Search results

From GDPRhub
  • IP - 07120-1/2020/25 (category Article 4(5) GDPR)
    officially consolidated text, hereinafter ZVOP-1), and 2 Article 43 of the Information Commissioner Act (Official Gazette RS, No. 113/05, hereinafter ZInfP)
    24 KB (3,577 words) - 15:31, 14 April 2021
  • required in principle (see hereunder Article 65(2) GDPR) to adopt a decision under Article 65 GDPR is reached, since Article 64 GDPR only requires a simple majority
    33 KB (4,185 words) - 16:09, 2 November 2023
  • paragraph 2 of this Article. The implementing act shall be adopted in accordance with the examination procedure referred to in Article 93(2). 4. The Commission
    43 KB (5,641 words) - 14:58, 28 April 2022
  • actual processing. If the information under Articles 13 or 14 GDPR and Article 15 GDPR would be the same information, Article 15(1) GDPR would be largely
    73 KB (9,896 words) - 15:46, 18 March 2024
  • exemption is based on Article 85(2) GDPR. According to Article 26(3) of the 2018 Act, certain GDPR provisions (listed in Article 26(9)) will not apply
    14 KB (2,011 words) - 15:42, 25 November 2020
  • Regulation Article 5 paragraph 1 subparagraph a Article 7 Article 9 Data Protection Act Section 6 subsection 1 paragraph 1 Insurance Contract Act Section
    49 KB (7,496 words) - 14:44, 24 January 2024
  • of the information gathered, the DPA held that the controller had violated Article 5(1)(a) GDPR, Article 5(1)(c) GDPR, Article 9 GDPR and Article 25(2)
    60 KB (9,117 words) - 14:46, 24 January 2024
  • that the controller had violated Article 5(1)(a) GDPR, Article 12 GDPR, Article 13 GDPR, Article 15 GDPR and Article 25(1) GDPR. As a result, the DPA issued
    52 KB (7,936 words) - 22:32, 2 March 2024
  • data. On the basis of the information gathered, the DPA held that the controller had violated Article 5(1)(e) GDPR and Article 25(2) GDPR. As a result,
    77 KB (12,352 words) - 07:20, 23 April 2024
  • data on behalf of the data subject under Article 15 GDPR; and 3) Article 6(1)(1) of the Finnish Data Protection Act (Tietosuojalaki) which allows insurance
    73 KB (11,237 words) - 05:34, 21 July 2022
  • CNIL (France) - SAN-2019-005 (category Article 5(1)(e) GDPR)
    very letter of the provisions of III of Article 45 of the Act of January 6, 1978 as amended, resulting from Act no. 2018-493 of June 20, 2018 aimed at bringing
    41 KB (6,558 words) - 17:09, 6 December 2023
  • the grounds that the conduct of the Commissioner violated the right to be heard. The court referred to Article 43(1),(2) Law N. 158 (I)/1999, which is
    22 KB (3,496 words) - 12:08, 17 February 2022
  • CJEU - C‑634/21 - SCHUFA (category Article 22(1) GDPR)
    preparatory act and only the act adopted by the third party can, where appropriate, be classified as a ‘decision’ within the meaning of Article 22(1) of that
    6 KB (783 words) - 16:05, 12 December 2023
  • Commissioner (Cyprus) - 17.05.23 (category Commissioner (Cyprus))
    before before the issuance of the annulled act. 3.1.2 Article 47 of the General Principles of Administrative Law Act 1999 (158(I)/1999), provides that: 4 47
    31 KB (4,973 words) - 16:50, 6 December 2023
  • Commissioner (Cyprus) - 11.17.001.010.045 (category Commissioner (Cyprus))
    that the article’s publication was in violation of Article 5(1)(c) GDPR, Article 6(1)(f) GDPR, when read in line with Article 85 GDPR. Article 5(1)(c) outlines
    74 KB (12,375 words) - 10:07, 4 October 2023
  • verification of the information provided to the authority. Naturally, information about an individual from the police is not retained, and information obtained during
    41 KB (6,555 words) - 08:37, 4 March 2024
  • CNIL (France) - SAN-2020-014 (category Article 9 GDPR)
    breach of article 33 of the Rules. III.On corrective measures and publicity 39. Under the terms of III of article 20 of the Data Protection Act: When the
    26 KB (4,050 words) - 17:10, 6 December 2023
  • "GDPR"), which came to the attention of the Information Commissioner ("the Commissioner"). 1.2 The Commissioner considers that Ticketmaster was the controller
    130 KB (21,195 words) - 13:52, 25 April 2021
  • Commissioner (Cyprus) - 11.17.001.010.201 (category Commissioner (Cyprus))
    basis of the information presented by the controller, the Cyprus Commissioner considered that the legal basis should be consent, under Article 6(1)(a) GDPR
    23 KB (3,737 words) - 10:30, 7 June 2023
  • CNIL (France) - SAN-2020-012 (category Article 4(7) GDPR) (section The lack of information to users)
    the requirements set in Article 82 of the Data Protection Act is set out in Article 3, paragraph I, of the Data Protection Act which provides: without
    93 KB (14,936 words) - 17:09, 6 December 2023
  • of the information gathered, the DPA held that the controller had violated Article 5(1)(f) GDPR, Article 17(1) GDPR, Article 25(1) GDPR, Article 32(1) GDPR
    56 KB (8,980 words) - 08:47, 4 March 2024
  • IP - 7121-1/2020/369 (category Article 6 GDPR)
    2020/369 Subject matter: Information for the individual, Legal bases, Consent, Education Legal act: Opinion The Information Commissioner (hereinafter: IP) has
    10 KB (1,406 words) - 15:25, 17 March 2022
  • LA 104/19, ECLI:DE:OVGNI:2020:0722.11LA104.19.00 Article 1 (1) GG, Article 2 (1) GG, § 7aF DSG ND, § 43 VwGO Proceedings VG Osnabrück, 30 January 2019,
    25 KB (3,723 words) - 11:50, 10 September 2021
  • credit information register are widely released for various purposes. Pursuant to Section 19 of the Credit Information Act, payment default information can
    71 KB (11,552 words) - 13:40, 12 January 2024
  • (violated article: Article 25) and those in accordance with Article 83(5) of the General Data Protection Regulation ( Article violated: Article 5) to the
    54 KB (8,279 words) - 13:53, 21 March 2024
  • Regulation) Article 1, paragraph 2, Article 5, Article 6, paragraph 1, subparagraph f, Article 17(1)(a), (c) and (d), Article 17(3)(a), Article 21(1) Judgments
    60 KB (9,713 words) - 13:07, 26 March 2024
  • people to read complete information by means of a link to this information. This was a violation of Article 12. Based on Article 13(2)(a) GDPR and WP29
    48 KB (7,404 words) - 17:09, 6 December 2023
  • details. Enforcement Notice issued by the Information Commissioner concerning contraventions of Article 5(2) and Article 35 UK GDPR by the Home Office ENFORCEMENT
    129 KB (17,281 words) - 14:57, 10 April 2024
  • decision have been taken by the controlled. 43. In view of the above, the restricted panel concludes that Article 38.3 of the GDPR does not have been respected
    66 KB (9,458 words) - 19:42, 4 September 2021
  • BAG - 9 AZR 383/19 (category Article 38(3) GDPR)
    complained, the then X AG, said the Thuringian state commissioner for data protection and freedom of information with reference to Section 4f Paragraph 2 BDSG
    40 KB (6,019 words) - 14:13, 28 November 2023
  • CNIL (France) - SAN-2019-001 (category Article 4(11) GDPR)
    January 1978 relating to information technology, files and liberties (hereafter referred to as the Data Protection Act or the Act of 6 January 1978) and
    90 KB (14,556 words) - 17:08, 6 December 2023
  • BVerfG - 1 BvR 16/13 (category Article 17 GDPR)
    not completely determined by it. This already follows from Article 1.3, Article 20.3 and Article 93.1 No. 4a of the Basic Law. According to these, the commitment
    133 KB (21,944 words) - 15:59, 22 March 2022
  • AEPD (Spain) - PS/00379/2019 (category Article 6 GDPR)
    company of the information and electronic commerce (hereinafter referred to as the ISESA), as provided for in 43.1 of the said Act. Article 85 of Law 39/2015
    26 KB (4,235 words) - 14:33, 13 December 2023
  • OLG Schleswig - 17 U 15/21 (category Article 6(1)(e) GDPR) (section Article 6(1)(e) GDPR)
    entitled to erasure under Article 17(1)(d) GDPR, as the data processing was not lawful. In any case, the requirements of Article 6 GDPR were no longer met
    51 KB (8,215 words) - 09:55, 13 May 2022
  • LG Essen - 6 O 190/21 (category Article 33 GDPR)
    provide, beyond the mere information about the data loss itself, that the information and measures mentioned in Article 33(1)(b) to Article 33(1)(d) GDPR must
    28 KB (4,596 words) - 18:30, 18 November 2021
  • on the users device. Article 82 of the French Data Protection Act The DPA explained that Article 82 of the French Data Protection Act required the provider
    73 KB (11,864 words) - 17:03, 6 December 2023
  • VG Mainz - 1 K 584/19.MZ (category Article 9(1) GDPR)
    protection law and further orders of the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate - LfDI - requiring him
    58 KB (9,665 words) - 08:51, 25 November 2020
  • exclude information from your response to a SAR merely because it is difficult to access. The Act deals with the situation where supplying information in permanent
    89 KB (14,909 words) - 08:39, 22 February 2022
  • the Spanish Act transposing the e-Privacy Directive? The AEPD held that there had been an infringement of Article 22(2) of the Information Society Services
    19 KB (2,841 words) - 14:02, 13 December 2023
  • applicable law 33. The first paragraph of Article 87 of the Data Protection Act, Article I of Title III of the Act provides: this Title shall apply without
    39 KB (6,015 words) - 17:11, 6 December 2023
  • ICO (UK) - Unite the Union (category Article 43 GDPR)
    given informed valid consent to receive such calls. The Information Commissioner (“Commissioner”) was tasked with determining whether the conduct of Unite
    12 KB (1,395 words) - 21:47, 3 April 2022
  • Datatilsynet (Denmark) - 2019-31-1424 (category Article 15 GDPR)
    Personal information is defined as any kind of information about an identified or identifiable natural person. Thus, there is no doubt that information about
    33 KB (5,189 words) - 16:23, 6 December 2023
  • CNIL (France) - SAN-2022-025 (category Article 4(11) GDPR)
    Did the provider violate Article 82 of the Data Protection Act? The DPA explained that Article 82 of the Data Protection Act required the provider to ask
    82 KB (13,463 words) - 17:03, 6 December 2023
  • CNPD (Luxembourg) - Délibération n° 47FR/2021 (category Article 5(1)(c) GDPR)
    second level of information information, i.e. the information note available on the website, contains all the information required under Article 13 of the GDPR
    69 KB (11,315 words) - 13:30, 19 January 2022
  • ICO - FS50777458 (category Article 4(1) GDPR)
    freedoms. The commissioner therefore considers that there is an Article 6 basis for processing (in this case article 6(1)(f). Moreover, the Commissioner specifies
    6 KB (725 words) - 16:13, 7 March 2022
  • pursuant to Article 17(2) DPA Act. 9. Moreover, as regards the one-stop-shop mechanism, Article 56 GDPR states: "Without prejudice to Article 55, the supervisory
    429 KB (58,279 words) - 09:12, 2 November 2022
  • APD/GBA (Belgium) - 37/2020 (category Article 17 GDPR)
    provided for in Article 56(1), read in conjunction with Article 56(2), read in conjunction with Article 56(3), read in conjunction with Article 56(4), read
    131 KB (22,429 words) - 16:57, 12 December 2023
  • BVerfG - 1 BvR 276/17 (category Article 17 GDPR)
    the Federal Commissioner for Data Protection and Freedom of Information, the Hamburg Commissioner for Data Protection and Freedom of Information as well as
    127 KB (21,367 words) - 16:00, 22 March 2022
  • CNIL (France) - SAN-2022-022 (category Article 12(3) GDPR)
    requests were requests for information according to Article 15(1) GDPR. The ‘Business secrecy’ exception only applied to Article 15(4) GDPR, where a data
    59 KB (9,623 words) - 17:03, 6 December 2023
  • Commissioner (Cyprus) - 1.17.001.007.270 (category Commissioner (Cyprus))
    the Commissioner required information from AAEA with respect to the processing of X's personal data. AAEA however did not reply to the Commissioner. The
    64 KB (10,097 words) - 08:07, 27 October 2021
View (previous 50 | ) (20 | 50 | 100 | 250 | 500)