Search results

the Head of the DPA. This decision can then only be challenged by an action before an administrative court (judicial review - on a question of law). In

electronic form according to § 14(3) BDSG at bfdi.bund.de (in German). In case of an obviously unjustified complaint or excessive complaints from one complainant

Hamburg. The Hamburg DPA is divided into different departments. It offers an organigram here. There is a Data Protection Act of Hamburg (Hamburgisches

supervisory authority Article 78: Right to an effective judicial remedy against a supervisory authority Article 79: Right to an effective judicial remedy against

The Catalonian DPA (Autoritat Catalana de Protecció de Dades, in Catalan, or Autoridad Catalana de Protección de Datos, in Spanish) is the regional Data

supervisory authority Article 78: Right to an effective judicial remedy against a supervisory authority Article 79: Right to an effective judicial remedy against

The Data Protection Office (Valstybinė duomenų apsaugos inspekcija) is the national Data Protection Authority for Lithuania. It resides in Vilnius and

The Bulgarian Data Protection Authority (Комисия за защита на личните данни) is the national Data Protection Authority for Bulgaria. It resides in Sofia

The Portuguese Data Protection Authority (Comissão Nacional de Protecção de Dados) is the national Data Protection Authority for Portugal. It resides in

the Slovak DPA has issued penalties in an amount of 132 600 €. The highest penalty imposed on the controller was an amount of 50 000 € for breaching obligations

The Baden-Württemberg DPA (Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg) is the state Data Protection Authority

The Hesse DPA (Hessischer Beauftragter für Datenschutz und Informationsfreiheit) is the state Data Protection Authority for the German state of Hesse.

The Rhineland-Palatinate DPA (Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz) is the state Data Protection Authority

The Bavaria public sector DPA (Bayerischer Landesbeauftragter für den Datenschutz) is the state Data Protection Authority for the public sector for the

The Saarland DPA (Unabhängiges Datenschutzzentrum Saarland) is the state Data Protection Authority for the German state of Saarland. It is charge of enforcing

The Saxony DPA (Sächsische Datenschutzbeauftragte) is the state Data Protection Authority for the German state of Saxony. It is in charge of enforcing

The Bavaria DPA (Bayerisches Landesamt für Datenschutzaufsicht) is the state Data Protection Authority for the German state of Bavaria. It is in charge

The Bremen DPA (Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen) is the state Data Protection Authority for the

The Saxony-Anhalt DPA (Landesbeauftragter für den Datenschutz Sachsen-Anhalt) is the state Data Protection Authority for the German state of Saxony-Anhalt

supervisory authority Article 78: Right to an effective judicial remedy against a supervisory authority Article 79: Right to an effective judicial remedy against

district administration court (Verwaltungsgericht) in Düsseldorf. Regularly an appeal against the courts decision is possible at the Superior Administrative

The State Data Protection Inspectorate (Datenschutzstelle) is the national Data Protection Authority for Liechtenstein. It resides in Vaduz and is in charge

The Mecklenburg-Vorpommern DPA (Landesbeauftragte für den Datenschutz Mecklenburg-Vorpommern) is the state Data Protection Authority for the German state

The Brandenburg DPA (Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht) is the state Data Protection Authority for the German state

The Schleswig-Holstein DPA (Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein) is the state Data Protection Authority for the German state

The Thuringia DPA (Thüringer Landesbeauftragte für den Datenschutz und die Informationsfreiheit) is the state Data Protection Authority for the German

The Basque DPA (DBEB, Datuak Babesteko Euskal Bulegoa, in Basque or AVPD, Agencia Vasca de Protección de Datos, in Spanish) is the regional Data Protection

The Andalusian DPA (Consejo de Transparencia y Protección de Datos de Andalucía) is the regional Data Protection Authority for the Spanish autonomous region

The Ålandic DPA (Datainspektionen på Åland, in Swedish) is the regional Data Protection Authority for Finland's autonomous region of Åland. It is in charge

own motion. They provide an overview of their policy to ex officio supervision on their webpage. In addition they provide an overview over which sectors

Verlag 2017). Generally, when terms are not defined in Union law, they take on an autonomous meaning, any definitions drawn from national law cannot be relied

EDPS reaches 100 employees. In 2019, the EDPS starts supervising Eurojust - an EU agency in charge of combating serious forms of crime - in its processing

supervisory authority Article 78: Right to an effective judicial remedy against a supervisory authority Article 79: Right to an effective judicial remedy against

regards to assessing safeguards whether the presence of an ombudsperson can ensure that the US provides an effective remedy to data subjects whether the SCCs

The adherence of the processor to an approved code of conduct or an approved certification mechanism may be used as an element to demonstrate compliance

advising the Commission. Article 71 GDPR states that the EDPB must draw up an annual report regarding the protection of natural persons with regard to data

on European Union, where an interpretation of the Treaties is not comprehensible and must thus be considered arbitrary from an objective perspective. If

The CJEU held that an Internet search engine operator is considered the controller (Article 2(d) Directive 95/46) in respect of the processing (within

Planet49 organized an online lottery hosted on their webpage. In order to participate in the lottery the participant had to enter a name and an address. Underneath

indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors

28 February 2022, the data subject filed an access request. Example: Not On 28.02.2022, the data subject filed an access request. Example: Not On February

submitted by a candidate at a professional examination and any comments made by an examiner with respect to those answers constitute personal data. The claimant

activities of an establishment of the controller on the territory of the Member State. It stated this notion of 'in the context of the activities of an establishment'

Directive 96/45 is defined as information relating to an identified or an identifiable natural person. Also, an identifiable person is one who can be identified

of such assumed political opinions of him. Therefore, the claimant brought an action for non-material damages before the Regional Court for Civil Law Matters

Compliance with an approved code of conduct referred to in Article 40 or an approved certification mechanism referred to in Article 42 may be used as an element

further considers that a company, an autonomous legal person, of the same group as the controller, can constitute an establishment of the controller within

of the data subject's age that a refusal to disclose to an injured party personal data is not an appropriate measure when these data are necessary to initiate

concept of an undertaking, as defined in Articles 101 and 102 TFEU, and the principle of an economic entity, with the result that proceedings for an administrative

indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors