: Correction of an error made in an act, an extract of an act, a decision

Organic Law 3/2018, of December 5, on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), for the infringement of Article 5.1 f) of the RGPD

Section, of the LawOrganic 3/2018, of December 5, Protection of Personal Data and guarantee ofdigital rights (hereinafter LOPDGDD).As a result of the investigation

of Data Protection and based on the following FIRST: D. A.A.A. (hereinafter, the claimant) on 3 April 2019 filed a complaint with the Spanish Data Protection

interest to bring a case before the DPA. The DPA found the controller violated the Article 5(1)(a) GDPR, Article 6(1)(a) GDPR, Article 7(3) GDPR. Firstly

notified a bank as a controller, ABANCA, for not replying to a data subject's exercise right, violating Article 12 GDPR. On February 8, 2022 the data subject

that there was a clear violation of Article 6 GDPR as Vodafone processed the data subject's personal data without a legal basis. The data subject continued

1. In a brief dated April 26, 2020 (improved with input dated May 11, 2020), the BF lodged a data protection complaint with the data protection authority