Search results
From GDPRhub
- article 3 of the French Data Protection Act because the use of cookies is carried out within the framework of the activities of the company Google France which93 KB (14,936 words) - 17:09, 6 December 2023
- Authority for the Spanish autonomous region of the Basque Country. It is in charge of enforcing the GDPR in the public sector within the Basque Country3 KB (195 words) - 13:21, 15 September 2021
- DI-2020-11373 2(23) Date: 2023-06-30 2.2.1 Applicable regulations, etc. ................................................... .....9 2.2.2 The Privacy Protection113 KB (12,773 words) - 15:20, 6 December 2023
- Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 2) (category Article 5(2) GDPR) (section English Machine Translation of the Decision)in line with the GDPR. Furthermore, until the Municipality of Helsingor complies with the GDPR, the DPA suspended transfers of data to the United States75 KB (11,733 words) - 16:33, 21 August 2022
- Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 1) (category Article 5(2) GDPR) (section English Machine Translation of the Decision)high. . The warning shall be issued in accordance with Article 58 (2) of the Data Protection Regulation. 2, letter a. If the assessments of the risk made48 KB (7,442 words) - 10:24, 12 September 2022
- Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 3) (category Article 58(2)(f) GDPR) (section English Machine Translation of the Decision)Article 36(1), the ban is effective until the DPA has provided such consultation as per Article 36(2) or the DPA otherwise permits the processing until117 KB (18,075 words) - 10:19, 12 September 2022
- AKI (Estonia) - EDPBI:ee:OSS:d:2022:343 (category Article 7(2) GDPR) (section English Machine Translation of the Decision)at a German DPA (not clear which German DPA) on 2 January 2020, which transferred the complaint on 7 May 2020 to the Estonian DPA (DPA), the lead supervisory42 KB (5,644 words) - 14:35, 30 November 2022
- informed of outcome of the investigation would compromise the objectives of GDPR. The CJEU added that a DPA assessing a complaint has a margin of discretion15 KB (2,180 words) - 08:23, 13 December 2023
- decision on the language of the proceedings. Interlocutory decision 01/2021 - 4/6 2. Motivation 10. As part of the analysis of the language of the proceedings19 KB (2,707 words) - 16:50, 12 December 2023
- and means of the collection and subsequent transfer of those personal data. The DPA confirmed that CDON AB is the controller. Thirdly, the DPA investigated121 KB (13,722 words) - 15:16, 5 July 2023
- translation of the final decision to the provide parties. 3. On 4 February 2021, the DPA also provided the parties with the inspection report of 13 July 20208 KB (1,156 words) - 16:56, 12 December 2023
- ...11 2.2.2 The Privacy Protection Authority's assessment...................................13 2.3 Coop is the personal data controller for the processing115 KB (12,842 words) - 08:38, 5 July 2023
- Following the complaint, the DPA investigated the data transfers from the controller to the US through the use of Google Analytics. In its defense, the controller131 KB (14,752 words) - 08:36, 5 July 2023
- Data Protection in Greece (section Age of consent)Articles 2, 3(2)(b), 13(3), 15(1), 18(2) and (3) and 21 which remain in force according to Article 84 L. 4624/2019; 2) L. 4579/2018 on the obligations of air10 KB (1,037 words) - 14:52, 10 July 2020
- CJEU - C‑131/12 - Google Spain (section Responsibility of the operator of a search engine under Directive 95/46)Directive 95/46 … be applied, in the light of Article 8 of the [Charter], in the Member State where the centre of gravity of the conflict is located and more16 KB (2,423 words) - 13:03, 1 June 2023
- deposit in the amount of 110% of the amount enforceable on the basis of the judgment unless the judgment creditor provides security in the amount of 110% of52 KB (8,574 words) - 16:03, 10 March 2022
- BVwG - W258 2217446-1 (category Article 9(2) GDPR) (section Data on the "affinity for a political party" as special categories of personal data?)against the Austrian Postal Service. The DSB investigated i.a the records of processing activities and the data protection impact assessment of the Austrian79 KB (12,652 words) - 09:41, 10 September 2021
- Court of Appeal of Brussels - 2019/AR/1600 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)Article 82(2) GDPR. Most importantly, the controller challenged two of the three findings of the DPA, which had led to the fine: the absence of a valid legal60 KB (9,144 words) - 16:17, 22 March 2022
- EDPB - Binding Decision 3/2022 - 'Meta (Facebook)' (section English Machine Translation of the Decision)this case, the GDPR" (116). Turning to the facts of the case, the EDPB outlines a number of factors which, in contradiction to the view of the DPC, support53 KB (8,413 words) - 14:10, 30 January 2023
- those of the other persons attending the general meeting. The data subject filed a complaint with the Hungarian DPA asking it to order the controller to9 KB (1,308 words) - 12:54, 28 June 2023
- CNIL (France) - SAN-2019-005 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)principle of article 5(1)(e) GDPR as the purpose of the processing had been reached by awarding the lease to one of the candidates. The DPA sanctioned the company41 KB (6,558 words) - 17:09, 6 December 2023
- HDPA (Greece) - 3/2022 (category Article 58(2)(f) GDPR) (section English Machine Translation of the Decision)A' 137), within the framework of the powers provided for in Articles, 4 para. 3(a) and 10(3)(a) and (10)(a) 4 of the Authority's Rules of Procedure (Government11 KB (1,492 words) - 13:09, 23 November 2022
- Tietosuojavaltuutetun toimisto (Finland) - 4680/182/18 (category Article 9(2)(a) GDPR) (section English Machine Translation of the Decision)process the insurance application and any compensation case. The registrar states that the provision of Section 13, subsection 2 of the Act on the Status49 KB (7,496 words) - 14:44, 24 January 2024
- Personvernnemnda (Norway) - 2021-20 (20/01648) (section English Machine Translation of the Decision)83(2) GDPR, and in which case, how large it should be. The Board agreed with the DPA that the installation of the camera was not discussed with the employees31 KB (5,018 words) - 18:44, 5 March 2022
- rowspan="2" width="3"><img src="http://www.dpa.gr:80/APDPXPortlets/images/menutop_space.jpg" width="3" height="104"></td><!--/*++++++++++++++++++++++++2 Υπο56 KB (7,755 words) - 15:39, 6 December 2023
- HDPA (Greece) - 20/2023 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)such, the DPA ordered the controller to comply with the access request and issued a fine of: a) €60,000 for the violation of Article 21(3) GDPR as the controller6 KB (634 words) - 17:48, 17 July 2023
- BVwG - W211 2222613-2/12E (category Article 15(3) GDPR) (section English Machine Translation of the Decision)Is the term 'copy' in Article 15(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals51 KB (8,592 words) - 07:03, 2 November 2021
- Court of Appeal of Brussels - 2020/AR/1160 (First Interim Decision) (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)- 2020/AR/1160 -p. 3 3. Legal framework for the restricted debate. 3.1. Article 108 of the Law of 3 December 2017 establishing the Data Protection Authority25 KB (3,812 words) - 10:03, 20 August 2021
- Personvernnemnda (Norway) - 2018-14 (15/01355) (category Article 9(2)(a) GDPR) (section The relationship to freedom of speach and processing for journalistic purposes)Consequently, the DPA's decision item 8 was removed entirely, as the introduction of the GDPR removed the requirement for a license from the DPA to process144 KB (23,058 words) - 18:48, 5 March 2022
- Court of Appeal of Brussels - 2022/AR/549 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)legal basis for the processing of data. The DPA therefore considered that the controller had a legitimate interest for the processing of the data subject's37 KB (5,765 words) - 09:53, 14 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 6689/186/20 (section English Machine Translation of the Decision)correspondence on the matter by e-mail with the representatives of the data controller. Part of the correspondence has been delivered to the Office of the Data Protection41 KB (6,555 words) - 08:37, 4 March 2024
- APD/GBA (Belgium) - 149/2023 (category Article 7(3) GDPR) (section English Machine Translation of the Decision)erasure, the DPA concluded a breach of Article 12(3) GDPR. Regarding the request for the NRN data, the DPA agreed with the controller that to access the information113 KB (17,325 words) - 08:50, 19 March 2024
- associated the requirement to provide identifying data with the transfer of data to a company based in the United States of America. 2. 2. The same question30 KB (4,708 words) - 16:56, 6 December 2023
- ANSPDCP (Romania) - Fine against Telekom Romania mobile communications S.A. 2 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)violation of the provisions of art. 32 para. (1) and para. (2) of the General Regulation on Data Protection and violation of the provisions of art. 3 para.7 KB (900 words) - 15:18, 13 December 2023
- considered the risks that some of the addresses could be secret/protected. In the view of the DPA, those addresses entailed a high risk for the rights of the24 KB (3,365 words) - 16:37, 6 December 2023
- EWCA (UK) - WM Morrison Supermarkets Plc v Various Claimants (redirect from EWCA (UK) - A2/2018/0090) (section English Machine Translation of the Decision)excluded by the DPA in respect of the wrongful processing of data within the ambit of the DPA and the trial judge was right to hold that the common law87 KB (14,773 words) - 09:28, 1 March 2022
- APD/GBA (Belgium) - 21/2022 (section Joint controllership of publishers, CMPs and adtech vendors with regard to the means and purposes of the processing of personal data within the context of the TCF and of the OpenRTB)established "the purpose of the TC String, and in the broader sense of the processing of the TC String within the TCF as translated into the TCF Policies"429 KB (58,279 words) - 09:12, 2 November 2022
- Tietosuojavaltuutetun toimisto (Finland) - 8493/161/21 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)had processed the personal data in violation of the transparency principle. On the basis of the information gathered, the DPA held that the controller had52 KB (7,936 words) - 22:32, 2 March 2024
- Territorial competence of the French DPA In order to assess if the DPA was territorially competent to handle this decision under Article 3 of the French Data Protection73 KB (11,864 words) - 17:03, 6 December 2023
- EDPB - Binding Decision 1/2021 - 'WhatsApp' (section Additional infringement of the principle of transparency)found between the DPC and the concerned DPAs, on 3 June 2021, the DPC decided to refer the dispute to the EDPB. The task of the EDPB was to issue a binding29 KB (4,384 words) - 16:00, 6 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 4356/532/19 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)practice on the part of the credit information companies, as it is impossible for the operative part of the judgment to give an accurate picture of the debtor's43 KB (6,671 words) - 08:49, 27 January 2022
- Tietosuojavaltuutetun toimisto (Finland) - 834/532/18 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)practice on the part of the credit information companies, as it is impossible for the operative part of the judgment to give an accurate picture of the debtor's43 KB (6,677 words) - 08:47, 27 January 2022
- Datatilsynet (Norway) - 20/02178 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)documentation, to the DPA within four weeks (unless they appeal the decision). Following the DPA's notification of a decision, the company argued that the penalty7 KB (802 words) - 18:53, 17 May 2022
- into account the following. As aggravating factors, the DPA considered the intentionality of the infringement, since the installation of the system was intentional;74 KB (11,726 words) - 13:02, 13 December 2023
- Helsingin hallinto-oikeus (Finland) - 3620/2023 (section English Machine Translation of the Decision)request - the date of the call - the date of the reception visit - the date of the procedure (two different procedure dates) - the date of the reception visit22 KB (3,193 words) - 10:34, 29 February 2024
- 61 of the Act of 3 December 2017 and the complaint will be transferred to the Dispute Chamber under Article 62(1) of the Act of 3 December 2017. 3 On 2748 KB (7,926 words) - 16:56, 12 December 2023
- identifiers on devices of data subjects. The DPA also discussed the difference between the ePrivacy directive and the GDPR. The DPA stated that the reading/writing82 KB (13,463 words) - 17:03, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9860529 (section English Machine Translation of the Decision)as, in paragraph 3, that in the event of dissemination of data for journalistic purposes, the limit of the "essential nature of the information regarding16 KB (2,354 words) - 15:45, 6 December 2023
- FOUNDATIONS OF LAW Yo By virtue of the powers that article 58.2 of the RGPD recognizes to each authority of control, and according to the provisions of articles27 KB (4,121 words) - 15:06, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 8211/161/19 (category Article 24(2) GDPR) (section English Machine Translation of the Decision)practice on the part of the credit information companies, as it is impossible for the operative part of the judgment to give an accurate picture of the debtor's42 KB (6,579 words) - 08:46, 27 January 2022