Search results

as to the reliability of the AOD in the case - who, after all, is an entity with an interest in not disclosing the fact of the breach committed by its

Article 83 of the RGPD that an administrative fine of EUR 500 000, an injunction accompanied by a periodic penalty payment and an additional publication penalty

com/abstract=3319284. 10, i. An end user requests a web page; ii. The publisher's ad server on the web page selects an SSP; iii. The SSP then selects an Ad exchange; iv

Chamber emphasises that the purpose of imposing an administrative fine is not to only to put an end to an offence committed but, above all, to ensure effective

are monitored by an independent body. Art. 47 Charter of Fundamental Rights of the European Union – Right to an effective remedy and an impartial court

therein do not allow an individual to challenge in court the election procedure of the head of a DPA. This judgement stemmed from an appeal against a decision

its usual meaning, indicates a “faithful reproduction or transcription of an original” in opposition to a “purely general description” of data. The true

necessarily understand that they are seeing an ad or how an ad has been targeted towards them. • There is also an assessment of the impact on human rights

storage of the ID. Consent is also not valid if data subjects must complete an additional form setting out that refusal. Orange  România SA is a  provider 

2021, it appears that «[…]». The company is now planning an IPO in 2022. The audit points out that an IPO of a company means that the public has a clear interest

its holder. When an advantage or service is offered to a citizen by means of his identity card as part of a computer application, an alternative that does

luz Energía (SIE) to via an SMS. 2nd. There is certification of the digital signature of the supply contract by sending of an SMS with SIE, on July 14

The HDPA of Greece examined the complaint of an employee of the Hellenic Electricity Distribution Network Operator S.A. against the latter regarding a

Regulation as follows: "Any information about an identified or identifiable natural person (" the data subject "); an identifiable natural person is a person

Article 22(1) GDPR. In particular, it asked whether an automated creation of a credit score value constitutes an automated decision within the meaning of this

about the health of an employee of such service, when those data are required for determining that employee's working capacity. Allowing an exception to the

Article 83(5) GDPR provides that an infringer may be subject to an “administrative fines up to 20 000 000 EUR, or in the case of an undertaking, up to 4 % of

a delivery address is an absolute necessity for the delivery of goods to the customers. Thus, Intervare does not detect whether an address is secret, as

An employee had submitted a complaint to the Greek Data Protection Authority about the video surveillance in the store in which she had worked. The Greek

personal data passed on to an uninvolved and unauthorized third party. This will make the Plaintiff exposed and there is also an indirect threat of potential

to process sensitive personal data When you leave an assessment on Legelisten.no, you must provide an e-mail address. For many, the email address contains

The Rotterdam Court of First Instance rejected an access request to procedural files before the State of the Netherlands as inadmissible. The Court ruled

property is Ms. A.A.A. with an e-mail address for notification purposes ***EMAIL.1 and the tenants are Mr. B.B.B. and Ms. C.C.C., with an e-mail address for notification

section 25 of the Data Protection Act (1050/2018), an appeal against this decision may be lodged with an administrative court in accordance with the provisions

resolution may be considered as an infraction. administrative action in accordance with the provisions of the RGPD, classified as an infraction in its article

Authority first.C/ES/3409/13-05-2019 complaint by A concerning receipt of an unclaimed communication policy (e-mail message) to promote the candidacy of

breach is an objective fact that does not coincide with the controller’s lack of appropriate security measures – i.e. the mere GDPR infringement. An annoyance

Supervisory Authority, “an agreement whereby a minor user consents to the processing of his or her personal data in connection with the use of an information society

ordered CARREFOUR BANQUE to pay an administrative fine of €800000. Insofar as the company took the necessary measures to put an end to the breaches of which

complaint under Article 77 GDPR. A data subject made an access request with an address publisher and direct marketing company, the controller, asking it specifically

restricted committee of the Commission impose an administrative fine on the two companies, as well as an injunction to bring into compliance the processing

recipient, and revoked), by the exporter or by an entity trusted by the exporter under a jurisdiction offering an essentially equivalent level of protection

Oy, a company that keeps a credit information register. This register gives an overview of the creditworthiness of debtors, whose debts are shown in the

person, to an indeterminate number of individuals sicas 3. An approved certification mechanism may be used in accordance with article 42 as an element that

not support as an interpretation that the legislator intended to extend the concept of "insured party" to apply also to the applicant an insurance before

construction of an office building. During the project, workers who carried out activities at the construction site registered their presence through an electronic

the claimant). The claimant states that, on January 3, 2019, he submitted an e-mail requesting the cancellation of the inclusion of his data in the Asnef

by default (Article 25(2) GDPR). The DPA suggested that if an insurance company requests an individual's health information from healthcare services, the

indirectly, in particular by means of an identifier, such as example a name, an identification number, location data, an online identifier or one or more elements

validation for an email that did not belong to the data subject. The AEPD pointed out a violation of Article 6(1) GDPR by processing data without an adequate

Letter b) GDPR to. The provision only lists the frequent repetition as an example of an "excessive" application on. However, the use of the word "in particular"

fixed phone of his office so that, in the event of an inconvenience, the recipient could request an exemption from a possible subsequent shipment. 5) Some

context, the one in which an interested party can issue the required declaration by filling in an electronic form, sending an email, uploading a scanned

data as follows: «Any information about an identified or identifiable natural person (« the registered »); An identifiable natural person is a person who

on final convictions in the credit information register Thing Correction of an error in the credit information register and entry of default information

data with AFS. The DPA opened an investigation regarding the controller. In the procedure, the controller stated that it had an agreement with AFS for the

that it had submitted an request for erasure (Article 17 GDPR), but had never received an answer form the controller. The DPA started an investigation following

to which the vacancy notice for a vacancy for an official position, including a managerial position for an official, and for the recruitment of candidates

​​constitutional protection of telecommunications includes, alongside an objective dimension, an indispensable subjective dimension, Thus, it is important to consider

electoral census for delivery to political parties (date 06/03/2019).On 17/05/2019 an envelope with a miniature name and address, with the letterhead of the PSC