Search results

much broader under Article 6(1)(4) GDPR, as illustrated by the rules in Articles 4(11), 7 or 8 GDPR, as well as Recital 43. If consent is "freely given"

recognised, such as the data subjects' expectation of reasonable use of their data, and the right not be discriminated or exploited as a consequence of

The information can either be 'objective' such as unchangeable characteristics of a data subject as well as 'subjective' in the form of opinions or assessments

understood as indicating that the controller shall restore availability and access as soon as possible. Article 30(1)(d) GDPR mentions, as an example of

information should be provided in as simple a manner as possible, avoiding to downplay or 'reframe' processing operations, as well as complex sentence and language

involved; as well as the significance and the envisaged consequences of such processing for the data subject. This provision uses the same language as Article

processor, such as access to documents, the examination of hardware and software used, networks, databases, applications, interfaces, as well as the testing

intended" and "as well as the legal basis for the processing") otherwise the paragraph could simple read "any purposes, any personal data, as well as any legal

of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3); (d) for archiving purposes in the public interest, scientific

or approval for political groups in social networks (such as the "Like" on Facebook) as long as they reflect a reliable conclusion on a political opinion

taking into account the nature scope or purpose of the processing concerned as well as the number of data subjects affected and the level of damage suffered

implementation and the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for rights and freedoms of

the purposes of the processing for which the personal data are intended as well as the legal basis for the processing; (d) the categories of personal data

approved codes of conduct as referred to in Article 40 or approved certification mechanisms as referred to in Article 42 may be used as an element by which to

factors such as the current state of technology, the implementation costs, the nature, scope, context, and purposes of processing, as well as the varying

This withdrawal should be as easy as giving consent. Article 7(3) GDPR clarifies that the withdrawal of consent must be as simple as the granting of consent

approved code of conduct as referred to in Article 40 or an approved certification mechanism as referred to in Article 42 may be used as an element by which

outlined in Article 23(1)(a) to (j) GDPR (e.g. national and public security) as well as Recital 73 GDPR (e.g. protection of human life). In any case, the threshold

economic or social disadvantage to the natural person concerned. Therefore, as soon as the controller becomes aware that a personal data breach has occurred

35(10), as well as recitals 90 and 93 of the GDPR. This requirement is in line with the principles of data protection by design and by default, as outlined