Search results

Said entity considers that for there to be an infringement of the rights conferred in the RGPD, there must be a treatment of the personal data of the claimants

to be affirmed, since there is the possibility that further damages will result from the use of the illegally obtained data. This would only not be the

shall be provided in writing or by other means, including, where appropriate, by electronic means also - must be specified. Oral information may be provided

the submission of supporting evidence. can be challenged in an administrative lawsuit. The application must be submitted to the Authority, electronically

processing cannot reasonably be fulfilled by other means. Personal data should therefore not be stored longer than necessary. It should be noted that the data protection

apply as when assessing whether the fee shall be imposed, special weight shall be given. The fee should be set so high that it also has an effect beyond

Article 5(1)(f) GDPR and asked for a EUR 15,000 fine to be imposed. The AEPD found that it could not be proved which entity collected these documents and which

scientific and historical research or statistical purposes are not shall be deemed to be incompatible with the initial purposes ("purpose limitation"); (c) adequate

GDPRandexplainedby theEDPB in the Guidance must be applied. These principles should be applied on a case-by-case basis, and should be afforded more weight than generalised

will already be the processing of personal data, due to the fact that the information provided will be personal data. This statement can be derived directly

which will be adopt in accordance with the provisions of the following article. In this case, the deadline to resolve the procedure will be six months

relating to data processing be known to employees, but also that those be clearly implemented and documented in order to be able to prove the lawful processing

6(1)(f) GDPR). Following the CJEU's case law, there must be a legitimate interest, the processing must be necessary for this interest and a balancing test has

resources would be necessary to identify persons and that the removal of the cassettes in accordance with data protection requirements would be costly due to

installation of this type of system must be oriented preferably towards the access points to be protected and should not be oriented towards common or transit

continuation of an examination on the merits would be disproportionate. However, it intends that it will be specified in point 24 to communicate this decision

penalties, according to which the information will be covered by the Law Enforcement Act. This may be the case, for example, if an employee is employed

device can image (s) be obtained frompublic service, as this exclusive competence of the Security Forces and Bodiesof the State.It should be remembered that

pl should be specified and a general description of technical and organizational security measures for the processing of this data should be provided.

paragraph may be made at any time prior to the decision. In this case, if both reductions were to be applied, the amount of the penalty would be set at 1,800