Search results
From GDPRhub
- indirectly, in particular by reference to an identifier such as a name, an identity number, location data, an online identifier or to one or more factors23 KB (3,737 words) - 10:30, 7 June 2023
- directly or indirectly, in particular by an identifier, such as a name, an identification number, data location, an online identifier or one or more elements26 KB (3,971 words) - 13:26, 13 December 2023
- not able to provide such data following an access request. A complainant, a previous worker of Amazon Spain, made an access request to Amazon in order to25 KB (3,791 words) - 14:47, 13 December 2023
- directly or indirectly, in particular by an identifier, such as a name, an identification number, location, an online identifier or one or more elements26 KB (3,881 words) - 13:35, 13 December 2023
- guidelines) and not the acceptance of work under an agency agreement within the meaning of the Law of Obligations Act.An impact assessment/study is not, by its nature24 KB (3,822 words) - 10:29, 13 December 2023
- directly or indirectly, in particular by an identifier such as a name, identi- fication number, location data, an online identifier or one or more elements26 KB (3,820 words) - 16:22, 6 December 2023
- must be sufficiently precise to be invoked by an individual and by the national courts [and imposes] an unconditional obligation. ” 4 CJEU judgment of82 KB (12,100 words) - 17:01, 12 December 2023
- Furthermore, the evaluations are only displayed when an higher amount evaluations are collected. As an additional safeguard, all students are verified via30 KB (4,834 words) - 13:14, 10 November 2021
- carried out by an optician or an optician or ophthalmologist. According to the answer, many customers do not seem to know that dealing with an optician is28 KB (4,501 words) - 13:07, 3 March 2024
- downloads the application form via the website of the embassy or BZ. An appointment for an intake at the consulate can be made be on the embassy's website via179 KB (22,957 words) - 17:07, 12 December 2023
- that was available to the creditors came from the surrender of an insurance policy and (for an amount of € 10,757) from a son of [applicants] et al. would35 KB (5,805 words) - 10:04, 14 December 2023
- exclusively at its own expense. It therefore struck down SABAM's claim for such an injunction to be issued against Netlog. SABAM is a management company which8 KB (1,082 words) - 13:09, 1 June 2023
- of an adopted child. An applicant applied to the Vilnius City Administration (hereinafter - the Administration) with regards to the education of an adopted8 KB (1,065 words) - 09:19, 17 November 2023
- burden of proof. It is therefore clear that an expectation of privacy arising from contract (more specifically an employment contract) has to be expressly7 KB (880 words) - 11:54, 12 January 2022
- the law if (i) there is an infringement of a subjective right, (ii) an act or omission is in breach of a statutory duty or (iii) an act or omission is in40 KB (6,777 words) - 16:28, 15 March 2022
- claimed, from the email address: ***EMAIL.1 sent an email email to the SGT and General Directorates, in which an Excel sheet was attached where you could see45 KB (6,998 words) - 12:58, 13 December 2023
- Adherence to an approved code of conduct within the meaning of Article 40 or to a certification mechanism approved under Article 42 may serve as an element39 KB (6,720 words) - 14:22, 13 December 2023
- recidivism to be an aggravating circumstance. Se / on el / e, / 'the absence of an aggravating circumstance does not mean the existence of an aggravating circumstance51 KB (7,792 words) - 11:43, 24 January 2022
- travel services to Russia offered on the website, and an offer for a group trip is requested by sending an e-mail to the registrar. Visa types other than group56 KB (8,980 words) - 08:47, 4 March 2024
- of […] euros in 2015. 5. During the summer of 2015, during an internal research project on an anti-fraud mechanism, the company reused personal data contained56 KB (9,069 words) - 17:02, 6 December 2023
- indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors110 KB (18,000 words) - 08:01, 5 June 2023
- although Member States are in principle free to fix an appropriate fee for bringing an appeal before an administrative authority, that fee may not be set91 KB (15,371 words) - 15:11, 5 October 2021
- October 2019, - an internal audit subcontracted to an audit firm covering organizational aspects, - an external audit carried out by an audit firm, in order81 KB (11,895 words) - 16:58, 6 December 2023
- carried out an online control mission on the "discord.com" website and on the DISCORD mobile application on 17 November 2020. 8. On 29 December 2020, an off-site59 KB (9,566 words) - 17:03, 6 December 2023
- personal information could reach an unlimited number of viewers. Dragefossen had operating revenues of around NOK 113 million and an annual profit of approx. NOK48 KB (7,804 words) - 18:49, 5 March 2022
- legislator as an alternative to the judicial procedure (see articles 77 to 79 of the GDMP). The lodging of a complaint should remain an easy step for data52 KB (8,603 words) - 16:55, 12 December 2023
- PT and SK (Kancelaria [...]), an administrative fine, the President of the Office for Personal Data Protection, declaring an infringement by the Chief National51 KB (8,322 words) - 09:51, 17 November 2023
- indirectly, in particular by means of an identifier, such as a name, an identification number, data from location, an online identifier or one or more elements43 KB (7,001 words) - 13:56, 13 December 2023
- national legislation. The DPA conducted an audit of the IT University of Copenhagen (ITU) and their use of an online proctoring service for one of their40 KB (6,369 words) - 16:39, 6 December 2023
- number of persons so that the information was accessed by sending an e-mail (i.e. an automated process). 19. In this sense, it is clear that within the39 KB (6,247 words) - 09:14, 15 November 2023
- there was an error in the delivery and that several letters to a couple of clients were confused. With the same date "Client indicates that an unknown person37 KB (5,995 words) - 13:58, 13 December 2023
- as "personal data": any information about an identified or identifiable natural person ("data subject"); An identifiable natural person shall be considered34 KB (5,358 words) - 13:16, 13 December 2023
- DPA (AEPD) against a university where they had had different roles, ("an employee, an employee with disciplinary proceedings, undergraduate student, master's29 KB (4,607 words) - 13:38, 13 December 2023
- Administration Act states: When it is stipulated by law that an administrative sanction may be imposed on an enterprise, the sanction can be imposed even if no individual28 KB (4,155 words) - 18:57, 5 March 2022
- proportionality assessment or an adequate weighing of interests. Therefore, the Greek DPA held that the processor acted as an independent controller within25 KB (3,943 words) - 14:32, 28 September 2022
- I. Facts [2] The defendant holds a business licence as an address publisher and was active as an address trader for ten years with the aim of enabling its23 KB (3,551 words) - 09:54, 10 September 2021
- Televisive Italian S.p.A. (RTI) and prohibited the broadcasting of an interview made by “Le Iene” (an Italian TV program) reporters, which infringed the Italian24 KB (3,667 words) - 15:53, 6 December 2023
- imposition of an administrative fine and an injunction to appoint a data protection officer against the municipality. A. On the imposition of an administrative22 KB (3,384 words) - 13:25, 24 January 2024
- Article 15(1) GDPR, but instead introduces an independent provision. The wording of Article 15(3) creates an obligation on the controller to provide the21 KB (3,450 words) - 10:33, 8 February 2022
- and organisational measures to ensure an adequate level of security. A company called Gureak Lanean suffered an attempt of hacking of their servers. The21 KB (3,039 words) - 13:39, 13 December 2023
- Italy held that when an individuals is asked to consent to the processing of their personal data by an algorithm in order to reach an automated decision21 KB (3,076 words) - 12:50, 16 September 2021
- by Article 6(1) GDPR, after hiring a handwriting expert to determine that an alleged signature was fake. The Bulgarian DPA examined a complaint lodged18 KB (2,987 words) - 16:49, 6 December 2023
- The data protection commissioner's office requested an explanation from the data controller with an explanation request dated July 4, 2023. On 10 August20 KB (2,859 words) - 13:11, 13 March 2024
- rule incorrectly or makes an incorrect assessment of the facts, this could result in an incorrect decision. If NAV has used an incorrect understanding of18 KB (2,845 words) - 10:07, 17 November 2023
- Nordic has stated that an order confirmation by mail is not as good documentation of a contract as an audio recording, since an order confirmation, for18 KB (2,667 words) - 16:29, 6 December 2023
- punishable by a fine of 20,000,000 euros as maximum or, in the case of an enterprise, an amount equivalent to 4% as maximum of the total annual overall turnover17 KB (2,620 words) - 14:43, 13 December 2023
- July 2019. Again, on 17 July 2019, NRA requested an all-round audit of its information systems by an independent external organization. NRA also developed13 KB (1,761 words) - 09:58, 14 December 2023
- wanted to book accommodation in an hotel, the controller, which offered three options to do so on its website: through an external service provider, through12 KB (1,634 words) - 17:02, 6 November 2023
- Protection Authority (Datatilsynet) issued a reprimand concerning the use of an acquired development and testing environment without implementing the appropriate14 KB (1,696 words) - 16:30, 6 December 2023
- management platform’ (CMP), which is an interface that appears when a data subject first navigates to a websites or uses an application for the first time.6 KB (675 words) - 09:55, 14 December 2023
- German Supreme Court (BGH - VI ZR 60/21), the court came to an opposite conclusion that an online platform collecting and publishing personal data of doctors77 KB (11,604 words) - 08:55, 29 June 2023
- a company had obtained access to an employee's emails. In the first case, the company had accessed her inbox due to an acute situation where they needed5 KB (608 words) - 18:57, 5 March 2022
- fines Vodafone €10,000 for transferring personal data from their customers to an advertising company without prior consent. After requesting the provision5 KB (578 words) - 05:32, 26 April 2023
- The Portuguese DPA considered that an organisation is the controller of personal data when employing the services of a direct marketing company to promote5 KB (505 words) - 16:55, 6 December 2023
- addresses in the "To" section instead of the "BBC" section while sending an email. At an unspecified time, the controller, a Romanian water supplier, incurred4 KB (471 words) - 15:15, 13 December 2023
- In October 2020, the Polish DPA received an anonymous tip informing about this incident. The DPA started an investigation and requested information from105 KB (17,237 words) - 09:22, 10 May 2023
- that CP&A maintained an online register, containing data on the cause of absenteeism in its employees. In response, it launched an own volition investigation48 KB (7,461 words) - 17:04, 12 December 2023
- data as follows: 2 «any information about an identified or identifiable natural person (« the registered »); An identifiable natural person is a person who45 KB (6,973 words) - 05:12, 15 September 2022
- associated an email address and/or phone number with a business account (whether as a mandatory requirement of switching prior to September 2019, or on an optional276 KB (38,206 words) - 09:46, 20 January 2023
- In 2019, after conducting an internal risk analysis and a Data Protection Impact Assessment (DPIA) the hospital introduced an encryption solution for secure47 KB (5,207 words) - 18:51, 21 March 2022
- CI Plus module as an alternative to a loan receiver (quasi an adapter that replaces the zapping receiver and can be inserted into an existing receiver200 KB (33,233 words) - 09:49, 14 December 2023
- controller applies for an amendment to this decision. The Deputy Data Protection Commissioner also gives the data controller an order in accordance with31 KB (4,693 words) - 11:50, 6 March 2024
- information. That is not an improper purpose. Court can deal with abuse of process if shown If there is an abuse in seeking a remedy for an ulterior purpose,89 KB (14,909 words) - 08:39, 22 February 2022
- the same results. An automated message informing clients that the account was no longer functioning, for instance, would have been an adequate solution87 KB (14,525 words) - 15:45, 6 December 2023
- AP has started an official investigation. This decision covers the period from 2012 to enwith2018. 1.2Process flow On 4 September 2018, an AP supervisor106 KB (14,502 words) - 17:09, 12 December 2023
- cf. Article 24. An employee in a municipal health care center had access to highly sensitive personal data (image files) through an incorrectly configured30 KB (4,302 words) - 18:53, 5 March 2022
- this is whether it is an individual case or a system-wide problem weave. If, in the case of an individual application, there is an indication that it is27 KB (4,279 words) - 10:12, 17 November 2023
- "personal data": any information about an identified or identifiable natural person ("the interested party"); an identifiable natural person shall be considered28 KB (4,527 words) - 12:35, 13 December 2023
- The EDPS found, after the CJEU requested for an authorisation of contractual clauses under Article 48(3)(a) of the EU GDPR, that no data transfers took73 KB (9,347 words) - 13:28, 26 July 2023
- followed such an approach in the assessment of fines based on the fine concept of the Data Protection Conference of 19.10.2019. Such an assessment method58 KB (9,577 words) - 08:06, 16 September 2021
- ordered an employer to delete the HR evaluation data on its employees. The decision comes after a complaint filed by an employee concerning an access request85 KB (13,724 words) - 16:52, 12 December 2023
- courtyards or the vicinity of commercial buildings and the area in front of an ATM, where an individual could not expect privacy in the absolute sense. Thus, the24 KB (3,757 words) - 16:27, 31 October 2023
- submitted a complaint to the AEPD stating that the defendant had sent an email containing an accusation of attempted fraud, letter of dismissal, and severance25 KB (3,670 words) - 14:28, 13 December 2023
- and to make an alternative available if a student is unable or unwilling to work with proctoring, without this leading to study delay. 2.8 An internal memo53 KB (8,177 words) - 12:30, 4 October 2021
- also seeks an amendment of the contested judgment, but in the sense of a complete dismissal of the action. In the alternative, it is seeking an application54 KB (7,916 words) - 12:06, 9 May 2022
- committed an infringement and the Authority considers that a fine is justified, the Authority should note that the Applicant has committed an infringement48 KB (7,727 words) - 10:11, 17 November 2023
- GDPR. The Bank launched an internal investigation and confirmed the committal of the violation, which it attributed to an error of an employee of its local52 KB (8,460 words) - 10:54, 10 January 2024
- Following an audit, the Luxembourg DPA (CNPD) imposed a fine of €18,700 on a company because of four breaches relating to the role and position of its56 KB (8,326 words) - 16:57, 6 December 2023
- with INDECEMI and received an email with the details of another person who was also in the claim process, who, in turn, received an email with the data of24 KB (3,512 words) - 10:43, 13 December 2023
- the complainant's personal data in an online article) was carried out for journalistic purposes. As the complainant is an former politician and the article21 KB (3,266 words) - 13:51, 12 May 2023
- grows day by day — subscribe to GDPRtoday to get a weekly update! GDPRhub is an initiative by noyb.eu, and made possible by the contributions of hundreds6 KB (277 words) - 12:46, 10 April 2024
- indirectly, in particular by reference to an identifier, such as a name, an identification number, localisation data, an online identifier or one or more factors44 KB (6,943 words) - 13:49, 13 December 2023
- indirectly, in particular by means of an identifier, such as a name an identification number, location data, an online identifier or one or more elements19 KB (2,862 words) - 14:43, 13 December 2023
- that a delivery address is an absolute necessity for the delivery of goods to the customers. Nemlig, does not detect if an address is secret, as it is21 KB (2,901 words) - 16:37, 6 December 2023
- the correct manner, with an attorney at law. The fact that an IND employee was also present at the hearing, who also spoke - as an informant - does not, contrary20 KB (3,086 words) - 16:15, 10 March 2022
- combination with standardized icons that allow provide an easily visible, intelligible and clearly readable form an adequate overview of the planned treatment. The21 KB (2,946 words) - 14:40, 13 December 2023
- thus an intentional infringement and both subjective and objective conditions for impose an infringement fee is fulfilled. Assessment of whether an infringement91 KB (14,440 words) - 10:06, 17 November 2023
- assertion that the application of the legal basis justified an interest in in the present case, an assessment in concreto of all the relevant factual elements84 KB (14,035 words) - 16:56, 12 December 2023
- had been opened based on an administrative act that did not comply with the legal requirements. This ruling is the result by an appeal of Rossel & Cie,7 KB (681 words) - 10:43, 15 January 2024
- measures which effectively prevent or at the very least seriously discourage an internet user, when conducting a search from within the EU on the basis of6 KB (747 words) - 13:42, 11 August 2022
- March to [...] April 2020, with varying frequency, to an individual address e-mail address of an employee of the Company These lists included only administrative63 KB (10,088 words) - 09:52, 17 November 2023
- decision that there is: - an infringement of Article 5 (1) a), b) and c) and (2) of the GDPR and Article 24 (1) of the GDPR; and - an infringement of article43 KB (6,274 words) - 08:57, 29 June 2023
- decision on an administrative remedy may be suspended as a precautionary measure if the person concerned indicates his intention to bring an action. If17 KB (2,739 words) - 14:31, 13 December 2023
- seems appropriate to assume an obligation to provide information about recipients in any case, but only to accept such an obligation with regard to the19 KB (2,825 words) - 09:42, 26 November 2021
- implemented such an arrangement. To begin with, the DPA pointed out that only requesting a name and personal identity code when booking an appointment online17 KB (2,339 words) - 13:39, 12 January 2024
- between banks, an advisory was provided containing information about the payer, including information on his address. The system did not make an assessment16 KB (2,399 words) - 16:34, 6 December 2023
- indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier or one or more factors17 KB (2,633 words) - 14:28, 13 December 2023
- credit registration. With an A3 coding, it is registered whether it concerns a write-off or a remission. After all, an A3 coding with an end date shows that56 KB (9,287 words) - 16:00, 26 January 2022
- identified, the GP proposed to the patients, at the first contact, or with an active recall, an individual assistance plan (PAI); - until 2018, the GP only communicated55 KB (8,833 words) - 15:54, 6 December 2023
- Metropolitan Court in an administrative lawsuit can be challenged. The emergency does not affect the time limit for bringing an action. The application58 KB (9,071 words) - 10:12, 17 November 2023