Search results

exercise of these rights are established in the Articles 12 of the GDPR and 12 of the LOPDGDD. It also takes into account what is stated in Considering

Personal Data and guarantee of digital rights (hereinafter LOPDGDD). SECOND: Article 64.1 of the LOPDGDD, provides that: "one. When the procedure refers exclusively

icons and procedures for providing standard icons. " FOURTH: Article 12 of the LOPDGDD determines the following: 1. The rights recognized in articles 15 to

Therefore, the controller breached Article 18 GDPR as well as Article 12.4 LOPDGDD under which the controller must send a mandatory response to the data

Article 16 GDPR and Article 14 of LOPDGDD, the national data protection law, the DPA stated that Article 12(4) LOPDGDD obliges the controller to provide

exercise of these rights are established in the articles 12 of the RGPD and 12 of the LOPDGDD. Furthermore, what is expressed in Considering 59 and following

(in C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 2/12 hereinafter LOPDGDD), said claim was transferred to OES so that proceed to its analysis

allows easy and immediate access to the rest of the information.” Article 12.2 LOPDGDD: “2. The person in charge of the treatment will be obliged to inform

queries were made in the following dates: 05/29/2019; 05/28/2019; 12/13/2019; 12/10/2018 and 12/09/2018. b. Letter from EQUIFAX, dated 06/10/2019, responding

exercise of these rights are established in the Articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considering

exercise of these rights are established in the Articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considering

articles must be complied with. 12 and 13 of the RGPD, and 22 of the LOPDGDD. In this sense, article 22 of the LOPDGDD provides in relation to video surveillance

with the provisions of article 77.5 of the LOPDGDD. In accordance with the provisions of article 50 of the LOPDGDD, this Resolution will be made public once

exercise of these rights are established in the Articles 12 of the GDPR and 12 of the LOPDGDD. It also takes into account what is stated in Considering

of 5/12, of Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD), Said claim was transferred to the claimed party on 12/23/2021

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), said claim was transferred to the claimed party in faith. cha 09/14/22

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), said claim was transferred to the claimed party in faith. cha 01/09/22

b) the rights of the interested parties under articles 12 to 22; (…)” In this regard, the LOPDGDD, in its article 71 “Infringements” establishes that “The

2022. SECOND: On October 7, 2022 in accordance with article 65 of the LOPDGDD, the claim presented by the claimant party was admitted for processing.

requirements of the LOPDGDD. It is noted, as claimed, that the data reported on December 10, 2018, were not blocked the period required in the LOPDGDD being visible

affected provided for in articles 12 and 13 of the GDPR, and 22 of the LOPDGDD. In this sense, article 22 of the LOPDGDD provides in relation to video surveillance

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), said claim was transferred to the Community, so that proceed to its analysis

writing dated 12/12/2022 requested an extension of the deadline to make allegations, which was granted by the procedure instructor. On 12/23/2022, the defendant

Madrid sedeagpd.gob.es 12/25 lockers or worker rest areas. This is expressly established in the aforementioned article 89 of the LOPDGDD in relation to with

from 10/5/21 to 12/9/2021 and List of Accesses made by Attention Specialized in Fuerteventura General Hospital from 10/6/2021 to 10/12/2021. In this document

card and in the name of the applicant, A.A.A., in the period from 31/12/10 to 15/09/12. This information is sent by email to the same email from which the

Protection of Personal Data and guarantee of digital rights (in forward LOPDGDD), said claim was transferred to Holaluz, so that proceed to its analysis

B) (…) C / Jorge Juan 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es Page 12 12/124 C) Regarding the content of the Privacy Policy, it highlights that it

article 50 of the LOPDGDD, this Resolution will be made public once it has been notified to the interested parties..6 of the LOPDGDD, and in accordance

the exercise of these rights are established in articles 12 of the GDPR and 12 of the LOPDGDD. Furthermore, what is expressed in Recitals 59 et seq. of

(EU) 2016/1250 of the Commission, of July 12, 2016, as well as, subsequently, in the application, as of August 12, 2020, of the standard contractual clauses

withdrawal without support 12-11-2019 300.00 Transfers XXXXXX 12-11-2019 900.90 Transfers XXXXXX 12-11-2019 779.90 Transfers XXXXXX 12-11-2019 810.90 It is proven

exercise of these rights are established in the Articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considering

the exercise of these rights are established in articles 12 of the GDPR and 12 of the LOPDGDD. Furthermore, what is expressed in Recitals 59 et seq. of

personal character. Article 22.4 of the LOPDGDD provides that: “The duty of information provided for in article 12 of the Regulation (EU) 2016/679 will be

exercise of these rights are established in the articles 12 of the RGPD and 12 of the LOPDGDD. Furthermore, what is expressed in Considering 59 and following

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), said claim was transferred to VODAFONE, so that proceed to its analysis

exercise of these rights are established in the articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considerations

exercise of these rights are established in the articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considerations

the exercise of these rights are established in articles 12 of the GDPR and 12 of the LOPDGDD. Furthermore, what is expressed in Recitals 59 et seq. of

exercise of these rights are established in the Articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considerations

65.4 of Organic Law 3/2018, of 5/12, of Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD), said claim was transferred to

sedeagpd.gob.es 4/12 Specific reasons for their appointment may be established by the Law of the Union or of the Member states. Article 4 section 12 of the RGPD

for infringing Article 21 GDPR, Article 48(1)(b) LGT, and Article 23(4) LOPDGDD. The initial proposed fine was €10000 however, it was reduced to €6000,

exercise of these rights are established in the Articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considerations

exercise of these rights are established in the articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considerations

C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 2/12 the news published on 12/27/21, revealing in the letter "that the disciplinary dismissal

(2) (c) LOPDGDD and, having the figure of the data protection delegate even though it is not obligatory for the company (Article 76 (2) (g) LOPDGDD). Furthermore

of the interested parties in accordance with articles 12 to 22; (…)” In this regard, the LOPDGDD, in its article 71 "Infractions" establishes that "The

exercise of these rights are established in the articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considerations

Personal Data and guarantee ofdigital rights (hereinafter LOPDGDD).SECOND: Article 64.1 of the LOPDGDD , provides the following:"one. When the procedure refers

installing a video surveillance camera system violating Article 22 LOPDGDD and Article 12 GDPR? The Spanish DPA found that the defendant could install the

measures" of the LOPDGDD: The balance of the circumstances contemplated in article 83.2 of the GDPR and the Article 76.2 of the LOPDGDD, with respect to

exercise of these rights are established in the Articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considering

Personal Data and guarantee of digital rights (hereinafter LOPDGDD). SECOND: Article 64.1 of the LOPDGDD provides the following: "one. When the procedure refers

Personal Data and guarantee of digital rights (hereinafter LOPDGDD). SECOND: Article 64.1 of the LOPDGDD , provides the following: "one. When the procedure refers

exercise of these rights are established in the Articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considering

Order of 25 January 2017 amending the Order of 12 March 2013 (...) (DOG01/02/2017). Article 30 of the Order of 12 March 2013 (...) establishes the following:

with the provisions of article 64 of the LOPDGDD. C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 11/12 Finally, it is pointed out that in accordance

pursuant to Articles 12 to 22; […]. " For the purposes of the statute of limitations for the offense, article 72.1 of the LOPDGDD establishes: "Based on

ntee of Digital Rights (hereinafter referred too as LOPDGDD). SECOND: Article 64.1 of the LOPDGDD, provides the following: "1. When the procedure refers

in cases of video surveillance, Article 22.4 LOPDGDD provides that the duty of disclosure in Article 12 GDPR may be fulfilled by placing a sign near surveillance

GDPR as well as Article 7 of the Spanish Law on Personal Data Protection (LOPDGDD). The Spanish controller of the web page banderacatalana.cat, informs on

duty to inform those affected provided for in articles 12 and 13 of the RGPD and 22.4 of the LOPDGDD. - The person in charge must keep a record of treatment

due to an out-of-date data processing system. As regulated in article 77 LOPDGDD it will be agreed that the sanction corresponds to a "warning" when the

es 2/7 protection of personal data (RGPD-LOPDGDD) and Delegate Service of Data Protection, for a period of 12 months. In good time before the date of termination

exercise of these rights are established in the articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considerations

Personal Data and Guarantee of digital rights (hereinafter LOPDGDD). SECOND: Article 64.1 of the LOPDGDD, provides the following: "1. When the procedure concerns

exercise of these rights are established in the Articles 12 of the RGPD and 12 of the LOPDGDD. It also takes into account what is expressed in Considering

anddGuarantee of Digital Rights (hereinafter referred too as LOPDGDD). SECOND: Article 64.1 of the LOPDGDD, provides the following: "1. When the procedure refers

initiation C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es Page 12 12/12 of the procedure and its effectiveness will be conditioned to the withdrawal

information would be 12/09/2018. On that date, the current data protection regulations were the RGPD and the LOPDGDD (entered into force on 12/07/2018). And the

always the duty to inform the affected parties as provided for in Article 12 GDPR and Article 13 GDPR. According to Article 30(1) GDPR a record must be

control, etc., following their resignation as trustees of the Foundation on 13/12/2018. • The facts have been reported to the Court of Instruction of San Vicente

required. They rejected the rest of the generic request with grounds on Article 12(5). The university alleged that they had tried to answer to the request on

On 12/12/2018, the webpage of the Spanish political party VOX suffered a cyber-attack that allowed access to the entity’s newsletter subscribers database

since 12/02/2014 Mr. B.B.B .. The document informs that the claimant was a sole partner and POUSEN sole administrator between 03/12/2009 and 12/02/2014

Personal Data and Guarantee of digital rights (hereinafter LOPDGDD). SECOND: Article 64.1 of the LOPDGDD, provides the following: "1. Where the procedure relates

Personal Data and Guarantee of digital rights (hereinafter LOPDGDD). SECOND: Article 64.1 of the LOPDGDD, provides that "1. Where the procedure relates solely

exercise of these rights are established in the articles 12 of the RGPD and 12 of the LOPDGDD. Furthermore, what is expressed in Considering 59 and following

the current LOPDGDD, nor in RD 389/2021, of June 1, 2021, by which the new Statute of the AEPD is approved, which precisely in article 12.3 establishes

Personal Data and guarantee of digital rights (hereinafter LOPDGDD). SECOND: Article 64.1 of the LOPDGDD, provides that: "one. When the procedure refers exclusively

affected provided for in articles 12 and 13 of the GDPR, and 22 of the LOPDGDD. In this sense, article 22 of the LOPDGDD provides in relation to video surveillance

of said Law. C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 12/12 II Article 85 of Law 39/2015, of October 1, on Administrative Procedure Common

- Madrid sedeagpd.gob.es 5/12 Organic Law 3/2018, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD) in its article 72, under

a personal nature. Article 22.4 of the LOPDGDD provides that: "The duty of information provided for in article 12 of Regulation (EU) 2016/679 is shall be

claim, on 12/14/2018, the General Sub-Directorate ofData Inspection proceeded, in accordance with article 65.4 of Organic Law 3/2018,of 5/12, Protection

Protection>>C / Jorge Juan, 6www.aepd.es28001 - Madridsedeagpd.gob.es Page 12 12/13SECOND : On June 18, 2020, the requested party has paid thesanction in

interested parties. C/ Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 12/12 Against this resolution, which puts an end to the administrative procedure

least, since 08/12/2018. Circumstance which, together with the claimant's statement in the date on which he filed his complaint, 26/12/2018, that the operator

Article 50 of the LOPDGDD, this Resolution will be made public once it has been notified to the interested parties..6 of the LOPDGDD, and in accordance

Data and guarantee of digital rights (in hereinafter, LOPDGDD), being returned as "unknown" on 12/20/2019. In view of the foregoing, the State Tax Administration

surveillance purposes, article 22.4 of the LOPDGDD provides that: “The duty of information provided for in article 12 of Regulation (EU) 2016/679 is will be

Digital Rights (LOPDGDD), on 12/12/2018 the agreement of admission to process this claim is signed. In accordance with article 67.1 of the LOPDGDD, the Data

parties under articles 12 to 22; (…)”. For the purposes of the limitation period, article 74 “Infringements considered minor” of The LOPDGDD indicates: “The remaining

Protection of Personal Data and guarantee of digital rights (in hereafter LOPDGDD), said claim was forwarded to BBVA so that proceed to its analysis and inform

service, on 09/12/2022 check that the video indicated in the claim is at the internet address ***URL.2 has been removed. FOURTH: On 12/23/2022, the Director

the following FIRST FACTS: Mrs. A.A.A. (*hereinafter, the claimant) on June 12, 2019 filed a complaint with the Spanish Data Protection Agency. The claim

Data Protection Personal Rights and Guarantee of Digital Rights (LOPDGDD), published on 12/06/18 It is indicated, upon its entry into force, in its sixteenth

Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 4/12 digital rights (hereinafter, LOPDGDD), the Director of the Spanish Agency Data Protection is

accordance with Article 77.2 of the LOPDGDD. FIFTH: Once the aforementioned agreement was notified, in a letter dated 10/12/2019, the claimant presented a brief

on 11/12/18. 9/11/19 receives a new mail, filing a complaint through the form on its website, answering the same, but nevertheless on September 12 he received

Article 85 of the LPACAP". (The underlining is from the AEPD) FIFTH: On 12/12/2019 a letter from the respondent was entered in the Register of the AEPD

in accordance with the provisions of Article 25 and section 5 of the LOPDGDD. 12/12 C/ Jorge Juan, 6 28001 - Madrid www.aepd.es sedeagpd.gob.es the fourth

had violated Article 48(1) LGT, Article 21 GDPR in link with Article 23 LOPDGDD and Article 28 GDPR by making a commercial call on behalf of Vodafone España

received commercial calls. On 12/03/2021, he sent an opposition request to the YOIGO DPO by email Email addressed to ***EMAIL.1. On 12/10/2021, he answered that

ProtectionC / Jorge Juan, 6www.aepd.es28001 - Madridsedeagpd.gob.es Page 12 12/12

protection law, LOPDGDD, whose Articles 72 and 73 provide a list of violations considered "serious" and "very serious". According to Article 72.1 LOPDGDD, the violation

FIFTH: In accordance with Article 65 of the LOPDGDD and for the purposes set forth in Article 64.2 thereof, on June 12, 2019 the Director of the AEPD agreed

suspension.C / Jorge Juan, 6www.aepd.es28001 - Madridsedeagpd.gob.es Page 12 12/12 Mar España Martí Director of the Spanish Agency for Data Protection

(hereinafter LOPDGDD), the Director of the Spanish Data Protection Agency is competent to initiate this procedure. Article 63.2 of the LOPDGDD determines

with the provisions of article 77.5 of the LOPDGDD. In accordance with the provisions of article 50 of the LOPDGDD, this Resolution will be made public once

Protection of Personal Data and guarantee of digital rights (in forward LOPDGDD), said claim was transferred to the claimed party, for to proceed with its

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD). In this letter, the defendant was requested that, within the period of

article 4.1 of the LOPDGDD, and another against the provisions of article 5.1 f) of the RGPD, in relation to the Article 5.1 of the LOPDGDD that governs the

A. 11/25/2021 Transfer of claim 2 to BANKINTER, S.A. 12/27/2021 Allegations by BANKINTER, S.A. 12/29/2021 Admission for processing to A.A.A. 02/02/2022

the LOPDGDD, that is to say I include the claimant's data in the Asnef file without previously requiring the payment. Article 20.1 c) of the LOPDGDD establishes:

Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD). SECOND: Article 64.1 of the LOPDGDD, provides as follows "1. When the procedure refers exclusively

Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDD), which establishes that serious infractions will expire after two years

ntee of Digital Rights (hereinafter referred too as LOPDGDD). SECOND: Article 64.1 of the LOPDGDD, provides that: "1. When the procedure refers exclusively

many incidents have occurred in the last 12 months? BUT E.4 If there has been a security incident in the last 12 months that has impacted on the Vodafone

rights of the interested parties according to articles 12 to 22; (…)” In this regard, the LOPDGDD, in its article 71 "Infringements" establishes that “The

up of the report for possible infringement of the above in the RGPD and LOPDGDD in relation to Mr A.A.A., with tax identification number ***NIF.1 (hereinafter

of the interested parties in accordance with articles 12 to 22; (...).” In this regard, the LOPDGDD, in its article 71 "Infractions" establishes that "They

guarantee of digital rights (in hereinafter LOPDGDD), said claim was transferred to the claimed party in fe- date 12/16/21, to proceed with its analysis and

SECOND: On 12/17/2018, the claim is transferred to the one claimed with theliteral:" In accordance with article 65.4 of Organic Law 3/2018, of 5/12, of Pro-protection

Title VII, Chapter I, Second Section, of the LOPDGDD, having knowledge of the following points: On April 12, 2023, information was requested from EW to

correspond against the issuers.” THIRD: On August 12, 2021, in accordance with article 65 of the LOPDGDD, the claim presented by the complaining party was

of the LOPDGDD C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 12/60 At this point, the application of article 77.2 of the LOPDGDD is reiterated

Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD). As a result of the investigative actions carried out, it is verified that

with the provisions of article 77.5 of the LOPDGDD. In accordance with the provisions of article 50 of the LOPDGDD, this Resolution will be made public once

violation of the Article 12 of the GDPR, in conjunction with Article 17 of the GDPR. V Classification of the infringement of article 12 of the GDPR The aforementioned

invoice from Endesa Energía (from 08/11/2018 to 19/12/2018). - Notification from Endesa Energía dated 20/12/2018, participating in the deregistration of street

Protection of Personal Data and guarantee of digital rights (in hereafter LOPDGDD), on May 9, 2022, said claim was transferred to the C/ Jorge Juan, 6 www

thereferred Law.C / Jorge Juan, 6www.aepd.es28001 - Madridsedeagpd.gob.es Page 12 12/12 Mar España Martí Director of the Spanish Agency for Data Protection

This initiation agreement was notified to the imputed entity on 12/12/2019. 5. On 12/20/2019, the institute made allegations in the initiation agreement

is collected. Finally, the AEPD also mentioned that, pursuant to Articles 12 and 13 GDPR, the information related to the processing has to be sufficiently

at the Municipal Office of Consumer Information (hereinafter OMIC) on March 12, 2018 from the claim corresponding to the complaint made in March 2018, informing

the provisions of article 77.5 of the LOPDGDD. FOURTH: In accordance with the provisions of article 50 of the LOPDGDD, this Resolution will be made public

(EU) 2016/679 and 12 of this organic law. (…) " VII C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 11/13 However, the LOPDGDD in its article

Protection of Personal Data and guarantee of digital rights (in forward LOPDGDD), said claim was transferred to the claimed party, for to proceed with its

lead to the commission of the offense typified in article 72.1 m) of the LOPDGDD, to be sanctioned, in accordance with art. 58.2 of the RGPD ”. Said agreement

December 5, on Data Protection Personal and Guarantee of Digital Rights (LOPDGDD), and attending to the following: BACKGROUND FIRST: On 09/27/21, he entered

Personal Data and Guarantee of Digital Rights (hereinafter referred to as the LOPDGDD). As a result of the investigative actions carried out, it was established

article 72.1.b) of the LOPDGDD, a fine of 12,000 euros, of in accordance with articles 83.2 a), b) d) of the RGPD and 76.2.a) of the LOPDGDD. SECOND: NOTIFY this

procedure of 12/2/2019. The date of the invoice, 05/02/2019, and the NIF associated with the claimant, with the Property name. Under the invoice is 12/10/2019

digital rights. Article 22.4 of the LOPDGDD provides as follows: "The duty of information provided for in Article 12 of Regulation (EU) 2016/679 shall be

a) minutes of 12/06/2018 at 10, in c Cabernet number ***NUMBER.3, containing demonstrations already noted.b) Sheet called SERVICE of 12/06/2018, arrival

print of the Customer Service Department of the claimed entity (of dated April 12, 2021) in which the claimant is provided with the data of the point of sale

Article 5(1)(c) GDPR, and the lack of transparent information, as per Article 12 GDPR. The decision is the consequence of a complaint submitted by the City

of Personal Data and guarantee of digital rights (hereinafter LOPDGDD). SECOND: Article 12 of Regulation (EU) 2016/679, of April 27, 2016, General Data

this offense is considered as ‘grave’ in accordance with Article 72(1)(k) LOPDGDD and falls under the criteria defined in article 83(5)(a) GDPR where a company

information provided for in article 12 of the RGPD (with the content provided in the subsequent article 13, article 22.4 of the LOPDGDD determines that “[…] It will

anddGuarantee of Digital Rights (hereinafter referred too as LOPDGDD).SECOND: Article 64.1 of the LOPDGDD, provides that: "1. When the procedure refers exclusively

rights of the interested parties in accordance with articles 12 to 22; [...]". The LOPDGDD, for the purposes of the prescription of the infringement, qualifies

the interested parties in accordance with articles 12 to 22; " In turn, article 74.a) of the LOPDGDD, under the heading "Violations considered mild provides:

articles 13 and 14 of Regulation (EU) 2016/679 and 12 of this Organic Law. […] " III Article 22 of the LOPDGDD, relative to "Treatments for video surveillance

gob.es 2/12 - Privacy policy for IBERIA employees. - Screenshots of the Intranet and the app for employees of the business. Subsequently, on 09/12/2019, the

Personal Data and guarantee of digital rights (hereinafter LOPDGDD). SECOND: Article 64.1 of the LOPDGDD, provides the following: "1. When the procedure refers

article 50 of the LOPDGDD, this resolution will be made public once it has been notified to the interested parties..6 of the LOPDGDD, and in accordance

conditions for valid consent under Article 4(11) GDPR and Article 6(1) LOPDGDD (National data protection law aimed at the implementation of the GDPR).

Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD). As a result of the investigative actions carried out, it is verified that

With regards to this, national case law (Judgement of the Supreme Court of 12 July 2004, 1702/2000) interpreted that a photo of someone whose face is not

duty to inform the individuals affected by the recording according to Article 12 GDPR and Article 13 GDPR and to maintain a record of the processing activities

rights of the interested parties in accordance with articles 12 to 22; […].” The LOPDGDD, for the purposes of the prescription of the infringement, qualifies

applying compulsorily, from that date date, the current RGPD and as of 12/07/18 the new LOPDGDD. The known facts could be constitutive of an infraction, attributable

Personal Data and guarantee of digital rights (hereinafter LOPDGDD). SECOND: Article 64.1 of the LOPDGDD provides the following: "one. When the procedure refers

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), said claim was transferred to the claimed party/, to to proceed with its

the provisions of article 77.5 of the LOPDGDD. THIRD: In accordance with the provisions of article 50 of the LOPDGDD, the This Resolution will be made public

subject with the information required under GDPR unlawful? The national law LOPDGDD considers the violation of articles 6 and 13 GDPR as "very serious" and

Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD). As a result of the investigation actions carried out, it is verified that

the Organic Law 3/2018, of 5/12, on the Protection of Personal Data and the Guarantee of Digital Rights (hereinafter LOPDGDD), which specifies: < 1. Data

article 74.k) of the LOPDGDD, a fine of 100,000 euros, of in accordance with article 83.2.a) of the RGPD and 76.2.b) of the LOPDGDD.) " No allegations were

on the following BACKGROUND FIRST: AAA (hereinafter, the claimant) on April 12, 2019 filed claim before the Spanish Agency for Data Protection. The claim

the following: ACTS FIRST: D. A.A.A. (hereinafter, the claimant) dated May 12, 2019 filed a claim with the Spanish Agency for Data Protection. The claim

(hereinafter LOPDGDD), the Director of the Spanish Data Protection Agency is competent to initiate this procedure. Article 63(2) of the LOPDGDD states that:

each control authority, and as established in articles 47 and 48 of the LOPDGDD, the Director of the Spanish Data Protection Agency is competent to initiate

(hereinafter LOPDGDD), the Director of the Spanish Data Protection Agency is competent to initiate this procedure. Article 63(2) of the LOPDGDD states that:

Protection of Personal Data and guarantee of digital rights (inhereinafter LOPDGDD).As a result of the investigation actions carried out, it is verifiedthat

Protection of Personal Data and guarantee of digital rights (in hereafter LOPDGDD), said claim was transferred to the party claimed on fe- date 04/21/22 and

GDPR on consent, as well as Article 6 of the Spanish Data Protection Law (LOPDGDD) on consent. The DPA therefore held that there was a clear violation of

Protection of Personal Data and guarantee ofdigital rights (hereinafter LOPDGDD), the following have been verifiedACTSFIRST: On October 24, 2019, Dº AAA

welcomes. C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es Page 12 12/14 Likewise, you must send the proof of income to the General Subdirectorate

request for information from the AEPD. THIRD: On 12/09/2020, in accordance with article 65 of the LOPDGDD, the Director of the Spanish Agency for Data Protection

article 12 of the RGPD is complied with in a concise and understandable way for the affected party, the aforementioned Article 22 of the LOPDGDD provides

employees in the workplace. This right is within Article 89 LOPDGDD. Similarly, Article 20(3) LOPDGDD enables the employer to adopt any measures it deems more

of the Spanish Law on Personal Data Protection and Digital Guarantees (LOPDGDD), the infringement of Article 13 GDPR is considered a very serious breach

guarantee of digital rights (hereinafter, LOPDGDD). C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 2/13 On 12/03/2019, a written reply from LA was

of prevention of labor Extremeña, S.L. medical examination reports dated 02/12/2010 relating to workers of the company Aguas del Suroeste, S.L. SECOND: Upon

filed with the Municipal Consumer Information Office ofMadrid on December 12, 2018.SECOND: In view of the facts reported in the claim and thedocuments

serious incident. - Email sent to the complainant by "Human Resources" on 04/12/2019 in which "Medical Examination Incident" appears as the "Subject A.A.A

exercised the right of access and which gave rise to the TD/01965/2017. SECOND: On 12 August 2017, the claimant exercised the right to access to your personal data

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), with reference number E / 10122/2019, a transfer of said claim to the

This situation is not covered by the exclusion set out in Article 22.5 of LOPDGDD as the capture of images that exceed the verification about the identity

against Vodafone.  Copy of "Claim form to fraud team" signed and dated 04/12/2019 where the Vodafone logo appears, the facts mentioned and the following

from occurring Similar. In response to the aforementioned request, on March 12, 2020, the president of the community of owners object of this claim, responds

proceeded to carry out the following actions: On 26/11/2019, reiterated on 10/12/2019, the complaint presented was transferred to the respondent for analysis

that the telephone prefix ***PREFIJO.1 corresponds to ***PAIS.1 THIRD: On 20/12/2019, the Director of the Agency agreed to initiate sanctioning proceedings

(section b).C / Jorge Juan, 6www.aepd.es28001 - Madridsedeagpd.gob.es Page 12 12/23- The categories of personal data affected by the infringementThe data

information on the processing of their data. After the period given by Article 12(3) GDPR had elapsed, the controller informed the data subject that their data

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), with reference number E / 08183/2020, a transfer of said claim to the

signature or rubric. Please provide a copy of the receipt dated 26 July 2017 at 12:20 pm corresponding to one shipment. Provides a screenshot of a mobile terminal

Protection of Personal Data and the Guarantee of Digital Rights, (hereinafter LOPDGDD), and for the purposes set out in article 64.2, the Director of the AEPD

Protection. THIRD: On 06/08/2020, in accordance with article 65 of the LOPDGDD, the Director of the Spanish Agency for Data Protection agreed to admit

applying obligatorily, from that date date, the current RGPD and as of 12/07/18 the new LOPDGDD. For its part, article 13 of the RGPD establishes the information

Protection of Personal Data and guarantee of digital rights (in forward LOPDGDD), said claim was transferred to the claimed party, for to proceed with its

Protection of Personal Data and Guarantee of Digital Rights (in hereinafter LOPDGDD). As a result of the investigative actions carried out, it is noted that

accordance with the National High Court Judgment of 12/11/07, handed down in Judgment of the Audiencia Nacional of 12/11/07 in Appeal No. 351/2006, and it is the

Protection of Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD). 1 In the documentation provided by the claimant, it is noted that there

Protection of Personal Data and guarantee of digital rights (inhereinafter LOPDGDD).As a result of the investigation actions carried out, it is verifiedthat

claimant) filed a claim with the Agency Spanish Data Protection Agency on January 12, 2018. The claim is directed against IBERDROLA CLIENTES, SAU (hereinafter

Protection of Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD). As a result of the investigative actions carried out, it has been established

demonstrate the customer's consent. In the judgement of the Audiencia Nacional of 12 May 2014 it was established that the value of unequivocal consent cannot be

Articles 12 and 15 GDPR. The DPA initially imposed two fines of €10,000 each for the violation of Articles 6(1) and 15 in connection with Article 12 GDPR.

of the claim. THIRD: On 09/06/2020, in accordance with article 65 of the LOPDGDD, the Director of the Spanish Agency for Data Protection agreed to admit

response to the request of the AEPD. THIRD: On 12/17/2020, in accordance with article 65 of the LOPDGDD, the Di- rector of the Spanish Agency for Data

accordance with art. 48.6 of the LOPDGDD, and in accordance with the provisions of article 48.6 of the LOPDGDD LOPDGDD, and in accordance with the provisions

on the Protection of Personal Data and Guarantee of the Digital Rights (LOPDGDD), and against Law 34/2002, of July 11, on Services of the Information Society

sanction.C / Jorge Juan, 6www.aepd.es28001 - Madridsedeagpd.gob.es Page 12 12/14If you choose to proceed to the voluntary payment of any of the amounts

with the provisions of article 64 of the LOPDGDD. C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 12/13 Finally, it is pointed out that in accordance

00763/2018, of 12/4/2018, being dismissed. File 3514/2019, inadmissibility for processing. In the claimant's claim letter, she requested 03/12/2019 in the

is TRANSFERRED to thedenounced entity, receiving answering document dated 12/19/19.FUNDAMENTALS OF LAWIBy virtue of the powers that article 58.2 of the

which was returned to its destination with the date 12/14/22 with the message “unknown”. THIRD: On 12/30/22, by the Director of the Spanish Agency for Data

in based on the following ACTS FIRST: B.B.B. (hereinafter, the claimant) on 12/20/2019 filed a claim before the Spanish Agency for Data Protection. The claim

(hereinafter LOPDGDD), the Director of the Spanish Data Protection Agency is competent to initiate and resolve this procedure. Article 63.2 of the LOPDGDD determines

Data Protection and based on to the following. BACKGROUND FIRST: Dated 01/12/22, you have entered this Agency, written submitted by D. A.A.A., (hereinafter

Law. C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es Page 12 12/12 II Article 85 of Law 39/2015, of October 1, of the Administrative Procedure

Protection of Personal Data and guarantee ofdigital rights (hereinafter LOPDGDD). The result of this action isdescribed below."No reply has been received

5.1(c) of the RGPD, typified in Article 83.5 of the RGPD. FIFTH: On August 12, 2019, the cooperation of the State Security Forces and Bodies was requested

Protection of Personal Data and guarantee of rights digital (hereinafter LOPDGDD). As a result of the documentation provided and the investigation actions

of the whole building, provides a judgment of the Court of Lo Criminal no. 12 of Malaga dated 20/11/2017 condemning his partner for a crime of abuse, to

December 5, Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), the Director of the Spanish Data Protection Agency is competent to initiate

SEVENTH: On 12/29 / w20 a report from the Local Police is received (*** LOCALIDAD.1) reporting the following: "That transferred to the scene, today 12/29/20

outside the C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es Page 12 12/136 establishments of the marketer as indicated in the general conditions

found that there had been a “personal data breach” pursuant to Article 4 (12) of the GDPR as a result of the publication on the municipal website regarding

anddGuarantee of Digital Rights (hereinafter referred too as LOPDGDD). SECOND: Article 64.1 of the LOPDGDD, provides that: "1. When the procedure refers exclusively

Personal Data and Guarantee of digital rights (hereinafter LOPDGDD). SECOND: Article 64.1 of the LOPDGDD, provides that: "1. Where the procedure relates solely

claim are that BBB, *** CHARGE.1 of *** LOCALITY. 1, Posted 10/11/2018 at 12:01 " from your personal FACEBOOK account and in a public group "" called WE

Protection of Personal Data and guarantee of digital rights (inhereinafter LOPDGDD).As a result of the investigation actions carried out, it is verifiedthat

For infringing Article 5(1)(f) GDPR, in conjunction with Article 72(1)(a) LOPDGDD, the Spanish DPA imposed the sanction of warning under Article 83(5)(a)

of the RGPD, a warning sanction, in in relation to article 74.a) of the LOPDGDD. Of the actions carried out in this procedure and of the documentation Obrante

to the C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es Page 12 12/141 effect." Below is a box to mark that “The client declares to have received

Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 12/28 Likewise, article 63.2 of the LOPDGDD determines that: "The procedures processed by the Spanish

5, on Data Protection Personal Rights and Guarantee of Digital Rights (LOPDGDD), and against the Law 34/2002, of July 11, on Information Society Services

6(3) of the Spanish Law on Data Protection and Digital Rights Guarantee (LOPDGDD), according to which, (i) commercial communications are a different purpose

76.2.b, of the LOPDGDD) The continued nature of the infraction (article 83.2.k of the RGPD in relation to article 76.2.a of the LOPDGDD) Therefore, in

processing, as indicated in Article 13.1.c) of the RGPD and Articles 12 to 18 of the LOPDGDD". "Considers that at the information level, they should change the

according toC / Jorge Juan, 6www.aepd.es28001 - Madridsedeagpd.gob.es Page 12 12/61proceed in law. Likewise, it was ordered that this procedure continue its

of digital rights (LOPDGDD) - which came into force on 07/12/2018 and repealed the aforementioned Royal Decree-Law 5/2018 - on 14/12/2018 the present claim

Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD). On September 27, 2019, the Institute of Secondary Education *** INSTITUTE

date of theC / Jorge Juan, 6www.aepd.es28001 - Madridsedeagpd.gob.es Page 12 12/13cha of the initiation agreement or, where appropriate, the draft initiation

following: "When accessing the web it is impossible reject cookies ”. SECOND: On 12/04/20, this Agency sent a request informative to the claimed entity, in accordance

on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), the Director of the Spanish Data Protection Agency is competent to initiate

sedeagpd.gob.es Page 10 10/177 06/20/2016, 11/22/2016, 03/14/2017, 11/12/2018, 12/20/2018 and 09/17/2019 (provide a copy of these versions). It highlights

Protection Act (LOPDGDD) contain a provision that establishes such prerequisite, so the Court rejected the controller's argument. Article 63 LOPDGDD differentiates

allegations isten days computed from the following to the notification.EIGHTH: On 12/12/2019 the electronic headquarters of this Agency have theallegations of the

committee of GUREAK MARKETING SLU of dates 12 and 27 February 2020 on the security breach In the Minutes of February 12, it is stated that GUREAK LANEAN is a

from Correos, was delivered at destination on 12/16/21, being the receiver: Mrs. B.B.B.. ***NIF.1. THIRD: On 12/26/21, by the Director of the Spanish Agency

concerned within the meaning of Articles 12 to 22 This infringement is classified as minor in Article 74(a) of the LOPDGDD, under the heading "Offences considered

sedeagpd.gob.es 12/22 The Director of the Spanish Data Protection Agency is competent to settle this complaint in accordance with Article 12.2, sections i)

the provisions of article 77.5 of the LOPDGDD. FOURTH: In accordance with the provisions of article 50 of the LOPDGDD, the This Resolution will be made public

in Chapter III, Section 1st, of the same Regulation (articles 12 and following). Article 12.1 of the aforementioned Regulation establishes the obligation

December 5, on Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and against Law 34/2002, of July 11, Information Society Services and

it is therefore appropriate to initiate proceedings sanctioning. Thus, on 12/03/20, the Director of the Spanish Data Protection Agency agreed to initiate

sanctioning file has been notified, the entity complained mada, by letter dated 12/11/20, made allegations to the initiation of ex- petitioner, whose content

December 5, on Data Protection and Guarantee of Digital Rights (hereinafter, "LOPDGDD"); as well as in the Guides on the Use of Cookies published by the AEPD

case; its C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es Page 12 12/35 disagreement with the graduation of the sanction in the event of a possible

not be ruled out that the documentation did not contain personal data. On 12 September 2019, the director of the AEPD agreed to initiate an investigation

Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDD) on June 2, 2020, resulting in expiration of the electronic notification

Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 2/6 Thus, on October 12, 2019, the notification service electronic, returned the aforementioned notification

authorities in Article 57(1) of Regulation (EU) 2016/679 (RGPD). Thus, on 12/07/19, 15/12/19 and 20/01/20, information requests are addressed to the requested

3:11:57; The video (2) NUM001, between minutes 3:12:06 and 3:12:28; The video (3) NUM002, between the minutes 3:12:54 and 3:13:04; The video (4) NUM003, between

authorities in article 57.1 of Regulation (EU) 2016/679 (GDPR). Thus, dated 12/04/20, an information request is addressed to training policy, “PODEMOS, PARTIDO

December 5, Protection of Personal Data and guarantee of rights chos digital (LOPDGDD). Thus, on 02/07/20 and 02/18/20, he addressed two es- Information request

28001 - Madrid sedeagpd.gob.es 5/7 o New cybersecurity measures (document 12). Information on the recurrence of these events and number of analogous events

SIXTH: BBB , stating as *** POSITION 1 of RIBADEDEVA presents allegations on 06/12/2019 stating: a) The copy of the sentence was removed from the FACEBOOK page

1164/2001. C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es Page 12 12/37 c) The classification of the breach of the obligation to pay the access

not selected. EIGHTEENTH: AS OF 12/10/2020, GOOGLE IRELAND LTD. acted as manager of the treatment. NINETEENTH: As of 10/12/2020, in the Adhesion Contract

Through the SICER service, he was picked up at his destination on 05/27/19 at 7:12 PM, being the receiver of the same, D. F.F.F. *** NIF.1 - According to the

December 5, Protection of Personal Data and guarantee of digital rights (LOPDGDD) since, according to what has transpired to through the media, METRO BILBAO

of the main page, the web redirects to a new page whose address is: *** URL.12, which provides information about the identification of the person responsible

the same. Given that the events that gave rise to the claim take place on 09/12/2018, and due to their seriousness, they are not prescribed, so we will proceed

requirement The sent to the claimed entity on 12/19/19, through the Notific @ service, was re- Chazado by the entity on 12/30/19. According to a certificate from

Data and guarantee of rights chos digital (hereinafter LOPDGDD). Thus, dated 02/27/20 and 03/12/20 he addressed two written requests for information to

article 83.5.a) of the RGPD and 72.1 b) of the LOPDGDD, and in article 83.5 b) of the RGPD and 74 c) of the LOPDGDD in an initial assessment, they are considered

the exercise of these rights are set out in Articles 12 of the GDPR and 12 of the LOPDGDD. Article 12 "Transparency of information, communication and procedures

Second Section, of the LOPDGDD, having knowledge of the following ends: C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es, 3/12 Vodafone representatives

emails received on dates 07/10/2020, 10/30/2020 (2:33 p.m.), 10/30/2020 (12:37 p.m.), 12/03/2020 and 01/26/2021. In the one dated 10/30/2020 (2:33 p.m.), addressed

of determining treatment of biometric data as a special category in section 12, concluding that both cases imply the treatment of special categories of data:

(hereinafter LOPDGDD), the Director of the Spanish Data Protection Agency is competent to initiate this procedure. Article 63.2 of the LOPDGDD determines

the LPACAP. C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 12/12 SECOND: ORDER from VUKMAL TRADE, S.L. so that within 6 months Since this

copy of the DNI on the basis of which it appears that the date of birth is 23/12/2003, so that, at the material time, (date of registration of the telephone

the sanction. C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 12/12 The percentage of reduction foreseen in this section may be increased regulations

exercise of these rights are established in the articles 12 of the RGPD and 12 of the LOPDGDD. Article 12 “Transparency of information, communication and modalities

December 5, of Personal Data Protection and Guarantee of Digital Rights (LOPDGDD) and Law 34/2002, of July 11, on Information Society Services and Electronic

as required by Article 12(1) GDPR. The information was also not provided in an immediate manner as required by Article 11 LOPDGDD (the Spanish Data Protection

afectados previsto en los artículos 12 y 13 del RGPD, y 22 de la LOPDGDD. En tal sentido, el artículo 22 de la LOPDGDD prevé en relación con la videovigilancia

3/2018, of 5/12, on the Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD) and that “article 22.3 of the LOPDGDD that includes

proceedings if the C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 12/12 The interested party expresses his intention to file a contentious-administrative

with the provisions of article 77.5 of the LOPDGDD. In accordance with the provisions of article 50 of the LOPDGDD, this Resolution will be made public once

with the provisions of article 77.5 of the LOPDGDD. In accordance with the provisions of article 50 of the LOPDGDD, this Resolution will be made public once

Personal Data and guarantee of digital rights (hereinafter, LOPDGDD), being notified with dated March 12, 2021, as stated in the proof of delivery issued by the

article 57.1 of the Regulation (EU) 2016/679 (RGPD). Thus, dated 06/26/19, 12/18/19 and 02/19/20, it is addressed informative request to the claimed entity

Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD). On 12/04/2019, the complained party sent this Agency the following information:

Protection Agency. C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 12/12 Thus, in accordance with what was stated, by the Director of the Spanish

accordance with article 65 of the LOPDGDD, the claim filed by the claimant was admitted for processing. FOURTH: On 12/04/2022, the Director of the Spanish

sedeagpd.gob.es 12/12 Against this resolution, which puts an end to the administrative procedure in accordance with art. 48.6 of the LOPDGDD, and in accordance

with the provisions of article 77.5 of the LOPDGDD. In accordance with the provisions of article 50 of the LOPDGDD, this Resolution will be made public once

know” and insofar as they had it." THIRD: On August 12, 2022, in accordance with article 65 of the LOPDGDD, the claim presented by the claimant party was admitted

regulations. " C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 12/12 In accordance with the above, the Director of the Spanish Agency for the

de Protección de Datos Personales y garantía de los derechos digitales – LOPDGDD). For starters, the AEPD held that emails (as well as phone numbers) despite

EasyJet held on him under Article 15 GDPR. This email was sent on the 28/12/2021. On 30/12/2021, EasyJet replied stating that it would take them time to reply

months from the C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es, 12/12 day following the notification of this act, as provided in article 46.1 of

of Article 12 GDPR, read in conjunction with Article 17 GDPR. VI Sanction of the infringement of Article 12 GDPR The infringement of Article 12 of the GDPR

02/01/2006 and the last from them on 12/01/2006. In other words, the card has been active from 09/09/2002 until 12/01/2006 in which it is canceled due to

the provisions of article 77 of the LOPDGDD. FIFTH: Once the initiation agreement was notified, the defendant on 12/28/2022 presented a written statement

one was sent on 21.03.2023 and received no reply. The second one was sent on 12.05.2023 and the controller acknowledged receipt. Nonethless, the controller

guarantee of digital rights (hereinafter LOPDGDD). C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 12/3 As a result of the investigative actions

with the provisions of article 77.5 of the LOPDGDD. In accordance with the provisions of article 50 of the LOPDGDD, this Resolution will be made public once

Article 12 of the GDPR. SAW Classification of the infringement of article 12 of the GDPR If confirmed, the aforementioned infringement of article 12 of the

following FACTS FIRST: A.A.A. (*hereinafter, the complaining party) dated April 12, 2021 filed a claim with the Spanish Data Protection Agency. The claim is

club the authorization to photograph and record her daughters, aged 10 and 12. The club continued its conduct and posted another video in which the two

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), said claim was transferred to BBVA so that it proceed to its analysis

with the provisions of article 77.5 of the LOPDGDD. In accordance with the provisions of article 50 of the LOPDGDD, this Resolution will be made public once

Protection of Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD), said claim was transferred to the defendant, so that proceed to its analysis

the Organic Law 3/2018, of 5/12, on the Protection of Personal Data and guarantee of digital rights (in hereinafter, LOPDGDD), which consists of transferring

Protection of Personal Data and guarantee of digital rights (hereinafter: LOPDGDD) which states that video surveillence of public propperty is allowed, if

of the LOPDGDD, the Director of the Spanish Data Protection Agency is competent to initiate and resolve this procedure. Article 63.2 of the LOPDGDD determines

communicate my low. I put the last received (screenshots attached): - Date: 01/11/19 12:35 Sender B.B.B. (no sender number displayed!) Content: I know the unfair

with the provisions of article 77.5 of the LOPDGDD. In accordance with the provisions of article 50 of the LOPDGDD, this Resolution will be made public once

interested parties in accordance with articles 12 to 22. " SAW The offenses are classified in article 72 of the LOPDGDD: 1. In accordance with the provisions of

and 14 of the Regulation- ment (EU) 2016/679 and 12 of this organic law. (…) " VII However, the LOPDGDD in its article 77, Regime applicable to certain

circumstances provided for in article 72.1.a) of the LOPDGDD transcribed above. It establishes article 73 of the LOPDGDD, under the heading “Infractions considered

motion for a resolution was notified on 21/12/2021 and a deadline of 10 was granted days to make allegations. 12. The deadline has been exceeded and no allegations

65.4 of Organic Law 3/2018, of 5/12, of Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD), on 11/29/2021 the claim was transferred

time of the collection of data as foreseen in Articles 12, 13 and 14 GDPR and Article 11 LOPDGDD. The controller must observe the principles data minimisation

fees is not covered by the regulations of Data Protection." “That, on August 12, 2020, a letter was sent to all the owners of this Community where they were

rights of the interested parties in accordance with articles 12 to 22;” In this regard, the LOPDGDD, in its article 71 establishes that "They constitute offenses

the LOPDGDD, the Director of the Spanish Data Protection Agency is competent to initiate and to solve this procedure. Article 63.2 of the LOPDGDD determines

applying compulsorily, from that date, the current RGPD and from the 07/12/18 the new LOPDGDD. In application of the RGPD, its article 13, establishes the information

signs, there was no violation of art. 22 (2) of the Spanish local law (LOPDGDD), according to which images of the public road can only be captured to the

 Copy of e-mail sent by “*** COMPANY.1,” on the 13th of February 2020 at 12:06 p.m., which contains the following text: Dear Ladies and Gentlemen, Further

28001 – Madrid sedeagpd.gob.es 2/19 SECOND: On May 12, 2021, in accordance with article 65 of the LOPDGDD, the claim presented by the complaining party was

with the provisions of article 77.5 of the LOPDGDD. In accordance with the provisions of article 50 of the LOPDGDD, this Resolution will be made public once

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), said claim was transferred to the claimed party, to to proceed with its

relation to the general obligation imposed by art. 12 of the GDPR and, in special, the provisions of 12.1 regarding “children”. Nor is it accredited compliance

THIRD. The claim was admitted for processing by agreement on 08/12/2020. FOURTH: On 05/12/2021, the Director of the Spanish Protection Agency of Data agreed

protection regulations, and taking into account the following: ACTS FIRST: On 12/13/20, this Agency received a letter of complaint, in which, among others

considered very serious” you see” of the LOPDGDD indicates: C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 12/15 "1. Based on what is established

Data Protection Personal and guarantee of digital rights (hereinafter, LOPDGDD), which consists of transferring them to the Data Protection Delegates designated

with the provisions of article 77.5 of the LOPDGDD. In accordance with the provisions of article 50 of the LOPDGDD, this Resolution will be made public once

respond to the request made. THIRD: On 12/15/2020, in accordance with article 65 of Organic Law 3/2018, of 5/12, Protection of Personal Data and guarantee

es 28001 - Madrid sedeagpd.gob.es 5/12 THIRD: On 09/23 and 11/25/2019, in accordance with article 65 of the LOPDGDD, the Director of the Spanish Data Protection

(Article 72(1) LOPDGDD). Due to these violations the AEPD issued a fine of €70,000 based on Article 83(2) GDPR and Article 76(2)(b) LOPDGDD. Share your comments

Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDD), which consists of transferring the same to the Data Protection Delegates

accordance with the provisions of article 77.5 LOPDGDD. In accordance with the provisions of article 50 LOPDGDD, this resolution will be made public, dissociating

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), said claim was transferred to the respondent, so that proceed to its analysis

at the headquarters of the Royal Spanish Football Federation, at 12:00 p.m. On March 12, 2020, the first meeting of the Commission of Monitoring of COVID-19

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), said claim was transferred to the claimed party, to to proceed with its

08/01/2023, at 12:30 p.m., from the account (...), with the subject "Torremar contact phone number - 08/01 and 01/09." — Message sent on 05/31/2023, at 12:57 p.m

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), on June 10, 2021, said claim was transferred to the claimed party, to

claims for part of affected people and that the LOPDGDD requires its processing. Thus, article 65 of the LOPDGDD, relating to the “Admission for processing

Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD), said claim was transferred to the claimed party on 10/23/20, so that it

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), with reference number E / 03724/2020, a transfer of said claim to the

Protection of Personal Data and guarantee of digital rights (in hereinafter LOPDGDD), said claim was transferred to CAIXABANK, so that proceed to its analysis

parties that are provided for in the Articles 12 to 14 of the GDPR. In accordance with the provisions of article 12.1 of the RGPD, we start from a Principle

the RGPD and in article 76 of the LOPDGDD. Regarding this aspect, it should be noted that article 77.2 of the LOPDGDD establishes the Next: “When those

sedeagpd.gob.es 12/12 SECOND: NOTIFY this resolution to VODAFONE ONO, S.A.U .. In accordance with the provisions of article 50 of the LOPDGDD, this Resolution

taken" NINTH: All claims to file E/02026/2019 are accumulated. TENTH: Dated 12/12/2109, under the investigative powers granted to the control authorities in

compliant with cookie banner requirements. It cited Article 65(6) of the LOPDGDD, Spain’s law implementing the GDPR, which authorises the AEPD to archive

2 of the RGPD and 76 of the LOPDGDD: C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 23/24 Art. 76.1.b) LOPDGDD. The high link between the

Protection of Personal Data and guarantee of digital rights (in forward LOPDGDD), on 07/01/2021 the claim was transferred to the party claimed, so that

of claims by affected people and that the LOPDGDD obliges their processing. Thus, article 65 of the LOPDGDD, relating to the “Admission for processing

of the Organic Law 3/2018, of 5/12, of Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD), the claim is transferred to TURIA

Data Protection Agency and in based on the following: BACKGROUND FIRST: On 12/21/21, Ms. A.A.A. (hereinafter, the complaining party) filed claim before

parties that are provided for in the Articles 12 to 14 of the GDPR. In accordance with the provisions of article 12.1 of the RGPD, the starting point is a Principle

68.1 of the LOPDGDD, the Director of the Spanish Data Protection Agency is competent to initiate this procedure. Article 63.2 of the LOPDGDD determines

communication to the AEPD on 12/2/2019 and a "Final report on the implementation process of the Pro- Data Protection” dated 12/2/2019 with two pages. 4) Considers

on the protection of personal data and guarantee of digital rights, ("LOPDGDD"). C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 2/8 According

es, 5/137 . Links Lumendatabase 9 to 12 This is the same assumption as the previous link, but in these links 9 to 12, in the paragraph showing part of the

parties in accordance with articles 12 to 22; " For the mere purposes of prescription, article 74.1.a) of the LOPDGDD considers as slight “a) Failure to

(hereinafter, LOPDGDD), the Director of the Agency Spanish Data Protection is competent to initiate and resolve this process. Article 63.2 of the LOPDGDD determines

necessary" SECOND: On 06/29/21 and 07/12/21, in accordance with the provisions of the Article 65.4 of the LOPDGDD Law, by this Agency, transfer of said

reasons on which the claim is based are the following: "Yesterday, 05/15/2020 at 12:39 I received a call to my mobile phone *** PHONE 1 of the number *** PHONE

“Sanctions and measures “corrective measures” of the LOPDGDD: As aggravating factors: - Article 76.2.b) LOPDGDD. Linking the offender's activity with the performance

resolution to A.A.A. C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 12/12 In accordance with the provisions of article 50 of the LOPDPGDD, this Re-

with the provisions of art. 58.2 of the RGPD and in art. 47 and 48.1 of LOPDGDD. II Defines article 4.2 of the RGPD: "treatment": any operation or set of

Protection of Personal Data and Guarantee of Digital Rights (hereinafter LOPDGDD), said claim was transferred to the claimed party, to proceed with its analysis

on the protection of personal data and guarantee of digital rights, ("LOPDGDD"). THIRD: On 03/04/21, the entity claims, sends a reply to the requirement

Protection of Personal Data and guarantee of digital rights (in hereafter LOPDGDD), with reference number E/05859/2020, transfer of said claim to the defendant

English, EIPD in Spanish), of 01/12/2020, has the following characteristics: -created on 12/17/2019, submission date 01/12/2020, name “MWC 20 process of facial

Organic Law 3/2018, on Data Protection and Guarantees of Digital Rights (LOPDGDD), in order to assess the admissibility of the claim, within the framework

with commercial content on the dates of 11/18/2020, 11/25/2020, 12/2/2020, 12/9/2020, 12/23/2020, 01/20/2021, 01/27/2021, 02/03/2021 and 02/17/2021. FIFTH-

fingerprint deletions prior to the date 12/29/2021. In total there are ***QUANTITY.5 fingerprint erasures prior to 12/29/2021: Finally, it is verified that

established in the articles 47, 48.1, 64.2 and 68.1 of the LOPDGDD, While article 63.2 of the LOPDGDD determines that: "The procedures processed by the Spanish

(hereinafter LOPDGDD), the Director of the Spanish Data Protection Agency is competent to initiate and solve this procedure. Article 63.2 of the LOPDGDD determines

(hereinafter, LOPDGDD), the Director of the Spanish Agency Data Protection is competent to initiate and resolve this procedure. Article 63.2 of the LOPDGDD determines

de protección de datos personales y garantía de los derechos digitales –LOPDGDD)" However, the APDCAT also noted that according to Article 86 GDPR, when

exclusion system regulated in Article 23 of the Spanish Data Protection Act (LOPDGDD). The calls were carried out by the subcontractor Oasip on behalf of Vodafone

until the RGPD and the LOPDGDD became applicable, which displaced that. While it is true that the approach of the RGPD and the LOPDGDD was completely novel

Director of the Spanish Data Protection Agency, in accordance with article 12.2, section i) of Royal Decree 428/1993, of 26 March, which approves the Statute

GDPR in conjunction with Article 23(4) LOPDGDD. Avilon Center SL made an voluntary, early and guilty payment of €12,000. The complainant filed a complaint

compliance with the provisions of the Personal Data Protection Law 15/99 of 12/13 ". 4) It states that the publication of Royal Decree Law 8/2019 of March

any additional information or clarification you may require. EIGHTH: On 12/12/21, the test practice period began, agreeing- be: a).- consider reproduced

pornographic website €75,000 for violation of Articles 5(1)(a), 5(1)(b), 5(1)(e), 13, 12(2), 30(1), 8 and 25 GDPR, as well as Article 22(2) LSSI. The Spanish DPA launched

relation to Article 4(1) of the LOPDGDD, which governs the principle of accuracy of personal data. IV Article 72.1.a) of the LOPDGDD states that "in accordance

exist (complaint based procedure and ex officio procedure - see Art. 64.2 LOPDGDD) it should have been brought up (or if it was brought up during the procedure

December 5, Protection of Personal Data and guarantee of digital rights (LOPDGDD) since, according to what has transpired to through the media, EL CORTE

identification of the source of the information. In addition, article 12.6 of the LOPDGDD provides that "the holders of parental authority may to exercise in

“27/11/2015 20:11:34 ,12/04/2015 11:04:50, 12/05/2015 9:30:10, 12/05/2015 10:48:31, 12/05/2015 13:14:21, 12/05/2015 14:17:44, 12/06/2015 1:15:22, 12/06/2015 16:33:51

on the protection of personal and legal data rantía of digital rights, ("LOPDGDD"). THIRD: On 04/08/21, this Agency received a written reply to the Request

22.2 LSSI but C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 12/24 also with the criteria of the European Data Protection Board (EDPB), that