Search results

'bottleneck' for the legality of any processing operation - together with the requirement to have a legal basis under Article 6 GDPR. Any controller or processor

prior to making any changes to the purpose. This includes any change based on Union or Member State law and the use of personal data for any "compatible"

defined as "any operation or set of operations which is performed on personal data". The notion of processing is formulated broadly by the GDPR as 'any operation

controller shall take appropriate measures to provide any information referred to in Articles 13 and 14 and any communication under Articles 15 to 22 and 34 relating

This information does not require any kind of personalisation, given that a data subject can file a complaint with any authority under Article 77 GDPR.

processing") otherwise the paragraph could simple read "any purposes, any personal data, as well as any legal basis". The obligation to link also stems from

of the GDPR, as well as any breaches of Member State laws adopted under Chapter IX (paragraph 5), and non-compliance with any other orders issued under

such controllers of any links to, or copy or replication of, those personal data". In this context, the term "link" refers to any reference to a storage

performance of its tasks; (f) to obtain access to any premises of the controller and the processor, including to any data processing equipment and means, in accordance

that any type of clear, unambiguous statement, support or, as the case may be, rejection of a political party or of an ideological organization, any subscription

Article. 4. The controller and processor shall take steps to ensure that any natural person acting under the authority of the controller or the processor

justified and it halts any processing activities. In fact, some authors argue that if direct marketing is based on consent, any objection, although theoretically

5(1)(a) GDPR. If any part of the statement (provided by the controller to the data subject) does not meet these requirements or in any way "constitutes

Article 82 - Right to compensation and liability 1. Any person who has suffered material or non-material damage as a result of an infringement of this

concerned; (e) the recipients or categories of recipients of the personal data, if any; (f) where applicable, that the controller intends to transfer personal data

of the law is clear. Once any complaint is received, the supervisory authority must take action to reach a decision, of any kind, even if it is ultimately

need to seek legal advice to determine the existence of any such legal requirement. Regardless, any transfer or disclosure can only occur if authorized by

provided in phases without undue further delay. 5. The controller shall document any personal data breaches, comprising the facts relating to the personal data

communication to the data subject referred to in paragraph 1 shall not be required if any of the following conditions are met: (a) the controller has implemented appropriate

processor shall ensure that the data protection officer does not receive any instructions regarding the exercise of those tasks. He or she shall not be

obligations under this Regulation; (e) upon request, provide information to any data subject concerning the exercise of their rights under this Regulation

information with each other. 2. The lead supervisory authority may request at any time other supervisory authorities concerned to provide mutual assistance

material scope of the GDPR. Paragraph 1 clarifies that the Regulation applies to any processing of personal data by automated means or to the non-automated processing

freedoms of others; (j) the enforcement of civil law claims. 2. In particular, any legislative measure referred to in paragraph 1 shall contain specific provisions

or e-recruiting practices without any human intervention. Such processing includes ‘profiling’ that consists of any form of automated processing of personal

advice to the controller and, where applicable to the processor, and may use any of its powers referred to in Article 58. That period may be extended by six

challenging, requiring appropriate technical expertise and experts to resolve any doubts unless guidelines are provided by supervisory authorities. EDPB: In

judicial remedy against a supervisory authority 1.   Without prejudice to any other administrative or non-judicial remedy, each natural or legal person

authenticated by any Greek administrative authority or the citizens’ service centre (Κέντρο Εξυπηρέτησης Πολιτών). Withdrawing the mandate can be done at any time

on the territory of a Member State of liability for any breaches of the binding corporate rules by any member concerned not established in the Union; the

disclose, erase, or perform any other type of processing operation on them. The personal data gets "frozen", unless any of the specific exceptions under

protected by professional secrecy, unauthorised reversal of pseudonymisation, or any other significant economic or social disadvantage; where data subjects might

within the meaning of Article 47. 2. Any supervisory authority, the Chair of the Board or the Commission may request that any matter of general application or

providing a supplementary statement. Recital 39: Principles of Data Processing Any processing of personal data should be lawful and fair. It should be transparent

not follow the opinion of the Board issued under Article 64. In that case, any supervisory authority concerned or the Commission may communicate the matter

authority shall refrain from any action incompatible with their duties and shall not, during their term of office, engage in any incompatible occupation, whether

there seems to be no formal decision that can be appealed. Any party can file an appeal against any DSB decision (or in the case of non-decision within 6 months)

must now decide any question as to the validity, meaning or effect of any retained EU law for itself: it is no longer possible to refer any matter to the

recipient, typically for remuneration. This includes “any Information Society service, that is to say, any service normally provided for remuneration, at a

integrity, refrain from any action that is incompatible with their duties and should not, during their term of office, engage in any incompatible occupation

which it adopts pursuant to paragraph 1, by 25 May 2018 and, without delay, any subsequent amendment affecting them. Recital 8: National Implementation Where

investigation, issue a decision and a fine or to carry out any other task and exercise any other power conferred on it by the GDPR. Example: Polish SA

controller and the processor shall designate a data protection officer in any case where: (a) the processing is carried out by a public authority or body

judicial remedy against a controller or processor 1.  Without prejudice to any available administrative or non-judicial remedy, including the right to lodge

exercised with any controller data subjects choose within the conditions specified below. Data subject have the right to request and obtain a copy of any personal

refusing administrative assistance. In any case, according to paragraph 5 below, the requested SA shall provide reasons for any refusal to comply with a request

44 GDPR must be also be complied with, meaning that any transfer based on a derogation shall, in any case, meet the conditions contained in the provisions

bodies, it still remains accountable to them. Nonetheless, the scrutiny of any such external bodies may only come following an action taken by the Board

for appropriate safeguards for the rights and freedoms of data subjects. Any comprehensive register of criminal convictions shall be kept only under the

matter within eight weeks by simple majority. Any SA, the Chair of the EDPB or the Commission may request that any matter of general application or producing