Search results

superior, up to 4 % of the undertaking’s total worldwide annual turnover, is determined taking into account the type of violation (Article 83(4)(5) GDPR) as

Regulation 2016/679’, 4 May 2020 (Version 1.1), pp. 7-8 (available here). EDPB, ‘Guidelines 05/2020 on consent under Regulation 2016/679’, 4 May 2020 (Version

decisions from third-country courts and administrative authorities in the EU. An ex-territorial judicial order to transfer or disclose personal data outside of

'Guidelines 4/2019 on Article 25 Data Protection by Design and by Default', 20 October 2020 (Version 2.0), pp. 8-9 (available here). EDPB, 'Guidelines 4/2019

Information exchanged shall be used only for the purpose for which it was requested. 4. The requested supervisory authority shall not refuse to comply with the request

right to the protection of personal data pursuant to this Regulation. Recital 4: Balance Against Other Fundamental Rights The processing of personal data should

“including profiling based on those provisions.” Profiling is defined in Article 4(4) GDPR as a form of automated processing consisting of the use of personal

courts of the Member State where the supervisory authority is established. 4.   Where proceedings are brought against a decision of a supervisory authority

available to the data subject. Unlike other provisions such as Article 30(4) for the record of processing or Article 40(11) for the register of approved

in accordance with the examination procedure referred to in Article 93(2). 4. The Commission shall, on an ongoing basis, monitor developments in third countries

'necessity' (such as food or clothing) at any age (Ryder v Wombell [1868] LR 4 Ex Ch 32 D 165). Furthermore, minors will be deemed as bound to that contract

137), in the context of the powers provided for in articles, 4 par. 3 para. a' and 10 par. 4 of Regulation of the Authority's Operation (Government Gazette

with the Nos. Nos.C/EX/4278-6/07.11.2019 (following the C/EX/4278-4/01.11.2019 document) and C/EX/4278-7/07.11.2019 (following the W/EX/4278-5/01.11.2019

documents C/EX/1342-2/10-04-2019 (for the complaints under (b) and (c)), C/EX/2332-1/14-05-2019 (for the complaint under (b) and (c)) and C/EX/2332-1/14-05-2019

HELLENIC REPUBLIC OF DATA PROTECTION Athens, 29-06-2020 No, for example: C/EX/4512/29-06-2020 FA IN NO 18/2020 (Department) The Personal Data Protection

examination of this complaint, the Authority sent the complainant the number one.C/EX/3409-1/07-06-2019 document requesting his views on the complainants, taking

adopt the following measures. 4(c) and 8 of Law No. 4624/19 in conjunction with Art. 2 f GDPR, the power to issue 4 an ex officio interim order for immediate

version ex tunc. This implies that IAB Europe commits itself to nullity of the Inspectorate's report on the basis of the language legislation. 4. The GBA

examination of this complaint, the Authority sent the complainant the number one. C/EX/4904-1/09-08-2019 document, in which he asked for his views on the complainants

et aux libertés, so-called law "Informatique et Libertés". Directive 95/46/ex was implemented by the law n° 2004-801 du 6 août 2004 which modified the law

discharged as the title of his ex-spouse. He adds that the invoices issued by the respondent contain his details, but addressed to your ex-spouse. And, among other

the plaintiff and herself in the context of their relationship as ex-employee to ex-employee employer. 18. He also accuses it of violating the principles

AMPNI and EV HELLAS with the reference numbers C /EX / 8303 / 18-10-2018, C /EX / 8302 / 18-10-2018 and GI EX I 8301 / 18-10-2018 her documents, respectively

website controller qualifies as controller (Article 4(7) GDPR) and Google LLC as processor (Article 4(8) GDPR) for data processing in connection with Google

DPA denied a complaint regarding an e-mail sent from a businessman to his ex-wife, with a copy to the counselor of the school where their son studies,

the rights of data subjects by data subjects terminate the ex officio extended procedure for 4. The Authority finds that it has exceeded the administrative

Sections 3, 4, 6, 11, 12, 13, 16, 17, 21, 23-24. Section 4 (5), Section 5 (3) to (5), (7) and (8), Section 13 (2) § 23, § 25, 25 / G. § (3), (4) and (6),

Gazette A΄ 137), in the context of the powers provided for in articles 4 par. 3 and 10 par. 4 of the Regulation of Operation of the Authority (Government Gazette

example: As the claimant had not chosen to make her contact details ex-directory, the ex-partner could have easily searched the phone book to locate the claimant’s

therefore it cannot be considered a procedure initiated ex officio. Other offices they do not initiate ex officio proceedings upon request or based on a report

controller. Following these, the Authority with the no. prot. C/EX/ 861/05.04.22 and C/EX/860/05.04.22 calls respectively called EDOEAP and EDYTE SA. to

contacted the data subject's ex-wife regarding the matter. However, in the controller's communications to the data subject's ex-wife, the controller shared

organizational measures, since their appropriateness must be assessed ex ante and not ex post. In addition, the data retrieved through scraping - insofar as

examining the details of the file, the Authority with no. prot. C/EX/2999/23-11-2022 and C/EX/3004/23-11-2022 documents invited the aforementioned companies

Art. 4 No. 7 and 8 of the GDPR) as well as the certification body in the case of Art. 4(b) and the supervisory authority in the case of Art. 4(c) are

insured person (your ex-partner) and that, however, the loan discounts have been maintained. The claimant states that the brother of her ex-partner works in

telephone numbers… and…, respectively, the reference numbers G / EX / 5585- 1 / 18-08-2020 and G / EX / 5585-2 / 18-08-2020 documents respectively, requesting

residence addresses of the winners of the prize game on its website. Acting ex officio, the Croatian DPA requested a statement from the controller on the

resolved, without any response also. The Authority with the no. prot. G / EX / 6076-1 / 03-10-2019 document informed her CAREER for the complaint and asked

violate the law on personal data protection. The proceedings were initiated ex officio after the Ombudsman submitted a letter to the President of the UODO

respond even after the relevant reminder documents with no. prot. C/EX/276/12-01-2018 and C/EX/275/12-01-2018 respectively. Subsequently, the Authority sent

light of previous interactions with the controller, the NAIH initiated an ex officio proceeding to examine, amongst other things, the "data management

seeking a judicial remedy.’; 4. In accordance with the provisions of Article 58 (2) of the GDPR in conjunction with Article 15 (4) et seq. of Law Ν.4624/2019

subject are closely linked to data protection principles, the DPA concluded ex officio that the controller violated the principle of accuracy under Article

THE LAW 1. Because Article 2 para. 8 of Law 3051/2002 on 'Constitutionally 4 independent authorities, amendment and supplementation of the system recruitment

and the facts that are the subject of the complaint, the AEPD will proceed ex officio to open a new procedure Share your comments here! Share blogs or news

to the Covid-19 emergency. The Council of State requested, pursuant to art. 4 of Decree-Law no. 28/2020, the opinion of the DPA on a draft presidential decree

information on the action taken on his application. I. 3. Instructs the Applicant ex officio to review, within 15 days of the finalization of this decision, with

to exercise his rights,1 See point 2.1, page 14 to 15 Page 4 Decision on the merits 15/2021 - 4/32subsequent correspondence with the defendant, and the privacy

consent of the pupils' parents (legal guardians). According to Article 4(11) TYPE 4(11), 'the data subject's consent' shall mean the freely given, specific

court explains below why it comes to that conclusion. 4 The assessment of the appeal Jurisdiction 4.1 Because the request has an international character

defining the roles of the external companies involved in the processing, (4) without defining the storage times of the data collected and (5) without having

of Article 4(1) of the GDPR and additional information specifically defined in paragraph 2. Since the concept of personal data under Art 4(1) DPA is multifaceted

customer for this matters in point 4.3 and [6] can give individual consent, that X are forms r PAGE □1- □□□□ 1823325- □□□ 4-□□ 4□-□ 2- □1-� L _J,Court of Appeal

turnover of the last three financial years. These amounts: for 2017: €4,058,643,958 for 2018: €4,009,935,363 for 2019: €3,886,699,793 15. On 3 April 2020, the

without her consent, there was no reason. In response to the above document4 of DEWA X, the above Autonomous Directorate with no. prot. ... document pointed

against her ex partner as well as to having had an abortion. She was unaware that the phone call was recorded and later on forwarded to the ex partner and

ignored the decision of the supervisory authority, the DPA decided to initiate ex officio proceedings for imposing an administrative fine. The DPA found that

01-00002223628-0003-0011-01-01-� L _JCourt of appeal Brussels-2021/AR/282-p. 4 prior procedure was insufficiently informed about the exact allegations and/or

The Croatian DPA fined a car dealership approximately €4,000 for processing of personal data by a video surveillance system without prior notice. The Croatian

facts exposed. "I do not understand why the Complaint has been received at my ex-partner's house, NO I understand the reason for the Complaint, because the

Hague October 4, 2022, ECLI:NL:GHDHA:2022:2100, para. 3.1-3.13. 4 Conclusion 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 Exhibit 4 to the introductory

review and increasing the frequency of logging review. 3.4 OLVG's other views and the AP's response 3.4.1 Rights of the defence OLVG argued that the imposition

diseases, drug sensitivity or test finding (page 4). It is also recorded by the dentist study findings (page 4), records of those involved in pregnancy care

article 32 of the GDPR is typified in article 83.4.a) of the aforementioned GDPR in the following terms: "4. Violations of the following provisions will be

decisions dealing the question of whether the Article 15 activates in advance any "ex-ante right" of the data-subject to access his or her personal data and/or

in Decree-Law n.º 54/2019, of April 18, which reads, in n.º 4 of article 4.º, Following: "4- The responses to the 2021 Census questionnaires are kept by

amended) (hereinafter referred to as "Regulation 2016/679"), having conducted ex officio administrative proceedings on imposing an administrative fine on Smart

Police was responsible for a violation of Article 32 par.1(b) & (d) and par.(4) GDPR, as a result of the acts and/or omissions of the Police, whose member

empowers the board management of the DPA to issue a referral in order to open an ex officio investigation (Article 63(1) of the Law establishing the Belgian DPA)

Protection Regulation) (OJ EU L 119, 04.05.2016, p. 1, as amended), following an ex officio procedure initiated in the case of Vis Consulting Sp. z o.o. in liquidation

complained mada, by letter dated 12/11/20, made allegations to the initiation of ex- petitioner, whose content was already indicated in the resolution proposal

lawsuit for 3b (under 3b.) are already inadmissible. Claim 4 is admissible, but unfounded (under 4). Claim 5 is already inadmissible, but in any case also

initiated the disciplinary procedure ex officio (Article 63.1 LPCAP: ”The procedures of a sanctioning nature will begin always ex officio by agreement of the competent

rights. [4] The order is issued pursuant to Article 58 (2) of the Data Protection Regulation. 2nd The deadline for complying with the injunction is 4 weeks

000 HUF, ie seven hundred thousand HUF order to pay a data protection fine; 4. order the final decision of the Applicant and the Applicant's identification

2.) (hereinafter referred to as "Regulation 2016/679"), having conducted ex officio administrative proceedings concerning the imposition of an administrative

business user. Is not a kind as to barred the duty to notify the DPA office, an ex-post evaluation that drives to findings which did not constitute a breach

of article 65.4 of the LOPDGDD Law, by this Agency, said claim was transferred C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 4/60 to the claimed

processed in all its phases ex officio. II The image is a personal data The physical image of a person, according to article 4.1 of the GDPR, is data personnel

ROOM - GOYA 14 (MADRID) Phone: 914007258 Email: Team/User: MAD NIG: 28079 24 4 2022 0000131 1 JURISPRUDENCE Model: ANS105 JUDGMENT CCO COLLECTIVE CONFLICTS

compliance with the exercise of a proper local news right. It added that (4) the photograph was not a mug shot and did not show the data subject in any

as "Regulation 2016/679"), following an administrative procedure initiated ex officio to impose on Ms A. T. conducting business activity under the name

understood broadly (Hödl in Knyrim, DatKomm Art 4 DSGVO Rz 9; Eßer in Eßer/Kramer/von Lewinski, DSGVO-BDSG6 Art 4 DSGVO Rz 7). [16] 2.1 Therefore, even inner

refer to the Greek original for more details. Summary The Authority examined ex officio the compliance of the Ministry of Education and Religious Affairs

within a period of four weeks. Legal basis: Art. 4 Z 1, Z 2 and Z 11, Art. 6 Para. 1 lit. c, Art. 7 Para. 4, Art. 9, Art. 51 Para. 1, Art. 57 Para. f, Art

identification data of the parties be published directly. 3Ibid. Decision 57/2022 - 4/4 12. In accordance with its dismissal policy, the Disputes Chamber will refer

the legitimate aim pursued. 4. Where processing for a purpose other than that for which the personal data have been collected 4. Where processing for a purpose

which the personal data are intended and the legal basis of the processing; 4.5.2016 L 119/40 Official Journal of the European Union EN (d) where the processing

Article 4, introductory paragraph, and (17) of the AVG, in the EU during the period from 25 May 2018 to the present. The breach continues today. 4. Penalty

examination of the elements of the file, the Authority with no. prot.G/EX/3007/23-11-2022 and G/EX/3005/23-11-2022 documents invited the above-mentioned companies

Directive 01/2011 and Law 4624/2019, as well as the GDPR. According to Article 9(4) of Directive 01/2011, the transmission to third parties of data originating

initiative. 4. The Authority obliges the Data Controller to pay a data protection fine of HUF 1000000, ie HUF 1 million. The fine pursuant to point 4 shall be

this way across. However, on 4 February 2020, the database was no longer available in this way. The Authority's NAIH / 2020/66/4. By order no., he called for

amended) (hereinafter referred to as the "Regulation 2016/679"), after conducting ex officio administrative proceedings to impose an administrative fine on East

after consent was withdrawn. Following several compaints, the DPA launched an "ex officio" investigation. The controller (Client 1, Pitagorasz Oktatási Stúdió

Article 12(3) GDPR (the controller failed to answer within a month), Article 12(4) GDPR (The controller failed to provide a reason why it did not comply with

the context of the investigation of the complainants, sent the no. prot. G / EX / 2241 / 24.3.20 document for providing clarifications regarding the complaint

with article 4.1 of the RGPD, is data personal protection and their protection, therefore, is the object of said Regulation. In article 4.2 of the RGPD

Disputes Chamber. Decision 42/2022 - 4/5 therefore to be regarded as manifestly unfounded within the meaning of Article 57.4 of the GDPR. 12. Finally, and in