Search results

much broader under Article 6(1)(4) GDPR, as illustrated by the rules in Articles 4(11), 7 or 8 GDPR, as well as Recital 43. If consent is "freely given"

recognised, such as the data subjects' expectation of reasonable use of their data, and the right not be discriminated or exploited as a consequence of

The information can either be 'objective' such as unchangeable characteristics of a data subject as well as 'subjective' in the form of opinions or assessments

wording must be understood as indicating that the controller shall restore availability and access "as soon as possible". As the wording of this provision

information should be provided in as simple a manner as possible, avoiding to downplay or 'reframe' processing operations, as well as complex sentence and language

least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for

processor, such as access to documents, the examination of hardware and software used, networks, databases, applications, interfaces, as well as the testing

intended" and "as well as the legal basis for the processing") otherwise the paragraph could simple read "any purposes, any personal data, as well as any legal

of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3); (d) for archiving purposes in the public interest, scientific

taking into account the nature scope or purpose of the processing concerned as well as the number of data subjects affected and the level of damage suffered

or approval for political groups in social networks (such as the "Like" on Facebook) as long as they reflect a reliable conclusion on a political opinion

implementation and the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for rights and freedoms of

approved codes of conduct as referred to in Article 40 or approved certification mechanisms as referred to in Article 42 may be used as an element by which to

the purposes of the processing for which the personal data are intended as well as the legal basis for the processing; (d) the categories of personal data

the processing, such as "filming," "recording," "archiving of images," and so on, as well as the purpose of the processing, such as "detecting unlawful

outlined in Article 23(1)(a) to (j) GDPR (e.g. national and public security) as well as Recital 73 GDPR (e.g. protection of human life). In any case, the threshold

This withdrawal should be as easy as giving consent. Article 7(3) GDPR clarifies that the withdrawal of consent must be as simple as the granting of consent

factors such as the current state of technology, the implementation costs, the nature, scope, context, and purposes of processing, as well as the varying

35(10), as well as recitals 90 and 93 of the GDPR. This requirement is in line with the principles of data protection by design and by default, as outlined

economic or social disadvantage to the natural person concerned. Therefore, as soon as the controller becomes aware that a personal data breach has occurred

material rights, such as the right to be forgotten (Article 17 GDPR) and the right to compensation (Article 82 GDPR), as well as procedural rights and

networking and online activity as long as they are purely personal or a household activity. The reference to social networks as a type of activity exempted

data processing as promptly as possible. The duty of exchange of information exists even when the identity of the LSA is still unclear as the required exchange

likelyhood of high risks for the data subject (see above), as “as soon as possible” or “as soon as reasonably feasible” (within the meaning Recital 86 GDPR)

homogeneous application of its provisions, as well as the right to an effective remedy before a court or tribunal as referred to in Article 47 of the Charter

processing), Article 57 GDPR (tasks of SAs), Article 58 GDPR (powers of SAs), as well as Article 65 GDPR (dispute resolution by the board), Article 63 GDPR (consistency

and rights provided for in Articles 12 to 22 and Article 34, as well as Article 5 in so far as its provisions correspond to the rights and obligations provided

Datatilsynet in writing. As a minimum requirement, Datatilsynet requires to know the name and address of the complainant, as they do not generally process

decision can be official acts of public authorities such as decisions on tax returns, as well as automatic refusals of online credit applications or similar

of undertakings as long as the DPO is easily accessible from each establishment. The notion of accessibility refers to the DPO serving as a contact point

engaged in large-scale businesses such as cloud service providers, hosting providers, or software-as-a-service platforms, as they frequently work with thousands

the possibility to obtain effective administrative or judicial redress, as well as to claim compensation, in the Union or in a third country. Paragraph 1

and radio, as well as for news and press archives. In addition, people without journalistic training also benefit from the exemption insofar as they carry

processor. As DPOs fulfill their responsibilities under Article 39, they must not receive any instructions on how to handle a matter, such as specifying

brought both against a controller (as defined under Article 4(7) GDPR) and a processor (as defined under Article 4(8) GDPR). As noted above, Article 79 GDPR

protect the rights and freedoms of data subjects, the DPIA as referred to in Article 35, as well as any other information requested by the DPA. Paragraph 4

transfer of personal data to third countries or international organisations, as far as such agreements do not affect this Regulation or any other provisions of

technical analysis, as well as strategic work. The department consist of a staff with security and technical experts, as well as a section for analysis

under Article 31 GDPR as imposing 'administrative procedural cooperative burdens' on controllers and processors, as Articles such as 36 do, which oblige

such data subjects in the Union; or (b) the monitoring of their behaviour as far as their behaviour takes place within the Union. 3. This Regulation applies

sectors within one of these countries, as well as an international organisation, as this provision establishes. As mentioned beforehand, so far, the Commission

sector, as well as the “specific needs of micro, small and medium-sized enterprises”. Recital 98 and 99 GDPR provide additional information as to how the

concerned as part of or as a result of the processing (e.g. the data subjects are your employees); The processing activities can be considered as naturally

Slovenia. In the field of data protection, it has competencies under the GDPR as well as under the Slovenian Personal Data Protection Act, the Electronic Communications

all of the tasks assigned to it and powers conferred to it by the GDPR, as long as the tasks are performed and the powers exercised on the territory of its

the DPA refuses to act as the BCR Lead, it should explain the reasons for its decision, as well as its recommendations (if any) as to which other DPA would

believe that proceedings concerning the same processing, such as the same subject matter as regards processing by the same controller or processor, or the

is established in Paris and is in charge of enforcing GDPR for France, as well as the national law for data protection "Loi Informatique et Libertés". The

the offence under national law, the nature of the offence and the nature as well as degree of severity of the penalty that the person concerned is liable

developments that have an impact on the protection of personal data; To give advice as part of the consultation by the controller responsible for the processing