Search results

provide more detailed and specific information on an ex-post basis, compared to the often more generic ex-ante information under Articles 13 and 14 GDPR. In

Article 4(2) GDPR. In the context of Articles 13(2)(f) and 14(2)(g) GDPR, Mester comes to the same conclusion in Taeger,Gabel, DSGVO-BDSG-TTDSG, 4th edition

of the Italian Republic (see, Articles 142 and 156(3)(a) of the Codice). On 4 April 2019 the DPA adopted two different administrative regulations. The Regolamento

law; approval of processing for a substantial public interest pursuant to § 7(4) of the Data Protection Act and more. The Public Administration Act (in DK)

Finance. The funding for 2024 is €4,900,000. Historical numbers (based on the annual reports): 2022: €4,450,000 2021: €4,351,000 2020: €3,700,000 2019: €3

for public information, (3) the Sector for protection of personal data, and (4) the administrative-technical service. Opinions are signed by the Information

(like the correspondence with the controller) need to be attached. Under § 24(4) DSG complaints need to be filed one year from the time the complainant has

months period, regarding its complaint - whatever the means-. The CNIL can run ex officio procedures out of its own motion. Its powers are described under Article

12/2021 4/2020 23/2022 11/2021 3/2020 22/2022 10/2021 2/2020 21/2022 9/2021 1/2020 20/2022 8/2021 19/2022 7/2021 18/2022 6/2021 17/2022 5/2021 16/2022 4/2021

is not absolutely bound by any retained EU case law: EUWA s.6(4)(ba) and Regulations 1 and 4. It can depart from that law; but the test to be applied in

Supervision & Investigations; Technology Leadership; Prior Consultation, (4) Communications, Information & Assessment Unit and Corporate Affairs and (5)

You can help us by filling in this section! Maltese DPA can decide to open ex officio procedure but if a complaint was already filed, a right to be heard

CNPD 2021 Annual Report (in Portuguese): https://www.cnpd.pt/media/meuizrj4/relato-rio-atividades-cnpd-2021.pdf CNPD 2019/2020 Annual Report Summary https://dre

contested to the director 20 14 11 14 Decisions appealed to the court 12 9 4 6

complaint or excessive complaints from one complainant the BfDI is under § 14 (4)(2) BDSG allowed to charge a fee for complaints or can reject the complaint

Complaints can be filed in writing, electronically and via fax. LDI can run ex officio procedures out of its own motion. Cases were so far triggered by media

contains a similar ex officio duty of investigation for the European Data Protection Supervisor (EDPS). Example: A SA initiates an ex officio investigation

issues. In practice, the Board conducts consultations ex ante, by hosting workshops and ‘fablabs,’ and ex post, by providing stakeholders the opportunity to

it is argued that it appears more as an ex post obligation of a monitoring body than a criterion for the ex ante accreditation process. Article 41(5)

inconsistencies between information provided ex-ante under Article 13 and 14 GDPR and information provided ex-post under Article 15 GDPR. Article 12(1) highlights

superior, up to 4 % of the undertaking’s total worldwide annual turnover, is determined taking into account the type of violation (Article 83(4)(5) GDPR) as

decisions from third-country courts and administrative authorities in the EU. An ex-territorial judicial order to transfer or disclose personal data outside of

Regulation 2016/679’, 4 May 2020 (Version 1.1), pp. 7-8 (available here). EDPB, ‘Guidelines 05/2020 on consent under Regulation 2016/679’, 4 May 2020 (Version

'Guidelines 4/2019 on Article 25 Data Protection by Design and by Default', 20 October 2020 (Version 2.0), pp. 8-9 (available here). EDPB, 'Guidelines 4/2019

Information exchanged shall be used only for the purpose for which it was requested. 4. The requested supervisory authority shall not refuse to comply with the request

right to the protection of personal data pursuant to this Regulation. Recital 4: Balance Against Other Fundamental Rights The processing of personal data should

“including profiling based on those provisions.” Profiling is defined in Article 4(4) GDPR as a form of automated processing consisting of the use of personal

courts of the Member State where the supervisory authority is established. 4.   Where proceedings are brought against a decision of a supervisory authority

available to the data subject. Unlike other provisions such as Article 30(4) for the record of processing or Article 40(11) for the register of approved

in accordance with the examination procedure referred to in Article 93(2). 4. The Commission shall, on an ongoing basis, monitor developments in third countries

'necessity' (such as food or clothing) at any age (Ryder v Wombell [1868] LR 4 Ex Ch 32 D 165). Furthermore, minors will be deemed as bound to that contract

137), in the context of the powers provided for in articles, 4 par. 3 para. a' and 10 par. 4 of Regulation of the Authority's Operation (Government Gazette

with the Nos. Nos.C/EX/4278-6/07.11.2019 (following the C/EX/4278-4/01.11.2019 document) and C/EX/4278-7/07.11.2019 (following the W/EX/4278-5/01.11.2019

documents C/EX/1342-2/10-04-2019 (for the complaints under (b) and (c)), C/EX/2332-1/14-05-2019 (for the complaint under (b) and (c)) and C/EX/2332-1/14-05-2019

HELLENIC REPUBLIC OF DATA PROTECTION Athens, 29-06-2020 No, for example: C/EX/4512/29-06-2020 FA IN NO 18/2020 (Department) The Personal Data Protection

examination of this complaint, the Authority sent the complainant the number one.C/EX/3409-1/07-06-2019 document requesting his views on the complainants, taking

adopt the following measures. 4(c) and 8 of Law No. 4624/19 in conjunction with Art. 2 f GDPR, the power to issue 4 an ex officio interim order for immediate

version ex tunc. This implies that IAB Europe commits itself to nullity of the Inspectorate's report on the basis of the language legislation. 4. The GBA

examination of this complaint, the Authority sent the complainant the number one. C/EX/4904-1/09-08-2019 document, in which he asked for his views on the complainants

et aux libertés, so-called law "Informatique et Libertés". Directive 95/46/ex was implemented by the law n° 2004-801 du 6 août 2004 which modified the law

discharged as the title of his ex-spouse. He adds that the invoices issued by the respondent contain his details, but addressed to your ex-spouse. And, among other

the plaintiff and herself in the context of their relationship as ex-employee to ex-employee employer. 18. He also accuses it of violating the principles

AMPNI and EV HELLAS with the reference numbers C /EX / 8303 / 18-10-2018, C /EX / 8302 / 18-10-2018 and GI EX I 8301 / 18-10-2018 her documents, respectively

website controller qualifies as controller (Article 4(7) GDPR) and Google LLC as processor (Article 4(8) GDPR) for data processing in connection with Google

DPA denied a complaint regarding an e-mail sent from a businessman to his ex-wife, with a copy to the counselor of the school where their son studies,

the rights of data subjects by data subjects terminate the ex officio extended procedure for 4. The Authority finds that it has exceeded the administrative

Sections 3, 4, 6, 11, 12, 13, 16, 17, 21, 23-24. Section 4 (5), Section 5 (3) to (5), (7) and (8), Section 13 (2) § 23, § 25, 25 / G. § (3), (4) and (6),

Gazette A΄ 137), in the context of the powers provided for in articles 4 par. 3 and 10 par. 4 of the Regulation of Operation of the Authority (Government Gazette

example: As the claimant had not chosen to make her contact details ex-directory, the ex-partner could have easily searched the phone book to locate the claimant’s

therefore it cannot be considered a procedure initiated ex officio. Other offices they do not initiate ex officio proceedings upon request or based on a report

controller. Following these, the Authority with the no. prot. C/EX/ 861/05.04.22 and C/EX/860/05.04.22 calls respectively called EDOEAP and EDYTE SA. to

contacted the data subject's ex-wife regarding the matter. However, in the controller's communications to the data subject's ex-wife, the controller shared

organizational measures, since their appropriateness must be assessed ex ante and not ex post. In addition, the data retrieved through scraping - insofar as

examining the details of the file, the Authority with no. prot. C/EX/2999/23-11-2022 and C/EX/3004/23-11-2022 documents invited the aforementioned companies

Art. 4 No. 7 and 8 of the GDPR) as well as the certification body in the case of Art. 4(b) and the supervisory authority in the case of Art. 4(c) are

insured person (your ex-partner) and that, however, the loan discounts have been maintained. The claimant states that the brother of her ex-partner works in

telephone numbers… and…, respectively, the reference numbers G / EX / 5585- 1 / 18-08-2020 and G / EX / 5585-2 / 18-08-2020 documents respectively, requesting

residence addresses of the winners of the prize game on its website. Acting ex officio, the Croatian DPA requested a statement from the controller on the

resolved, without any response also. The Authority with the no. prot. G / EX / 6076-1 / 03-10-2019 document informed her CAREER for the complaint and asked

violate the law on personal data protection. The proceedings were initiated ex officio after the Ombudsman submitted a letter to the President of the UODO

respond even after the relevant reminder documents with no. prot. C/EX/276/12-01-2018 and C/EX/275/12-01-2018 respectively. Subsequently, the Authority sent

light of previous interactions with the controller, the NAIH initiated an ex officio proceeding to examine, amongst other things, the "data management

seeking a judicial remedy.’; 4. In accordance with the provisions of Article 58 (2) of the GDPR in conjunction with Article 15 (4) et seq. of Law Ν.4624/2019

subject are closely linked to data protection principles, the DPA concluded ex officio that the controller violated the principle of accuracy under Article

THE LAW 1. Because Article 2 para. 8 of Law 3051/2002 on 'Constitutionally 4 independent authorities, amendment and supplementation of the system recruitment

and the facts that are the subject of the complaint, the AEPD will proceed ex officio to open a new procedure Share your comments here! Share blogs or news

to the Covid-19 emergency. The Council of State requested, pursuant to art. 4 of Decree-Law no. 28/2020, the opinion of the DPA on a draft presidential decree

information on the action taken on his application. I. 3. Instructs the Applicant ex officio to review, within 15 days of the finalization of this decision, with

to exercise his rights,1 See point 2.1, page 14 to 15 Page 4 Decision on the merits 15/2021 - 4/32subsequent correspondence with the defendant, and the privacy

consent of the pupils' parents (legal guardians). According to Article 4(11) TYPE 4(11), 'the data subject's consent' shall mean the freely given, specific

court explains below why it comes to that conclusion. 4 The assessment of the appeal Jurisdiction 4.1 Because the request has an international character

defining the roles of the external companies involved in the processing, (4) without defining the storage times of the data collected and (5) without having

of Article 4(1) of the GDPR and additional information specifically defined in paragraph 2. Since the concept of personal data under Art 4(1) DPA is multifaceted

customer for this matters in point 4.3 and [6] can give individual consent, that X are forms r PAGE □1- □□□□ 1823325- □□□ 4-□□ 4□-□ 2- □1-� L _J,Court of Appeal

turnover of the last three financial years. These amounts: for 2017: €4,058,643,958 for 2018: €4,009,935,363 for 2019: €3,886,699,793 15. On 3 April 2020, the

without her consent, there was no reason. In response to the above document4 of DEWA X, the above Autonomous Directorate with no. prot. ... document pointed

against her ex partner as well as to having had an abortion. She was unaware that the phone call was recorded and later on forwarded to the ex partner and

ignored the decision of the supervisory authority, the DPA decided to initiate ex officio proceedings for imposing an administrative fine. The DPA found that

01-00002223628-0003-0011-01-01-� L _JCourt of appeal Brussels-2021/AR/282-p. 4 prior procedure was insufficiently informed about the exact allegations and/or

The Croatian DPA fined a car dealership approximately €4,000 for processing of personal data by a video surveillance system without prior notice. The Croatian

facts exposed. "I do not understand why the Complaint has been received at my ex-partner's house, NO I understand the reason for the Complaint, because the

Hague October 4, 2022, ECLI:NL:GHDHA:2022:2100, para. 3.1-3.13. 4 Conclusion 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 Exhibit 4 to the introductory

review and increasing the frequency of logging review. 3.4 OLVG's other views and the AP's response 3.4.1 Rights of the defence OLVG argued that the imposition

diseases, drug sensitivity or test finding (page 4). It is also recorded by the dentist study findings (page 4), records of those involved in pregnancy care

article 32 of the GDPR is typified in article 83.4.a) of the aforementioned GDPR in the following terms: "4. Violations of the following provisions will be

decisions dealing the question of whether the Article 15 activates in advance any "ex-ante right" of the data-subject to access his or her personal data and/or

in Decree-Law n.º 54/2019, of April 18, which reads, in n.º 4 of article 4.º, Following: "4- The responses to the 2021 Census questionnaires are kept by

amended) (hereinafter referred to as "Regulation 2016/679"), having conducted ex officio administrative proceedings on imposing an administrative fine on Smart

Police was responsible for a violation of Article 32 par.1(b) & (d) and par.(4) GDPR, as a result of the acts and/or omissions of the Police, whose member

empowers the board management of the DPA to issue a referral in order to open an ex officio investigation (Article 63(1) of the Law establishing the Belgian DPA)

Protection Regulation) (OJ EU L 119, 04.05.2016, p. 1, as amended), following an ex officio procedure initiated in the case of Vis Consulting Sp. z o.o. in liquidation

complained mada, by letter dated 12/11/20, made allegations to the initiation of ex- petitioner, whose content was already indicated in the resolution proposal

lawsuit for 3b (under 3b.) are already inadmissible. Claim 4 is admissible, but unfounded (under 4). Claim 5 is already inadmissible, but in any case also

initiated the disciplinary procedure ex officio (Article 63.1 LPCAP: ”The procedures of a sanctioning nature will begin always ex officio by agreement of the competent

rights. [4] The order is issued pursuant to Article 58 (2) of the Data Protection Regulation. 2nd The deadline for complying with the injunction is 4 weeks

000 HUF, ie seven hundred thousand HUF order to pay a data protection fine; 4. order the final decision of the Applicant and the Applicant's identification

2.) (hereinafter referred to as "Regulation 2016/679"), having conducted ex officio administrative proceedings concerning the imposition of an administrative

business user. Is not a kind as to barred the duty to notify the DPA office, an ex-post evaluation that drives to findings which did not constitute a breach

of article 65.4 of the LOPDGDD Law, by this Agency, said claim was transferred C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 4/60 to the claimed

processed in all its phases ex officio. II The image is a personal data The physical image of a person, according to article 4.1 of the GDPR, is data personnel

ROOM - GOYA 14 (MADRID) Phone: 914007258 Email: Team/User: MAD NIG: 28079 24 4 2022 0000131 1 JURISPRUDENCE Model: ANS105 JUDGMENT CCO COLLECTIVE CONFLICTS

compliance with the exercise of a proper local news right. It added that (4) the photograph was not a mug shot and did not show the data subject in any

as "Regulation 2016/679"), following an administrative procedure initiated ex officio to impose on Ms A. T. conducting business activity under the name

understood broadly (Hödl in Knyrim, DatKomm Art 4 DSGVO Rz 9; Eßer in Eßer/Kramer/von Lewinski, DSGVO-BDSG6 Art 4 DSGVO Rz 7). [16] 2.1 Therefore, even inner

refer to the Greek original for more details. Summary The Authority examined ex officio the compliance of the Ministry of Education and Religious Affairs

within a period of four weeks. Legal basis: Art. 4 Z 1, Z 2 and Z 11, Art. 6 Para. 1 lit. c, Art. 7 Para. 4, Art. 9, Art. 51 Para. 1, Art. 57 Para. f, Art

identification data of the parties be published directly. 3Ibid. Decision 57/2022 - 4/4 12. In accordance with its dismissal policy, the Disputes Chamber will refer

the legitimate aim pursued. 4. Where processing for a purpose other than that for which the personal data have been collected 4. Where processing for a purpose

which the personal data are intended and the legal basis of the processing; 4.5.2016 L 119/40 Official Journal of the European Union EN (d) where the processing

Article 4, introductory paragraph, and (17) of the AVG, in the EU during the period from 25 May 2018 to the present. The breach continues today. 4. Penalty

examination of the elements of the file, the Authority with no. prot.G/EX/3007/23-11-2022 and G/EX/3005/23-11-2022 documents invited the above-mentioned companies

Directive 01/2011 and Law 4624/2019, as well as the GDPR. According to Article 9(4) of Directive 01/2011, the transmission to third parties of data originating

initiative. 4. The Authority obliges the Data Controller to pay a data protection fine of HUF 1000000, ie HUF 1 million. The fine pursuant to point 4 shall be

this way across. However, on 4 February 2020, the database was no longer available in this way. The Authority's NAIH / 2020/66/4. By order no., he called for

amended) (hereinafter referred to as the "Regulation 2016/679"), after conducting ex officio administrative proceedings to impose an administrative fine on East

after consent was withdrawn. Following several compaints, the DPA launched an "ex officio" investigation. The controller (Client 1, Pitagorasz Oktatási Stúdió

Article 12(3) GDPR (the controller failed to answer within a month), Article 12(4) GDPR (The controller failed to provide a reason why it did not comply with

the context of the investigation of the complainants, sent the no. prot. G / EX / 2241 / 24.3.20 document for providing clarifications regarding the complaint

with article 4.1 of the RGPD, is data personal protection and their protection, therefore, is the object of said Regulation. In article 4.2 of the RGPD

Disputes Chamber. Decision 42/2022 - 4/5 therefore to be regarded as manifestly unfounded within the meaning of Article 57.4 of the GDPR. 12. Finally, and in

hereinafter referred to as: The Authority has taken the following decision in an ex officio data protection authority proceeding against the Notifier (hereinafter

Although it did to respond to the claims of the claimant, who did not mention ex- The name of the Mayor was expressly displayed on the B.B.B. website, and

olo_4EP_2018_2019_castellano.pdf/fe4a6b07- 50eb-12e9-88b6-ee2671d9156c, 16 pages, on file. It is included in the file with the name "EVALUATION 4 EP" You

October 30, FJ 4), such as the right to honor, expressly cited in the art. 18.4 CE, and likewise, in a very broad expression of art. 18.4 CE, al full exercise

of the text in the form and on 4 February 2020 the change of the text of the form, which was harmonized with the NIJZ on 4 February 2021 was also corrected

for that purpose. 4 1° to close a complaint; 2° to order the dismissal of a complaint; 3° to order the suspension of the judgment; 4° to propose a settlement;

Guarantor for the protection of personal data, approved with resolution no. 98 of 4/4/2019, published in the Official Gazette no. 106 of 8/5/2019 and in www.gpdp

right of access (Article 12(4) GDPR). The DPA held that data concerning the vehicle of the complainant is personal data (Article 4(1) GDPR), since the data

provided for by Union law or the law of a Member State"... 4. Furthermore, according to article 4 par. 4 of Law 3758/2009 on Information Companies Debtors "Before

REPUBLIC OF CROATIA PROTECTION AGENCY PERSONAL DATA CLASS: NUMBER: Zagreb, July 4, 2022. Personal Data Protection Agency (OIB: 28454963989) on the basis of Article

accordance with Article 133, paragraph 4, B-VG. This statement needs to be briefly justified. According to Article 133 Paragraph 4 B-VG, the appeal is not permitted

the handling the complaint. Decision 140/2022 - 3/6 II.1. Correction of data 4. The Disputes Chamber is of the opinion that the requests of the complainant

2.4.5. Even if it used [applicant]'s data for this (which, according to T-Mobile, is plausible if [applicant] used T-Mobile's 4G network with a 4G device

mentioned in Article 100 of the LCA. 5 4 Section 3, Subsection 2 of the ACL (articles 94 to 97 inclusive). 5 4 Art. 100. § 1. The litigation chamber has

end users C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es Page 4 4/5 of electronic communications services will have the following rights: (…)

statements by his ex-partner and objective observations by police officers, that it includes alleged domestic violence and that the report by the ex-partner partner

June 23, 2023 of the 4 https://www.gegevensbeschermingsautoriteit.be/publications/aanadvies-nr.-01-2020.pdf Decision 157/2023 — 4/7 defendant to the request

hospital from 1991 to 2018. 2.2. The ex-partner of [plaintiff], Mr. [name of ex-partner] (hereinafter: [name of ex-partner]), has a book under the pseudonym

original for more details. Übersetzungstypen Textübersetzung Ausgangstext 4.951 / 5.000 Übersetzungsergebnisse 1 REPUBLIC OF CROATIA PROTECTION AGENCY

authority, the company provided additional explanations, after which the DPA ex officio initiated administrative proceedings. The DPA found that the controller

2016/679 (General Data Protection Regulation, hereinafter: GDPR), OJ No. L 119 of 4 May 2016 p. 1 as amended, in conjunction with Section 2b Z 12, Section 2d para

information obligation towards natural persons who were not informed by email? 4) Is the information obligation impossible or disproportionate pursuant to Art

art. 58 sec. 2 lit. i) in connection with Art. 83 sec. 1 and 2, art. 83 sec. 4 lit. a) and art. 83 sec. 5 lit. e) Regulation of the European Parliament and

opportunity until May 7, 2021 at the latest to to make the right decision. 4 The request 4.1. The [applicant] requests the court to order by provisionally enforceable

jurisdiction in this case. The court will therefore decide accordingly. 4. The decision The court 4.1. declares that the Dutch court has no jurisdiction to take cognizance

to process these data. Article 29 of the Croatian Labour Act and Article 5(4) of the Labour Law Rulebook (Official Gazette, no. 73/17) refer, among others

12(1) GDPR. The Dutch DPA (Autoriteit Persoonsgegevens, 'AP'), launched an ex officio investigation into the processing of personal data by TikTok Inc (TikTok)

einlaufstelle@bvwg.gv.at www.bvwg.gv.at DECISIONS D A T U M 2 9 . 0 4 . 2 0 2 2 BUSINESS NUMBER W 2 5 8 2 2 4 7 0 2 8 - 1 / 1 1 E I M N A M E N D E R E P U B L I K 

Constitutional Court (STC 292/2000, November 30) BOE no. 4 of January 4, 2001) has declared that art. 18.4 CE contains, in the terms of the STC 254/1993, an institute

on Protection data within 8 days from the date of receipt of this decision. 4. A deadline of 8 days from the day of receipt of this is set for company X

of the complainant's ex-husband - especially considering the testimonies in question were given by members of the complainant's ex-husband's family. The

on a first link, which took him to a second, to a third and finally to a 4th (4-step procedure). Once clicked on the last “Registration” link, the candidate

that his ex-wife received work call records containing personal data about him. Is the dissemination of personal data to the data subject's ex-wife, without

that his ex-wife received work call records containing personal data about him. Is the dissemination of personal data to the data subject's ex-wife, without

used a form provided by the relevant authority for this purpose. Under point 4.4. of the form and the heading "I consider this response to be defective and

of the name belongs to this personal data. 5.4.4. The GBA rightly states that in accordance with Article 4.1) of the GDPR "personal data" "all information

Protection of C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 4/18 Data, for the purpose that said faculties become part, total or partially

PS/00618/2021(EXP202103039) RESOLUTION OF PUNISHMENT PROCEDURE Of the actions carried out ex officio by the Spanish Agency for the Protection of Data before the entity

Section 4 (1) GDPR declares that the GDPR is applicable in addition to the GDPR, without referring to the exceptions in Article 2 (2), (3) and (4) of the

corridors on the balconies of the three floors, the exterior courtyard area of the 4ου floor, and the school auditorium. Access 1 https://edpb.europa.eu/our-wo

with reality. Then the Authority with the no. prot. G / EX / 567 / 4.2.21 and G / EX / 568 / 4.2.21 respectively called G. Lampadakis, his attorney complainant

appeared in the FIJ. Year 2016: 4,624,312; year 2017: 4,879,391; year 2018: 4,940,225; year 2019: 4,657,196; year 2020: 4,183,445; year 2021: 3,826,436.

13, 23 and 26 of Legislative Decree no. 186 of 2003 and 7.4 of Regulation (EU) 2016/679 of 4European Parliament and of the Council, in terms of modalities

process. xi.- In addition, and in accordance with the provisions of article 4, no. 3 of Decree-Law no. 207/2005, of 29 November, the data obtained through

Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 4/8 The image of a person, in accordance with article 4.1 of the RGPD, is personal data. make it identifiable

Local of the Fuenlabrada City Council, since according to Organic Law 4/1997, of 4 of August, which regulates the use of video cameras by the Forces and

RKG ex officio if the change to the entry was due to the reconciliation of data with the records of entities or other data collections ex officio.4 See

personal data without his consent. The employer stated that according Section 6(4) Act I of 2012 on the Labor Code the complainant had a duty to inform the employer

Kühling/Buchner, DS-GVO/BDSG, 2nd ed., Art. 4 DS-GVO marginal 8; Ernst, in: Paal/Pauly, DS-GVO/BDSG, 2nd ed., Art. 4 marginal 14). 39 b) However, it is not

Subject: Complaint relating to the sending of an email by the ex-employer of the complainants to the ex-colleagues of these, specifying the nature of their dismissal

initiated by the Complainant's complaint, the President of UODO initiated ex officio against the Entrepreneur - based on Article 83(5)(e) of Regulation

(hereinafter the "Law") and the newspaper was summoned, as it submits, no later than 4 weeks from the date of the letter, its positions / opinions, as far as concerns

personal data within the meaning of Art 4 Z 1 DSGVO. 3.2.4 The complainant's arguments cannot alter this assessment: 3.2.4.1 The complainant's argument according

sharing unredacted copies of their assessment report to a mother and her two ex-partners, each the father of one of the two children mentioned in the report

right of access under Article 15(4) of the GDPR or section 22 of the DDPA can be invoked. It follows from Article 15 (4), that the right to obtain a copy

12(3) and (4) GDPR. Therefore, the Belgian DPA found the controller to have breached Article 15 GDPR in conjunction with Article 12(3) and (4) GDPR, and

alternatively of article i), both of Law O.4/2010, punished with the sanction of suspension of functions of one day 4 days, ex article 10.3 of the aforementioned

Garante for the protection of personal data, approved by resolution No. 98 of 4/4/2019, published in G.U. No. 106 of 8/5/2019 and at www.gpdp.it, web doc. No

Protection Regulation. 4. Importer's data management practices related to customer satisfaction measurement In this regard, the Authority ex officio examined

period of time. 3.4. In so far as relevant, the arguments of the parties will be discussed in more detail below. 4 The assessment 4.1. The urgent interest

der elektronischen Medien, 4th ed. 2019, marginal no. 11; Plath/Becker, DSGVO/BDSG, 3rd ed. 2018, Art. 82 DS-GVO marginal no. 4; Wybutil, NJW 2019, 3265

from the data protection authority by telephone in order to ask whether the ex lege guaranteed data protection in Austria would only apply once a breach

2 of 04/01/2018, with identical data 3.- *** INVOICE. 4, from 01/05/2018, with identical data 4.- *** INVOICE. 3, from 06/01/2018, with identical data

an invoice to be paid to plaintiff’s name by his ex-employer (V), for a supplementary pension that the ex- employer paid for the plaintiff when the latter

following FACTS FIRST: Mr. A.A.A. (* hereinafter, the claimant) dated October 4, 2019 filed a claim with the Spanish Data Protection Agency. The The claim

Chamber of Pharmacists or to pharmacists is covered by Paragraph 80(3)(4) or (4)(1) of the AMG. Since the complainant had, however, only expressed an assumption

costs of the proceedings and the follow-up costs. 4 The grounds of the decision on appeal Core of the case 4.1 Briefly summarised, the case at hand is as follows

decided to initiate the ex officio official procedure. Despite this, the Company's statements in the official procedure initiated ex officio were incomplete

defined in this Act, in particular at the request of the data subject and ex officio data protection conduct an official procedure. Infotv. Pursuant to

Authority from 16 December 2021 in case no. 2020010635. According to number 4. Paragraph 4 Article 17 Act no. 90/2018, it is thus permitted to limit the educational

Swedish Administrative law. This also applies if the DPA opened a parallel ex officio investigation into a similar matter and the same company. An Austrian

pursuant to Article 4(2) of the GDPR, and the applicant operating and managing the Facebook page is a controller pursuant to Article 4(7) of the GDPR, given

decision. II.1.) In its decision, the Authority ex officio states that a) the Respondent from paragraphs (3) and (4) of Article 12 of the General Data Protection

processing of the claims that are made before the AEPD, provided for in article 65.4 of the Law Organic 3/2018, of December 5, Protection of Personal Data and guarantee

structure of 7 faculties, 2 schools, 4 research institutes, 27 departments, 33 services and administrative Units, and 4 management centres, and the data subject

view no longer relevant. They concerned information on data subject 1, her ex-partner and the children they have together. They argued that this was separate

arguments of the parties are discussed in more detail below. 4 The assessment Assessment framework 4.1. Personal data of [claimant] were processed during the

Service. 4.6. According to paragraph 26 of Directive 5/2020, "Article 7 of the General Data Protection Regulation paragraph (4) of Article 4 states, among

case no. 2.1.-4/20/1662 Challenge submitted by MustamäeApteek OÜ e-mail address: jyrgen.janese@apotheker.ee I RESOLUTION Pursuant to clause 85 4) of the Administrative

applied for a new job, the recruitment agency contacted the ex-employer to ask for references. The ex-employer provided negative references. This resulted in

number C / EX / 1806 / 09-03-2020 its document for 18-03-2020 and after the postponement of the meeting, for 15- 07-2020, with its document no. G / EX / 4486

more details. decision date 06/12/2023 standard B-VG Art133 Para.4 DSG §24 paragraph 4 GDPR Art58 GDPR Art77 B-VG Art. 133 today B-VG Art. 133 valid from

accordance with Article 133, Paragraph 4, B-VG.The revision is permitted in accordance with Article 133, Paragraph 4, B-VG. text Reasons for the decision:

repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.05.2016, p. 1 and OJ L 127, 23.05.2018, p. 2), following an administrative

taken into account with increased weight - Requested ex officio in a warning favors I.4. The Authority ex officio orders this decision with the Applicant's

Camera system No. 1 (consisting of 4 analogue cameras only providing live image) and Camera system No. 2 (consisting of 4 IP cameras recording image and audio)

data subject’s request, stating that its role is limited to ex-post control. The DPA held that ex-ante control would lead to the DPA taking the place of the

data and signs it. § 10. Apart from the provisions of paragraphs (2)-(4) of § 4, the responsible person: a) informs the pregnant woman against the other

data and e-mail address rejects. III. The Authority shall issue the Debtor ex officio due to its unlawful data processing HUF 300,000, ie a three hundred

without legal basis personal information in your online directory. 4. The Authority will ex officio condemn the Applicant for failing to facilitate a Deletion

last one is decisive.” Article 4, paragraphs 21 to 23 of the GDPR read:Article 4, paragraphs 21 to 23 of the GDPR read: “Art. 4 GDPR Definitions 21. “supervisory

replacement (cf. VwGH December 14, 2021, Ro 2020/04/0032). 7 4.4. Re points 2 and 3 of the decision: 4.4.1. In accordance with Art. 78 Para. 1 and 3 GDPR in conjunction

is reasonably permitted expect processing to take place for that purpose ”.4 4 Recital 47 GDPR. Decision on the merits 03/2021 - 9/11 25. This is also emphasized

[applicant] are discussed in more detail below, insofar as relevant. 4 The assessment 4.1. In this case, in the first place - briefly - it concerns the question

PS/00030/2022 (EXP202104460) RESOLUTION SANCTION PROCEDURE Of the actions carried out ex officio by the Spanish Agency for the Protection of Data before the entity

tini, in: Paal / Pauly, DS-GVO BDSG, 3rd edition 2021, Art. 32 DSGVO Rn. 4a-4d. 7 Hornung, ZD 2011, 51, 52. - 3 - The Hamburg representative for Data protection

00. Ex officio judgement 6. The District Court did not acknowledge that with the introduction of Title 8.4 in the Awb on the basis of Article 8:4, paragraph

process. 4. The actual and established facts of the commission of an administrative violation during the case review statement of circumstances: 4.1. The

protectionArticle 5 (1) (a), Article 5 (2), Article 12 (1) and (4) ofArticle 14, Article 15 and Article 21 (4).1.3. The Authority condemns the Applicant for unlawful

Municipal Personal Records Database. to ask. 4 . The assessment in the incident Name and address details 4.1. [defendant01] has formulated two claims in

temporary staff, at the Single Resolution Board (SRB) on 1 November 2017. On 4 September 2019, he resigned with effect from 30 September 2019. The applicant’s

its observations, which, in accordance with Article 54(1)(b), (3) and (4), (4) and (4), (5) and (5), (5) and (5), (5) and (5), (5) and (6). 2 of the Rules

court rejected the application against Rabobank. 4 4 The assessment of the dispute Introductory remarks 4.1 [petitioners] et al. Have eight grounds of appeal

of the entity - infringes Article 32. 2 and 32.4 of the RGPD, an infringement punishable under Article 83.4.a of the GDPR. Assessing the circumstances modifying

https://bp18.hu "ADATKEZELESI_TAJEKOZTATO_BP18_v4_RF_20201125.pdf" can be downloaded A screenshot of the state of document 4 on May 7, 2021. page (points 2.3 and

Article 4 WOG. 17. First, it is clear that the content of the disputed e-mail messages constitute personal data within the meaning of Article 4.1. AVG.

accordance with article 45.2, 4. b), c) and d) and 45.4 j) of the same Law. - a fine of 50,000 euros for an infraction of article 4.1, classified as serious

numbers 2 to 4 of the previous paragraph 2.2; 3) Articles 5, par. 2, for the reasons described in numbers 2 to 4 of the previous paragraph 2.2; 4) Art. 5,

commercial register number: *4*8*2r, represented by A*** , B*** & Partner Rechtsanwälte, **** Vienna, ****platz 4*/3, carried out ex officio examination proceedings

be considered infringing. 1.4. Based on the above, the Authority considered it justified to initiate an official inspection ex officio in order to verify

systems adaptation works - Lot 4 - Excerpt 4" and "Adjustment works building fire prevention and structures - Lot 4 - Excerpt 4". Therefore, since it is a

about their rights under Article 13 GDPR. The DPA started an investigation ex officio into the processing of health data and whether the controller was

or connection, restriction, deletion or destruction. Based on Article 4, point 4 of the General Data Protection Regulation, "profiling" is personal data

in the interest, which is certainly considered legitimate, not to interrupt ex abruptly the contacts with customers that the [complainant] had contacted

Paragraph 4 of the Administrative Disputes Act, Official Gazette, No. 20/10, 143/12., 152/14., 94/16., 29/17. and 110/21.; hereinafter ZUS). 4. The claim

National Statistical System", Annex A.4 to the Code (hereinafter "Ethical rules") and in particular, Articles 4-bis and 6, paragraph 2, of the same Deontological

complaining company was informed about the complaint with the no. prot.C / EX / 4863-1 / 09-08-2019 document of the Authority with which it was requested

admitted toC / Jorge Juan, 6www.aepd.es28001 - Madridsedeagpd.gob.es Page 4 4/30processing the claim and before the adoption of the initiation agreement

from the AEPD) C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 4/16 - BBVA affects this issue in the second allegation of the information brief

Protection Regulation) Article 6 (1) (d), Article 6 (1), Article 12 (2), (3) and (4), Article 17 (1) and violates the general practice of the Applicant in relation

reason for exclusion applies (4.2) and how a weighing of interests required in the reason for exclusion results (4.2.3). (4.1) Classification problem 143

inter alia, the criteria referred to in Article 6(4)(a) to (e) of the DPO (Article 6(4) DPO). Article 6 (4) of the DPA therefore permits further processing

Guarantor for the protection of personal data, approved by resolution no. 98 of 4/4/2019, published in OJ no. 106 of 8/5/2019, web doc. no. 9107633 (hereinafter

Italian Worker’s Statute, Article 3 of the Italian Worker’s Statute and Article 4 of the Italian Worker’s Statute and Article 113 of the Italian Privacy Code

32(1)(b), Article 32(1)(c) and Article 32(1)(d). d, 32(2), 58(2)(i) and 83(3), 83(4)(a), 83(5)(a) of Regulation 2016/679 of the European Parliament and of the

5(1), first sentence VIG § 1, § 2, § 3, § 4 para. 4, § 5 para. 1, para. 4 p. 1, § 6 para. 1, para. 3, para. 4 Regulation (EU) 2017/625 Art. 8, Art. 11(2)

within the meaning of Section 4f Paragraph 3 Sentence 4 BDSG old version or Section 38 Paragraph 2, Section 6 Paragraph 4 Sentence 1 BDSG in conjunction

provided DFW with any data regarding the IP addresses. 4. The dispute and the decision in first instance 4.1 In the first instance, DFW filed a similar claim

sanction are considered complete, pursuant to art. 58, par. 2, lit. the). 4.4 On the retention times of personal data As described above (see point 6 of

was not given the opportunity to comment. 4. The complainant's mother was a party to the proceedings on the GZ: *4 C *32/22f, at the BG D***. As part of these