Search results

The Romanian DPA fined the President of an Association of Owners €300 for not providing the information requested by the DPA by the legal deadline. The

and 32 GDPR. The Romanian DPA (ANSPDCP) started an investigation after receiving a complaint against an individual who held the office of Secretary-General

former employer €3000 for debiting the bank-account of a former employee for an external service. The DPA held that the controller had processed the personal

Although this practice was carried out at least since 2012, and up until 2021 (as an internal database of the Municipality showed), the decision focuses on cases

condition”. In this context, the nurse's conduct indeed caused an explicit correlation, by an unauthorised third party, between the data subject and a specific

registration on the Robinson List. Furthermore they provided a screenshot of an SMS received as evidence. The complaint was transferred to the controller

for not responding to an access request for 5 months following complaints filed with DPAs in Germany and Austria. The DPA opened an investigation into Klarna

The extracts of the assignment answers are stored in an electronic copy, which is stored on an independent and closed medium, which does not have access

decision on an administrative remedy may be suspended as a precautionary measure if the person concerned indicates his intention to bring an administrative

Article 14 GDPR? The CNIL orders PERFORMECLIC to pay an administrative fine of €7300. It also issued an injunction to bring the processing into compliance

considered that the claimant had a video surveillance system with an excessive orientation to an area out of its property, and without due cause: two of the

surveillance cameras in public spaces without a lawful basis under Article 6 GDPR. An individual lodged a complaint with the Spanish DPA (AEPD) arguing that the

The data subject submitted an access request and the controller did not comply with it. The DPA ordered the controller to provide the requested data or

after an examination of the submitted insights cases, the authority has found that in five of the cases the citizens have been the subject of an automatic

the requester sent a letter with an explanation of why the signatures were not matching together with the copies of an ID card and a bank card. The Municipality

DPA (AEPD) sent a request to the Town Hall to remove such lists or to offer an explanation why the lists were published, but it was not answered. If there

Regulation provides an exhaustive overview of which legal bases (authorities) may be the basis for processing personal data - and which may justify an intervention

camera and the presence of an informative poster where the information about the presence of it. Examining the photographs provided, an excessive uptake of public

holder requests a duplicate SIM card in a store due to theft or loss, opening an incident number the claimed The claimant provides the following with her claim

are dealing with an unintentional but significant negligent action identified (section 83.2b). - Basic personal identifiers (name, an identification number