Search results

obligations under this Regulation; (e) upon request, provide information to any data subject concerning the exercise of their rights under this Regulation

information with each other. 2. The lead supervisory authority may request at any time other supervisory authorities concerned to provide mutual assistance

material scope of the GDPR. Paragraph 1 clarifies that the Regulation applies to any processing of personal data by automated means or to the non-automated processing

freedoms of others; (j) the enforcement of civil law claims. 2. In particular, any legislative measure referred to in paragraph 1 shall contain specific provisions

or e-recruiting practices without any human intervention. Such processing includes ‘profiling’ that consists of any form of automated processing of personal

advice to the controller and, where applicable to the processor, and may use any of its powers referred to in Article 58. That period may be extended by six

challenging, requiring appropriate technical expertise and experts to resolve any doubts unless guidelines are provided by supervisory authorities. EDPB: In

judicial remedy against a supervisory authority 1.   Without prejudice to any other administrative or non-judicial remedy, each natural or legal person

authenticated by any Greek administrative authority or the citizens’ service centre (Κέντρο Εξυπηρέτησης Πολιτών). Withdrawing the mandate can be done at any time

on the territory of a Member State of liability for any breaches of the binding corporate rules by any member concerned not established in the Union; the

protected by professional secrecy, unauthorised reversal of pseudonymisation, or any other significant economic or social disadvantage; where data subjects might

disclose, erase, or perform any other type of processing operation on them. The personal data gets "frozen", unless any of the specific exceptions under

within the meaning of Article 47. 2. Any supervisory authority, the Chair of the Board or the Commission may request that any matter of general application or

providing a supplementary statement. Recital 39: Principles of Data Processing Any processing of personal data should be lawful and fair. It should be transparent

not follow the opinion of the Board issued under Article 64. In that case, any supervisory authority concerned or the Commission may communicate the matter

there seems to be no formal decision that can be appealed. Any party can file an appeal against any DSB decision (or in the case of non-decision within 6 months)

authority shall refrain from any action incompatible with their duties and shall not, during their term of office, engage in any incompatible occupation, whether

must now decide any question as to the validity, meaning or effect of any retained EU law for itself: it is no longer possible to refer any matter to the

recipient, typically for remuneration. This includes “any Information Society service, that is to say, any service normally provided for remuneration, at a

integrity, refrain from any action that is incompatible with their duties and should not, during their term of office, engage in any incompatible occupation

which it adopts pursuant to paragraph 1, by 25 May 2018 and, without delay, any subsequent amendment affecting them. Recital 8: National Implementation Where

investigation, issue a decision and a fine or to carry out any other task and exercise any other power conferred on it by the GDPR. Example: Polish SA

controller and the processor shall designate a data protection officer in any case where: (a) the processing is carried out by a public authority or body

judicial remedy against a controller or processor 1.  Without prejudice to any available administrative or non-judicial remedy, including the right to lodge

exercised with any controller data subjects choose within the conditions specified below. Data subject have the right to request and obtain a copy of any personal

refusing administrative assistance. In any case, according to paragraph 5 below, the requested SA shall provide reasons for any refusal to comply with a request

44 GDPR must be also be complied with, meaning that any transfer based on a derogation shall, in any case, meet the conditions contained in the provisions

bodies, it still remains accountable to them. Nonetheless, the scrutiny of any such external bodies may only come following an action taken by the Board

for appropriate safeguards for the rights and freedoms of data subjects. Any comprehensive register of criminal convictions shall be kept only under the

relating to human resources, the budget and the IT of the DPA; To manage any legal matter relating to the management and operation of the DPA; To manage

matter within eight weeks by simple majority. Any SA, the Chair of the EDPB or the Commission may request that any matter of general application or producing

referred to in Article 36, and to consult, where appropriate, with regard to any other matter. 2. The data protection officer shall in the performance of his

Article 44 - General principle for transfers Any transfer of personal data which are undergoing processing or are intended for processing after transfer

subject and for ensuring statistical confidentiality. Statistical purposes mean any operation of collection and the processing of personal data necessary for

authorities; (b) advise the Commission on any issue related to the protection of personal data in the Union, including on any proposed amendment of this Regulation;

its law which it has adopted pursuant to paragraph 2 and, without delay, any subsequent amendment law or amendment affecting them. Recital 153: Processing

Article 41 GDPR complements Article 40 GDPR by providing that compliance with any approved code of conduct must be monitored by an accredited body with the

Compared to a continental law system, this also includes general elements of any procedure like the service of documents (Section 106 DPA 2018) or the appeals

personality, autonomous and independent from any other public administration authority, as well as from any natural or legal person in the private domain

participate in the cooperation procedure provided for by this Regulation. In any case, the supervisory authorities of the Member State or Member States where

Responsibility and Liability The responsibility and liability of the controller for any processing of personal data carried out by the controller or on the controller's

of power referred to in Article 12(8) and Article 43(8) may be revoked at any time by the European Parliament or by the Council. A decision of revocation

personal data or restriction of processing The controller shall communicate any rectification or erasure of personal data or restriction of processing carried

act on behalf of the controller or the processor and may be addressed by any supervisory authority. The representative should be explicitly designated

integrity, refrain from any action that is incompatible with their duties and should not, during their term of office, engage in any incompatible occupation

State, any competent court other than the court first seized may suspend its proceedings. 3. Where those proceedings are pending at first instance, any court

act on behalf of the controller or the processor and may be addressed by any supervisory authority. The representative should be explicitly designated

contacts the controller to try to resolve the case, as well as attaching any such correspondance and other documentation to the complaint. However, this

which it adopts pursuant to paragraph 1, by 25 May 2018 and, without delay, any subsequent amendment affecting them. Recital 149: Criminal Penalties by and

ensures an adequate level of protection. Such a transfer shall not require any specific authorisation. 2. When assessing the adequacy of the level of protection

and reasoned notion about the legal basis of processing before it starts any operation, and this notion should be verifiable by means of its records. Thus

Transfers or disclosures not authorised by Union law Any judgment of a court or tribunal and any decision of an administrative authority of a third country

need to reconcile those two conflicting rights, albeit without providing any indications as to how this should be accomplished. For example, it does not

performance of its tasks” as well as “access to any premises of the controller and the processor, including to any data processing equipment and means, in accordance

Transparent Information Provision The principle of transparency requires that any information addressed to the public or to the data subject be concise, easily

protection seals and marks in a register and shall make them publicly available by any appropriate means. Recital 100: Establishment of Certification Mechanisms

safeguards referred to in paragraph 1 may be provided for, without requiring any specific authorisation from a supervisory authority, by: (a) a legally binding

which it adopts pursuant to this Chapter, by 25 May 2018 and, without delay, any subsequent amendment affecting them. Recital 117: Establishment of Independent

actually taking place. Once the requirements in the GDPR generally allows any form of processing and does not look into the "black box". Attempts to regulate

organisations, as far as such agreements do not affect this Regulation or any other provisions of Union law and include an appropriate level of protection

staff has caused damage to any person in the territory of another Member State shall reimburse that other Member State in full any sums it has paid to the

Rules of Procedure, any minutes and draft documents were confidential, except in circumstances where the WP29 decided to make any such information public

where provided for by Member State law. 2. Member States may provide that any body, organisation or association referred to in paragraph 1 of this Article

retain any authority over the staff seconded to the EDPB. Many commentators doubt that Article 75(1) GDPR can effectively ensure EDPB freedom from any influence

processed for taking decisions regarding specific natural persons following any systematic and extensive evaluation of personal aspects relating to natural

Applicable to Anonymous Data The principles of data protection should apply to any information concerning an identified or identifiable natural person. Personal

Processing under the authority of the controller or processor The processor and any person acting under the authority of the controller or of the processor, who

view argue that a deviating majority requirement is intended to prevent the any attempted obstruction to the EDPB's ability to act if several members do not

Germany for the federal government and private telecommunication services. For any other private sector controller, one of the 16 the local German state data

brings into effect the GDPR on the same date - 25 May 2018. Consequently, any data processing that took place from 25 May 2018 is no longer regulated by

identification number or any other identifier of general application. In that case the national identification number or any other identifier of general

of view, or forms of personal or communal conduct based on or mandated by any religious belief and as a consequence of religious organisation”. Based on

authorities, the Chair has also the right to request an opinion of the EDPB on any matter of general application or producing effects in more than one Member

from the Board, giving reasons for requesting such opinion or decision. 3. Any supervisory authority may request an urgent opinion or an urgent binding decision

“operational meaning” of the Article 5 GDPR principles; and clarifications on any EDPD opinions or guidance for the specific sector. The EDPB also clarifies

the EDPS should be treated the same as any other supervisory authority. Arguably, in practice the outcome of any such debate makes little difference, given

each case is to check whether the special provisions of [the] Directive [if any, n.e.] actually supersede the general rules of the GDPR.” Article 95 GDPR

administrative court (Conseil d'État). This applies to sanctions, guidelines or any decision of the authority. Decisions by the Conseil d'État are final and cannot

Court of Budapest (Fővárosi Törvényszék) is the competent tribunal to act. Any individual, who does not speak Hungarian may request the authority to assess

or e-recruiting practices without any human intervention. Such processing includes ‘profiling’ that consists of any form of automated processing of personal

1(1) of Directive (EU) 2015/1535, an "information society service" (ISS) is any service normally provided for remuneration, at a distance, by electronic means

organisations, as far as such agreements do not affect this Regulation or any other provisions of Union law and include an appropriate level of protection

delivery/sending/submission to the controller) and the controller's response (if any). There is a special electronic form for submitting a complaint, that is published

protection seals in a register and shall make them publicly available by any appropriate means. 7. Without prejudice to CHAPTER VIII, the competent supervisory

an opinion, if a majority of its members so decides or if so requested by any supervisory authority concerned or the Commission. The Board should also be

effective remedy and to a fair trial under Article 47 CFR. This means that any interpretation of the GDPR that would disproportionally limit the right to

handle complaints which, in accordance with Article 77(1) of that regulation, any data subject is entitled to lodge where that data subject considers that the

authorities was "legally possible at any time", it had to be examined how likely this was. The Complainant has not presented any convincing arguments as to why

In addition, the CJEU highlighted that Article 82 GDPR does not include any reference to a treshold of seriousness. Therefore, the CJEU held that Article

federal government authorities and private telecoms and postal services. Any other private entity and all other authorities in Germany is regulated by

enable the data subject to be able to easily determine the consequences of any consent they might give. Except for the example of Twitter’s MoPub, there

written answers submitted by a candidate at a professional examination and any comments made by an examiner with respect to those answers constitute personal

fr website, seven cookies were placed on their terminal equipment, before any action. In its letter dated 30 April 2020, Google Ireland Ltd indicated that

Form Click submit Once you have submitted a case, you can edit the page like any other wiki page Proofread the page after submitting your summary Below you

review against non-final judgments or judicial acts of any nature which cannot be appealed against by any other means, and in the case of which the legal proceedings

municipality's transfer basis, any changes to the instructions and data processing agreement with Google, as well as a review of any supplementary measures that

management panels. The Municipality was originally unaware that students could use any add-ons to the core programs in the G-suite. As such, it had not carried out

of the data" means, for example, e-mails and database extracts, including any free text fields, which contain personal data. The right to a copy of the

neither at children, nor any other special category of registrants and visitors to the Website needs do not enter any age, or any other personal data that

users in primary and secondary schools, Google does not use any user personal information (or any information associated with a Google Workspace for Education