Search results
From GDPRhub
- background. Check the DPA page to find the code. DPAlogo=logoIE.png The DPA logo is always "logo" + Country Code + ".png". For example the Austrian DPA logo is "logoAT34 KB (5,924 words) - 18:14, 20 April 2021
- Court of Appeal of Brussels - 2022/AR/556 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)have followed the instructions of the DPA if the DPA had taken a clear position regarding the legality of the controller's processing. The controller had83 KB (13,694 words) - 09:53, 14 December 2023
- cooperated with the DPA. Complaint 3: Polish data subject The DPA confirmed that the account of the data subject had been deleted, so the breach was eliminated42 KB (5,838 words) - 10:27, 13 December 2023
- compatibility of Section 31 of the BDSG with Article 22 of the GDPR, because the German legislator only regulates the "use" of the "probability value", but52 KB (8,534 words) - 12:58, 15 December 2021
- APD/GBA (Belgium) - 19/2021 (category Article 21(2) GDPR) (section Mandatory quasi automatic acceptation of sharing of information through cookies)understand; 2. The presence of erroneous information; 3. The use of techniques that may have an impact on the choices of the data subject including the granting10 KB (1,290 words) - 16:55, 12 December 2023
- Personvernnemnda (Norway) - 2021-18 (20/02059) (section English Machine Translation of the Decision)supported the rejection of the erasure request. First, the information was of public interest, especially due to the serious nature of the data subject's crimes36 KB (5,859 words) - 06:40, 6 July 2022
- HDPA (Greece) - 22/2023 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)facilitate the exercise of the rights of the data subjects and to satisfy the exercised rights within the deadlines provided for in article 12 par. 3 of the GDPR5 KB (616 words) - 09:37, 24 October 2023
- APD/GBA (Belgium) - 135/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)place of business of the controller was established, would become the DPA including for complaints against the controller, after the DPA in the UK had39 KB (5,674 words) - 08:57, 29 June 2023
- correctness of the data must be assessed in light of the processing purposes. As the purpose of the bank is to administer the customer relationship with the complainant26 KB (4,150 words) - 16:14, 6 December 2023
- AP (The Netherlands) - 09.04.2021 (category Article 14(3) GDPR) (section English Machine Translation of the Decision)determining the amount of the fine. In Annex 2, the infringement of Article 12(1) of the GDPR is classified into category III, for which the penalty range12 KB (1,616 words) - 17:08, 12 December 2023
- act without hearing the objections of the participant in the proceeding. According to the appellant, the DPA violated the principle of definition when issuing28 KB (4,474 words) - 10:31, 13 December 2023
- APD/GBA (Belgium) - 137/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)on the basis of the complaint submitted by the complainant, in the context of Decision 137/2021 - 3/5 1 the ‘procedure prior to the decision on the merits’14 KB (1,946 words) - 08:50, 29 June 2023
- AKI (Estonia) - 2.1.-3/19/4304 (category Article 15(3) GDPR) (section English Machine Translation of the Decision)individual II to the Board of the EPLÜ on individual I of shooting sportsman. 2) Minutes of the meeting of the Board of the EPLÜ, where the Board of the EPLU discussed13 KB (2,032 words) - 10:30, 13 December 2023
- ANSPDCP (Romania) - 24.04.2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)Consequently, the data subject filed a complaint with the Romanian DPA, prompting the DPA to investigate the matter. The DPA held that the controller's6 KB (707 words) - 15:15, 13 December 2023
- IMY (Sweden) - DI-2020-10518 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)Article 15 of the GDPR? The DPA considered that Klarna failed to process the request within the timeframe required by Article 12(3) and without the required18 KB (2,003 words) - 15:22, 6 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 6652/154/19 (category Article 17(3)(b) GDPR) (section English Machine Translation of the Decision)filed at the very end of the statute of limitations. On the basis of the information provided by the controller, the DPA considered that the controller19 KB (2,951 words) - 12:30, 23 April 2024
- CNIL (France) - SAN-2020-016 (category Article 2(2) GDPR) (section On the failure to obtain the consent of the person concerned by a direct marketing operation by means of electronic mail)decision on the following grievances : At the time of the audit, the manager of the company indicated to the CNIL that the operational activities of the company12 KB (1,602 words) - 17:10, 6 December 2023
- HDPA (Greece) - 20/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)that the DPA violated (1) the principle of proportionality and (2) the criteria for the imposition and assessment of fines for violations of the GDPR by16 KB (2,374 words) - 11:46, 18 August 2022
- Cypriot DPA found that the publication of the photographs of three (3) of the five (5) complainants in three (3) of the four (4) publications exceeded the principle31 KB (4,973 words) - 16:50, 6 December 2023
- Court of Appeal of Brussels - 2020/AR/1111 (category Article 3(2) GDPR) (section English Machine Translation of the Decision)cases, the Belgian DPA decided that Google Belgium is an establishment of Google LLC , triggering the applicability of the GDPR under article 3.1. Moreover37 KB (5,919 words) - 08:54, 20 August 2021
- return the CD. Not satisfied with this solution, the data subject filed a complaint with the Greek DPA. The Hellenic DPA underlined that the right of access9 KB (1,251 words) - 12:15, 8 May 2023
- APD/GBA (Belgium) - 140/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)complainant, the surname of the complainant and his daughter, the domicile details of the complainant, the e-mail address of the complainant, the domicile details17 KB (2,477 words) - 08:51, 29 June 2023
- NAIH (Hungary) - NAIH/2020/5553 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)5. In view of the above, the Applicant has applied to the Authority with the rights of the Applicant concerned and the conviction of the controller, and27 KB (4,279 words) - 10:12, 17 November 2023
- Commissioner (Cyprus) - 11.17.001.009.232 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)com along with the personal email of one of the employees of the German subsidiary. c. With the deletion of said data the complainant did not have access17 KB (2,515 words) - 11:17, 6 February 2024
- APD/GBA (Belgium) - 11/2024 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)relating to the protection of the processing of personal data. 11. In application of article 33, § 1 of the LCA, the Litigation Chamber is the body of administrative26 KB (3,856 words) - 08:51, 19 March 2024
- contradict the legal idea of § 3(2) InsoBekV. 2. As long as the legislator has not adopted a different regulation for credit agencies regarding the storage51 KB (8,215 words) - 09:55, 13 May 2022
- HDPA (Greece) - 52/2021 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)par. 2 and 4 of the GCP in combination with article 28 par. 3, c. He also imposed on the person in charge of processing ZENITH, the sanction of the reprimand8 KB (861 words) - 10:00, 22 December 2021
- Garante per la protezione dei dati personali (Italy) - 9440000 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)initiation of the procedure for the adoption of the measures referred to in art. 58, paragraph 5, of the Code. 2, of the Regulations, concerning the alleged violations24 KB (3,852 words) - 15:50, 6 December 2023
- AZOP (Croatia) - Decision 30-12-2021 (redirect from AZOP (Croatia) - Decision of 30 December 2021) (section English Machine Translation of the Decision)rights of others, prevention of disclosure of confidential information or for the purpose of preserving authority (Article 3, paragraph 3 of the Media Act)16 KB (2,411 words) - 15:44, 30 October 2023
- First-tier Tribunal - Miles v Information Commissioner (section English Machine Translation of the Decision)progress on the complaint, or of the outcome of the complaint, before the end of the period of 3 months beginning when the Commissioner received the complaint12 KB (1,722 words) - 14:39, 21 December 2023
- APD/GBA (Belgium) - 20/2023 (category Article 2(4) GDPR) (section English Machine Translation of the Decision)14. In the event of further processing of the case on the merits, pursuant to Articles 98, 2° and 3° juncto article 99 of the LCA, the Litigation Chamber14 KB (1,883 words) - 16:59, 20 March 2023
- violation of the principle of confidentiality. Second, the DPA found a violation of Article 32 GDPR. The DPA held Article 32 GDPR requires the controller58 KB (9,301 words) - 12:39, 13 December 2023
- override the rights and freedoms of the data subjects. In the case at hand, the DPA held that the processing of personal data for the sole purpose of warning23 KB (3,657 words) - 11:23, 17 April 2024
- Tietosuojavaltuutetun toimisto (Finland) - 3843/163/20 (category Article 58(2)(f) GDPR) (section English Machine Translation of the Decision)accordance with Section 3 of the Working Life Data Protection Act. 2. The processing of personal data related to the location of the data controller's employees39 KB (6,038 words) - 17:39, 29 April 2024
- article 58.2 of the RGPD recognizes to each control authority, and as established in articles 47 and 48 of the LOPDGDD, the Director of the Spanish Data31 KB (4,738 words) - 14:39, 13 December 2023
- Commissioner (Cyprus) - 11.17.001.008.222 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)24(b) of National Law 125(I)/2018, the DPA came to the following decision: There was an infringement of Article 12(3) GDPR because of the lack of a timely16 KB (2,438 words) - 09:07, 9 June 2023
- DSB (Austria) - 2022-0.296.352 (category Article 45(3) GDPR) (section English Machine Translation of the Decision)Findings of Facts The course of the procedure summarized under point A., together with the submissions of the applicant documented in the files, form the basis10 KB (1,335 words) - 13:39, 12 May 2023
- AP (The Netherlands) - 7.04.2022 (category Article 35(2) GDPR) (section English Machine Translation of the Decision)within the meaning of article 4, opening words under 1, 2 and 15, of the AVG, article 10 of the AVG and article 1, preamble below and b, of the Wb and49 KB (7,201 words) - 17:06, 12 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - TSV/2/2018 (category Article 17(3)(e) GDPR) (section English Machine Translation of the Decision)change the way the case is resolved. The registrar himself has taken the initiative to correct the error. The matter can be resolved on the basis of the applicable25 KB (3,865 words) - 12:07, 29 May 2024
- APD/GBA (Belgium) - 138/2022 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)complaints have the same object. 2. The subject of the complaints concerns the installation of a surveillance camera by the defendant, the complainants'43 KB (6,274 words) - 08:57, 29 June 2023
- APD/GBA (Belgium) - 42/2020 (category Article 2(1) GDPR) (section English Machine Translation of the Decision)Chamber received the conclusion response of the complainant, limiting the subject of the complaint to the sharing of the picture via email. On 30 October30 KB (4,871 words) - 16:58, 12 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - TSV/35/2022 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)for the marketing of courses offered by a third party without the consent of its students. The DPA asked the controller to explain the purpose of the personal20 KB (2,859 words) - 13:11, 13 March 2024
- CNPD (Luxembourg) - Délibération n° 41FR/2021 (category Article 38(3) GDPR) (section English Machine Translation of the Decision)GDPR, the DPA noted that it had been found that the public website of the controller did not provide the direct contact details of the DPO. In case of questions56 KB (8,326 words) - 16:57, 6 December 2023
- APD/GBA (Belgium) - XX/2021 (category Article 58(2)(c) GDPR) (section English Machine Translation of the Decision)doing so, the controller acted in violation of Article 17.1 of the GDPR. 5. The Litigation Chamber is of the opinion that, on the basis of the above analysis17 KB (2,189 words) - 12:34, 3 August 2022
- APD/GBA (Belgium) - 136/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)determination, with the consent of the the complainant converted the request for mediation on 8 August 2022 into a complaint against the controller. 2. The subject19 KB (2,700 words) - 08:49, 29 June 2023
- Persónuvernd - 2020051604 (category Article 2 GDPR) (section English Machine Translation of the Decision)information within the meaning of Paragraph 3. Article 3 Act no. 90/2018. 2. Answers to questions from the Directorate of Labor 2.1. First of all, the Directorate13 KB (1,930 words) - 09:33, 13 May 2022
- throughout the organisation. In December 2020, the Norwegian DPA initiated an audit of the Directorate of Norwegian Correctional Service (DCS, the controller)16 KB (2,010 words) - 14:32, 8 November 2022
- APD/GBA (Belgium) - 157/2023 (category Article 21(2) GDPR) (section English Machine Translation of the Decision)marketing and protection of personal data on the one hand and the proposal of regulation of the European Parliament and of the Council of 18 September 2019 on17 KB (2,723 words) - 16:34, 26 January 2024
- Court of Appeal of Brussels - 2022/AR/953 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)therefore annulled the DPA decision and ordered the DPA to pay the costs of the proceedings. The court highligted several paragraphs of decision 103/20227 KB (681 words) - 10:43, 15 January 2024
- Datatilsynet (Denmark) - 2023-432-0016 (category Article 9(2)(a) GDPR) (section English Machine Translation of the Decision)December 2022, the DPA initiated an investigation against the Central Denmark Region (the controller). During the investigation, the DPA found that the Instagram46 KB (7,192 words) - 12:37, 19 December 2023
- sentence of the GDPR). The extension of the reporting requirement of Section 3(1) of the EpiG is also expedient for combating COVID-19, as the data material37 KB (5,745 words) - 13:53, 12 May 2023
- categories of personal data Article 9.2.a: Explicit consent Article 9.2.b: Execution of labor law obligations etc. Article 9.2.c: Protection of vital interests9 KB (1,168 words) - 15:30, 6 December 2023
- AZOP (Croatia) - Decision 04-05-2023 (redirect from AZOP (Croatia) - Decision of 4 May 2023 - debt collection agency) (category Article 28(3) GDPR) (section English Machine Translation of the Decision)Paragraph 2 of the General Data Protection Regulation. By not taking appropriate measures, there was a violation of the security of the personal data of all12 KB (1,626 words) - 15:22, 30 October 2023
- AEPD (Spain) - PS/00280/2022 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)framework of the provisions of article 118 of the Law 39/2015, of October 1, of the Common Administrative Procedure of the Public Administrations for the purpose30 KB (4,551 words) - 11:51, 9 February 2023
- ANSPDCP (Romania) - Fine to Dante Internațional SA (category Article 21(3) GDPR) (section English Machine Translation of the Decision)to his e-mail address of the commercial messages, within 3 working days from the communication of the minutes. At the same time, the operator was obliged4 KB (414 words) - 11:04, 6 February 2024
- APD/GBA (Belgium) - 136/2023 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal58 KB (9,184 words) - 16:49, 12 December 2023
- practically, cf. the Regulation on personal data processing § 2-7, and 3) send the DPA their internal controls documentation, cf. the Personal Data Act of 2000 §18 KB (2,525 words) - 08:44, 11 July 2022
- DSB (Austria) - 2020-0.349.984 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)disproportionate. In the light of above the DPA came to the conclusion that the legitimate interests of the respondent outweighed the fundamental rights and freedoms28 KB (4,228 words) - 14:00, 12 May 2023
- Thirdly, the controller failed to respond to the access request. The complaint was originally filed with the Berlin DPA, who referred the case to the Irish20 KB (3,069 words) - 18:48, 24 January 2023
- applicable; the identification of the person responsible for the treatment; the legitimation of data treatment; the time of conservation of the data; the possible15 KB (2,246 words) - 14:26, 13 December 2023
- Datatilsynet (Denmark) - 2020-32-1733 (category Article 17(3)(b) GDPR) (section English Machine Translation of the Decision)6(1)(e) of the GDPR and § 1(2) of the Act of Statistics Denmark and is not obliged to delete it in accordance with the Article 17(3)(b) of the GDPR. On16 KB (2,377 words) - 16:39, 6 December 2023
- act in the exercise of their judicial function; " Article 37.3 and 4 of the RGPD indicates on the designation of the DPD “When the responsible or the person14 KB (1,992 words) - 14:29, 13 December 2023
- Commissioner (Cyprus) - 11.17.001.010.007 (category Article 15(3) GDPR) (section English Machine Translation of the Decision)According to the DPC, the controller should have informed the data subjects more directly also given the nature of the breach and the categories of personal20 KB (3,082 words) - 13:42, 31 January 2024
- minutes. 2. The facts and the subject of the request 1. The defendant is a notary in Flanders. 2. The defendant, in the course of 2019, hired the plaintiff43 KB (6,670 words) - 16:58, 12 December 2023
- DVI (Latvia) - SIA “Lursoft IT” (category Article 6(3) GDPR) (section (2) Information on the "Register of Enterprises")in the legal provision. The DPA also held that Section 4 of the Law on the Register of Enterprises of the Republic of Latvia regulated the right of persons90 KB (14,351 words) - 16:10, 6 December 2023
- determines the purposes and manner of processing personal data -2-". 2. Regarding the issue of the use of video surveillance systems for the purpose of protecting13 KB (1,901 words) - 08:43, 9 November 2022
- ICO (UK) - Enforcement Notice and Warning Letter - Home Office (category Article 5(2) GDPR) (section English Machine Translation of the Decision)(“UK GDPR”). 2. Unless otherwise stated, references to “Articles” are to articles of UK GDPR, and “Sections” to sections of the DPA. 3. The Home Office129 KB (17,281 words) - 14:57, 10 April 2024
- Article 12(3) GDPR the response has to be the latest within 3 months. The DPA considered that it had no competence to decide on TDC A / S 'processing of position33 KB (5,177 words) - 16:23, 6 December 2023
- Norges Høyesterett - 2021-2403-A (category Article 9(2)(a) GDPR) (section English Machine Translation of the Decision)Thyness: Questions and background of the case (2) The case concerns the validity of the Privacy Board's decision of 21 January 2019 [PVN-2018-14] 1 item46 KB (7,024 words) - 06:18, 6 March 2022
- ICO (UK) - Chief Constable West Midlands Police (category Article 34(3) GDPR) (section English Machine Translation of the Decision)with Schedule 13(2)(c) of the Data Protection Act 2018 (DPA 2018) in respect of certain infringements of the DPA 2018. The reprimand 1.2 The Commissioner has18 KB (2,476 words) - 09:10, 14 May 2024
- Garante per la protezione dei dati personali (Italy) - 9440075 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)The Italian DPA has fined Regione Campania for the violation of art. 5 and 6 GDPR. The DPA held that the publication of personal information of two debtors27 KB (4,339 words) - 15:50, 6 December 2023
- request. The Spanish DPA underlined that the focus of the legal proceedings was the exercise of the right of access and the right of erasure of the data subject60 KB (9,630 words) - 12:34, 13 December 2023
- 33 (3) of the GDPR. The DPA assessed that the Zoo did not comply with Article 34(1) of the GDPR by failing to carry out an adequate assessment of the risks33 KB (5,347 words) - 16:39, 6 December 2023
- Court of Appeal of Brussels - 2021/AR/282 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)No 05/2021 of 22 January 2021 of the Disputes Chamber of the DATA PROTECTION AUTHORITY (hereinafter "DPA"). 2. The contested decision. The initially contested24 KB (3,393 words) - 09:25, 10 September 2021
- Tietosuojavaltuutetun toimisto (Finland) - 6629/163/21 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)facilitate the exercise of the right of access and to inform the data subjects of the possibility of obtaining a copy of their personal data free of charge21 KB (3,204 words) - 13:37, 12 January 2024
- sedeagpd.gob.es 2/5 application of the provisions of article 64 of Law 39/2015, of October 1, of the Common Administrative Procedure of Public Administrations15 KB (2,245 words) - 14:22, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9445324 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)letter c) and e), par. 2 and par. 3, letter b) of the Regulation and art. 2-ter, paragraphs 1 and 3, of the Code; By note of the XX, the Comprehensive Institute19 KB (2,989 words) - 15:51, 6 December 2023
- Rules of DPA, a copy of the file may be requested by the parties. If one of the parties wishes to use of the possibility of consulting the file, the latter18 KB (2,611 words) - 12:45, 16 June 2023
- Tietosuojavaltuutetun toimisto (Finland) - 9885/157/19 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)according to Section 200(3) of the Finnish Act on Electronic Communication Services. The DPA emphasised that the requirement of Article 12(2) GDPR should also21 KB (3,097 words) - 13:40, 12 January 2024
- Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 4) (category Article 28(3)(a) GDPR) (section English Machine Translation of the Decision)section 41, subsection of the Data Protection Act. 2, No. 4. If the Municipality of Helsingør meets the conditions of the ban of 18 August 2022 before 525 KB (3,660 words) - 08:42, 14 September 2022
- within the meaning of article 63, 1° of the LCA. For the rest, the inspection report does not include no finding of any violation of the GDPR on the part24 KB (3,525 words) - 15:29, 26 January 2024
- Datatilsynet (Denmark) - 2020-31-4131 (category Article 2(2)(c) GDPR) (section English Machine Translation of the Decision)characteristics, hence the processing of personal data is not covered by the GDPR, according to Article 2(2)(c) of the GDPR. However, the DPA concluded that Orienteringsret24 KB (3,651 words) - 16:38, 6 December 2023
- Court of Appeal of Brussels - 2020/AR/813 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)stated the DPA violated the principles of proper administration. The DPA orally mentioned additional violations to the controller at the hearing. The DPA85 KB (12,340 words) - 15:30, 19 August 2022
- ICO - Monetary Penalty on Ticketmaster UK Limited (redirect from ICO - The ICO - Monetary Penality to Ticketmaster UK Limited) (category Article 4(2) GDPR) (section English Machine Translation of the Decision)Member State.2 2.2 The GDPR was developed and enacted in the context of challenges to the protection of personal data posed by, in particular: a. the substantial130 KB (21,195 words) - 13:52, 25 April 2021
- IMY (Sweden) - DI-2020-10561 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of Telephone: natural persons with regard to the processing of personal17 KB (1,940 words) - 15:23, 6 December 2023
- CNIL (France) - SAN-2022-022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)GPDR) The DPA also determined a violation of Article 33 GDPR. The documentation provided by the controller did not allow the DPA to assess of all the measures59 KB (9,623 words) - 17:03, 6 December 2023
- APD/GBA (Belgium) - 22/2020 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data35 KB (5,526 words) - 16:56, 12 December 2023
- Copy of claim before the Consumer Service of the Provincial Directorate of Ciudad Real of the Ministry of Health dated 05/10/2019. Copy of the Vodafone32 KB (4,831 words) - 14:31, 13 December 2023
- Ordinance. The deadline for implementing the orders is stated in section 7 of the decision. 3. Details of the facts of the case In your reply of 10 September28 KB (4,158 words) - 16:00, 29 May 2024
- months after the day of application of the GDPR), the DPA found that the controller had violated Article 37(7) GDPR. Because the DPO of the controller was26 KB (3,862 words) - 17:41, 25 June 2022
- VDAI (Lithuania) - VDAI vs UAB Prime Leasing (category Article 83(2)(a) GDPR) (section English Machine Translation of the Decision)loss of the DB file, since it was not even aware of the existence of this DB in the first place (!). The DPA considered the lack of organizational and technical37 KB (4,319 words) - 09:20, 17 November 2023
- LfDI (Baden-Württemberg) - 0523.1-2/3 (category Article 5(2) GDPR) (section Violation of Article 5(2) GDPR)transactions by the Board of Management was not relevant. The LfDI assumed negligence. For the assessment of the fine, the LfDI, which applied the fine framework8 KB (1,137 words) - 10:22, 17 November 2023
- part of Netcompany A / S 'development or testing of the system, nor in connection with Kombit A / S' follow-up on tests of the system. 2.2. Types of personal18 KB (2,710 words) - 16:34, 6 December 2023
- AEPD (Spain) - TD/00044/2021 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)allow for the satisfaction of the claims of the complaining party. Consequently, for the purposes provided for in article 64.2 of the LOPDGDD, the Director22 KB (3,465 words) - 13:30, 13 December 2023
- NAIH (Hungary) - NAIH-1091-10/2022 (NAIH-6936/2021) (category Article 5(2) GDPR) (section English Machine Translation of the Decision)Article 7 (1) of the GDPR and Article 5 (2) of the GDPR, as he could not to certify the processing of the personal data of the data subjects for the purpose69 KB (11,255 words) - 10:08, 17 November 2023
- end dates of the payment default; 2) the total amount of the payment default; and 3) the business sector from where the payment default arose. The Borrower22 KB (3,237 words) - 12:25, 17 June 2022
- Garante per la protezione dei dati personali (Italy) - 9788429 (section English Machine Translation of the Decision)transposition of Article 5(3) of the Directive. The violation of the Code constitutes a direct consequence of the violation of the Directive. The DPA issued a57 KB (9,084 words) - 15:11, 13 July 2022
- APD/GBA (Belgium) - 72/2020 (category Article 7(3) GDPR) (section English Machine Translation of the Decision)information of the data protection officer of the data controller, from the highest level of the Management of the Y hospital and the highest level of the human34 KB (5,677 words) - 17:00, 12 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 8979/162/21 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)personal data and where the controller reviews them. The DPA stated that the objective of the right of access is the opportunity of the data subject to stay19 KB (2,906 words) - 09:35, 4 March 2024
- information on the service contracted by the deceased. The DPA concluded that in case of doubts about the identity of the requesting party, the controller21 KB (3,290 words) - 10:50, 13 December 2023