Search results

2005). The mere commission of an administrative offense — objective type — is not sufficient time to proceed to impose an administrative sanction. Guilt

Sector (Responsibility), which requires that only parties responsible for an adiminstrative infraction by way of fraud or negligence be subject to sanction

did not show any CV to the Administrator, nor did they ask for an explanation of why an entity other than SHANA, has such documents.4)In the CVs provided

to the report, an alternative way would be to change the service so that the user must identify himself to the service before booking an appointment, either

request after the one-month deadline. On 23 March 2023, an employee of the controller consulted an extract of the data subject's personal data stored in

Nules S. Coop. Credit of the Valencian Community, with NIF F12013140, for an infringement of Article 5.1.f) of the RGPD, typified in Article 83.5 of the

respondent. In the course of this, an employee of the respondent requested that the complainant be presented with an ID, which was also presented by the

the provision), an assessment of whether the processing operations are necessary and moderate compared to their purpose (paragraph b), an assessment of the

the illegal sharing of her data with other telephone directories. Following an appeal by the telecom operator, the Court of Appeal of Brussels referred several

corrective measures different, as well as to impose on the controlled an administrative fine of an amount of 3,700 euros. The ability to submit written observations

of an incident. related to personal data- them. report the situation internally without delay, communicating it to the management team tive. 2.- An internal

Adherence to an approved code of conduct pursuant to article 40 or to a certification mechanism approved under article 42 may serve as an element to demonstrate

Council of State (RvS) held that if there are easier methods of verifying an identity, it is disproportionate to ask the data subject requesting access

The Croatian DPA stated in an advisory opinion that the scanning of employees' identity and bank cards may not be based on compliance with a legal obligation

Public Administrations, the The corresponding sanction would be an administrative fine for an amount of € 60,000 (sixty thousand euros) without prejudice to

not compliant with Article 32 of the GDPR. It recommended the use of BCC as an alternative. The data subject complained to the Greek DPA (the HDPA) about

A housing cooperative had incorrectly judged that the use of an electric lock system did not process personal data. The Finnish DPA ruled that, as individuals

but it is an isolated fact, produced by a human error. FUNDAMENTOS DE DERECHOI In the present case the defendant is accused of committing an infringement

the access request constituted an abuse of rights (Section 242 of the German Civil Code). According to this principle, an exercise of a right is not permitted

in the National Register dated May 11, 2018 by an employee of the respondent. On June 27, 2019, she sent an email to the Helpdesk Belpic (Inner SPF – Directorate-General