Search results

margin number 119 (NOMOS 2019). Roßnagel, in Simitis, Hornung, Spieker, Datenschutzrecht, Article 5 GDPR, margin number 120 (NOMOS 2019). Roßnagel, in Simitis

CJEU, C‑673/17, Planet49, 1 October 2019, margin number 44, 52 (available here). EUCJ, C‑673/17, Planet49, 1 October 2019, margin numbers 44, 52 (available

36 (Nomos 2019). Polenz, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 58 GDPR, margin numbers 38 and 39 (Nomos 2019). Boehm, in

'Guidelines 4/2019 on Article 25 Data Protection by Design and by Default', 20 October 2020 (Version 2.0), pp. 8-9 (available here). EDPB, 'Guidelines 4/2019 on Article

156(3)(a) of the Codice). On 4 April 2019 the DPA adopted two different administrative regulations. The Regolamento n. 1/2019 ("Regolamento concernente le procedure

37 (C.H. Beck 2019). Hansen, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 32 GDPR, margin number 39 (C.H. Beck 2019). Hansen, in

margin number 21, (NOMOS 2019). Roßnagel, in Simitis, Hornung, Spieker, Datenschutzrecht, Article 4 2 GDPR, margin number 20 (NOMOS 2019). Roßnagel, in Simitis

3rd Edition 2019). Petri, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 9 GDPR, margin number 22 (C.H. Beck 2019). Petri, in Simitis

annual report of the DPA for 2019 can be consulted at: https://www.autoriteprotectiondonnees.be/publications/rapport-annuel-2019.pdf (FR) and at https://www

Opinion 8/2019 on the competence of a supervisory authority in case of a change in circumstances relating to the main or single establishment, 9 July 2019, p

Beck 2019, 3rd edition). Boehm, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 83 GDPR, margin number 20 (C.H. Beck 2019, 1st edition)

number 40 (Nomos 2019). Polenz, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 57 GDPR, margin number 41 (Nomos 2019). Ziebarth, in

‘Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679’, 4 June 2019 (Version 2.0), p. 8 (available here). Guidelines 1/2019 on Codes

budget of €61m in 2019, according to a Brave study. The ICO had 680 staff in 2019, far outnumbering all other DPAs in Europe. In the year 2019/2020, the ICO

and is in charge of enforcing GDPR in Greece, the Greek Data Protection Act 2019, the ePrivacy Directive implementation law and other provisions regarding

appropriate bodies. EDPB, ‘Guidelines 1/2019 on Codes of Conduct and Monitoring Bodies under Regulation 2016/679’, 4 June 2019 (Version 2.0), p. 5 (available here)

236.00 in 2019. It is funded by the Republic of Slovenia. All fines and fees go to the federal budget, not into the budget of the IC. In 2019 the IC had

Döhmann, Datenschutzrecht, Article 12 GDPR, margin number 13 (C.H. Beck 2019). Under Article 12(1), controllers must provide any information to the data

November 2019 (Version 2.1), p. 4 (available here). EDPB, ‘Guidelines 3/2018 on the territorial scope of the GDPR (Article 3)’, 12 November 2019 (Version

Fachverlag 2019, 3rd edition). Boehm in Simitis. Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 80 GDPR, margin number 11 (C.H. Beck 2019). See for

margin number 5 (NOMOS 2019). Polenz, in Simitis, Hornung, Spiecker, Datenschutzrecht, Article 60 GDPR, margin number 5 (NOMOS 2019). Dix, in Kühling, Buchner

3 Mio in 2019. It is funded by the Republic of Austria. All fines and fees go to the federal budget, not into the budget of the DSB. In 2019 the DSB had

p. 3 (available here). Commission Implementing Decision (EU) 2019/419 of 23 January 2019 pursuant to Regulation (EU) 2016/679 of the European Parliament

Döhmann, Datenschutzrecht, Article 81 GDPR, margin number 18 (C.H. Beck 2019); Kreße in Sydow, Europäische Datenschutzgrundverordnung, Article 81 GDPR

(Article 3)’, 12 November 2019 (Version 2.1), p. 27-28 (available here). Datenschutzbehörde, 7 March 2019, DSB-D130.033/0003-DSB/2019 (available here).

in Taeger, Gabel, DSGVO BDSG, Article 21 GDPR, margin number 13 (C.H. Beck 2019, 3rd Edition); Schulz, in Gola, Datenschutz-Grundverordnung, Article 21 GDPR

EDPB jointly, where such proposals are of particular importance. On 13 May 2019, the Commission submitted its first request for a joint opinion of this kind

margin number 6 (NOMOS 2019). Polenz, in Simitis, Hornung, Spiecker, Datenschutzrecht, Article 53 GDPR, margin number 6 (NOMOS 2019). For more on the SAs'

(Datatilsynet's annual report 2021): 2021: NOK 67 845 000 2020: NOK 66 703 000 2019: NOK 57 672 000 2018: NOK 54 411 000 The DPA had 72 employees as per 31 December

criteria in accordance with Articles 42 and 43 of the Regulation’, 4 June 2019 (Version 3.0), p. 8 (available here). EDPB, ‘Guidelines 1/2018 on certification

numbers 12-14 (NOMOS 2019). Polenz, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 52 GDPR, margin number 15 (Nomos 2019). Boehm, in Kühling

on the annual reports): 2022: €4,450,000 2021: €4,351,000 2020: €3,700,000 2019: €3,862,000 2018: €2,372,000 In the end of 2022, the Office had 54 personnel

Spiecker gen. Döhmann, Datenschutzrecht, Article 1 GDPR, margin number 1 (Beck 2019) (accessed 2 September 2021). See Recital 10 See Recital 14 CJEU in C-398/15

and Beyond, in International Journal of Law and Information Technology, 27 (2019), p. 102. Recital 71 GDPR. Mendoza, Bygrave, The Right not to be Subject

Diário da República n.º 194/2004, Série I-A de 2004-08-18, altered by Law 58/2019, of 8 of August (Portuguese Data Protection Law, supplementing the GDPR)

law "informatique et Libertés" has to be read jointly with the Decree n° 2019-536 of May 29. According to Article 8(I)(2)(d) of the loi "Informatique et

criteria in accordance with Articles 42 and 43 of the Regulation’, 4 June 2019 (Version 3.0), pp. 19-20 (available here). European Commission, ‘Data Protection

Döhmann, Datenschutzrecht, Article 28 GDPR, margin number 70 (C.H. Beck 2019). EDPB, ‘Guidelines 07/2020 on the concepts of controller and processor in

gen. Döhmann, Datenschutzrecht, Article 17 GDPR, margin number 6 (C.H. Beck 2019). Along the same line, Herbst, in Kühling, Buchner, DS-GVO BDSG, Article

Spiecker gen. Döhmann, Datenschutzrecht, Article 58 GDPR, margin number 6 (Nomos 2019). Hijmans, in Kuner, Bygrave, Docksey, The EU General Data Protection Regulation

planned audits in intervals of six months. The focus of the last half of 2019 was controllers; daily surveillance, data protection in relation to employment

gen. Döhmann, Datenschutzrecht, Article 19 GDPR, margin number 8 (C.H. Beck 2019). Kamann, Braun in Ehmann, Selmayr, Datenschutz-Grundverordnung, Article

this section! Memoria 2019: https://www.avpd.euskadi.eus/contenidos/informacion/publicaciones_avpd/es_def/adjuntos/memoria_avpd-2019_web-es.pdf

Döhmann, Datenschutzrecht, Article 39 GDPR, margin numbers 7-15 (C.H. Beck 2019). WP29, ‘Guidelines on Data Protection Officers (‘DPO’s)’, 16/EN WP 243 rev

Bundesrepublik Deutschland, 13 June 2019 (available here), and CJEU, C-142/18, Skype Communications SRL, 5 June 2019 (available here). Kühling, Raab, in

Spiecker, Datenschutzrecht, Article 68 GDPR, margin number 5 (C.H. Beck 2019, 1st edition). Docksey, in Kuner et al., The EU General Data Protection Regulation

Spiecker gen. Döhmann, Datenschutzrecht, Article 54 GDPR, margin number 8 (Nomos 2019). Dissenting views can be found in Hijmans, in Kuner, Bygrave, Docksey, The

of personal data in Slovakia from 25 May 2018 to 24 May 2019 (‘The Report’) in September 2019. The Report is issued annually and is subject to a debate

number 7 (C.H. Beck 2019, 1st ed.) Polenz, in Simitis, Hornung, Spiecker, Datenschutzrecht, Article 61 GDPR, margin number 7 (Beck 2019, 1st ed.), who clarifies

369 11 fines in 2020, the lowest being €200 and highest €65,000 9 fines in 2019, the lowest being €200 and highest €150,000 12 fines in 2018, the lowest

Döhmann, Datenschutzrecht, Article 30 GDPR, margin number 14 (C.H. Beck 2019). Hartung, in Kühling, Buchner, DS-GVO BDSG, Article 30, margin number 17

Döhmann, Datenschutzrecht, Article 34 GDPR, margin numbers 8-9 (C.H. Beck 2019). To this extent, the EDPB outlines three distinct categories of personal

(C.H. Beck 2019). Schantz, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 46 GDPR, margin number 10 (C.H. Beck 2019). This applies

Hornung, Spiecker, Datenschutzrecht, Article 17 GDPR, margin numbers 5 (NOMOS 2019). See below commentary on paragraph 2, and Article 19 GDPR. Nolte, Werkmeister

+358-18-25-550 Procedural Law: Landskapslag (2019:9) om dataskydd inom landskaps- och kommunalförvaltningen Landskapslag (2019:74) om tillämpning på Åland av riksförfattningar

number 12 (C.H. Beck 2019, 3th Edition). Reibach, in Taeger, Gabel, DSGVO BDSG, Article 36 GDPR, margin number 12 (C.H. Beck 2019, 3th Edition). Jandt

Gabel, DSGVO – BDSG, Article 79 GDPR, margin number 8 (Deutscher Fachverlag 2019 3rd edition); Leupold, Schrems in Knyrim, Der Datkomm, Article 79 GDPR, margin

gen. Döhmann, Datenschutzrecht, Article 14 GDPR, margin number 1 (C.H. Beck 2019). Zanfir-Fortuna, in Kuner, Bygrave, Docksey, The EU General Data Protection

gen. Döhmann, Datenschutzrecht, Article 88 GDPR, margin number 25 (1st edn. 2019, Beck). The German GDPR uses the term ‘Kollektivvereinbarungen’, while the

Döhmann, Datenschutzrecht, Article 26 GDPR, margin number 12 (C.H. Beck 2019). EDPB, ‘Guidelines 07/2020 on the concepts of controller and processor in

Decisions: Category:Commissioner (Cyprus) Head Count: n/a Budget: 503.855 Euro (2019)

Döhmann, Datenschutzrecht, Article 78 GDPR, margin numbers 3 and 7 (C.H. Beck 2019). The Author also points out that "The right to an effective remedy is inspired

list of such reprimands on the AP website does show reprimands going back to 2019 which had not been published before under the policy to publish whole decisions

Decisions: Category:NAIH (Hungary) Head Count: 114 Budget: 1,131 billion HUF in 2019 (3,429 million EUR)

Döhmann, Datenschutzrecht, Article 35 GDPR, margin number 36 (C.H. Beck 2019). WP29, ‘Guidelines on Data Protection Impact Assessment (DPIA) and determining

of Play - IMI for GDPR purposes, 27 June 2018 (available here). See EDPB, 2019 Annual Report, Section 4.3.1 (available here). European Commission, 16 May

Döhmann, Datenschutzrecht, Article 20 GDPR, margin number 18 (C.H. Beck 2019). European Commission, 'A Europe fit for the digital age' (available here)

Wolff, Brink, DS-GVO, Article 69 GDPR, margin numbers 4-6 (C.H. C.H. Beck 2019, 35th edition) Dix in Kühling, Buchner, DS-GVO BDSG, Article 69 GDPR, margin

, First Chamber Ruling, Case 1 BvR 276/17 (in DE), 6 November 2019. ECLI:DE:BVerfG:2019:rs20191106.1bvr027617 Bundesverfassungsgericht, Second Senate Judgment

gen. Döhmann, Datenschutzrecht, Article 24 GDPR, margin number 9 (C.H. Beck 2019). The attribution of the various conditions to these criteria is not practised

gen. Döhmann, Datenschutzrecht, Article 73 GDPR, margin number 3 (C.H. Beck 2019, 1st edition). Nguyen, in Gola, DS-GVO, Article 73 GDPR, margin number 2

- 20/01868 (PVN-2020-15) (Available here). Court of Appeal of Brussels - 2019/AR/1006 (available here). HBDI (Hesse) - 62334 (available here). Worms, in

350 (Oxford University Press 2020). CJEU, C‑673/17, Planet49, 1 October 2019, margin number 58-60 (available here) Heckmann, Paschke, in Ehmann, Selmayr

EU/European Economic Area. By the end of 2018, the EDPS reaches 100 employees. In 2019, the EDPS starts supervising Eurojust - an EU agency in charge of combating

provide an overview over which sectors and issues will be prioritized. For 2019-2020 this overview can be found here (in SE). You can help us filling this

gen. Döhmann, Datenschutzrecht, Article 77 GDPR, margin number 6 (C.H. Beck 2019). Bergt, in Kühling, Buchner, DS-GVO BDSG, Article 77 GDPR, margin number

Datenschutzrechtliche Schadensersatzansprüche im Musterfeststellungsverfahre, in NJW, 72 (2019) p.3415; Similar opinion by Wybitul/Haß/Albrecht, Abwehr von Schadensersatzansprüchen

notion de responsable conjoint du traitement”, in Journal de Droit Européen, 2019/2, pp. 67-69. Act on the Protection on Personal Data of 29 August 1997, Journal

in incomplete datasets using generative models. Nature Communications 10 (2019). Wiese Svanberg, in Kuner et al., The EU General Data Protection Regulation

Döhmann, Datenschutzrecht, Article 33 GDPR, margin number 18 (C.H. Beck 2019). EDPB, Guidelines 9/2022 on personal data breach notification under GDPR

Döhmann, Datenschutzrecht, Article 15 GDPR, margin number 23 (C.H. Beck 2019). EDPB, ‘Guidelines 01/2022 on data subject rights - Right of access’, 28

administrative bodies of a collegial nature; Considering the decree n o 2019-536 of May 29, 2019 taken for the application of the law n o 78-17 of January 6, 1978

March 4, 2019, the Company filed written comments on the report. The rapporteur replied to these observations on March 15, 2019. On April 2, 2019, the company

Case Number/Name: C-673/17 Planet49 European Case Law Identifier: ECLI:EU:C:2019:801 Reference from: BGH (Germany) Language: 24 EU Languages Original Source:

01-00001582885-0011-0033-01-01-� L _JCourt of Appeal Brussels -2019/AR/1600- p. 12 the decision 06/2019 of 17 September 2019 of the Chamber of Disputes of the Destroy the

details. Direct marketing and data broking On 23 October 2019, GZ: DSB-D550.148/0017-DSB/2019, the DSB imposed a fine of € 18,000,000.00 on Österreichische

Data Protection Authority was established. From 29.8.2019 this Law was repealed by Law 4624/2019, which provides for the implementing measures of the GDPR

on 10/26/2018, 01/18/2019, 02/22/2019, 07/22/2019, 10/10/2019 and 05/24/2019. b. The letter received from EQUIFAX, dated 10/21/2019, in which it responds

with the APD respectively on May 20, 2019 (DOS- 2019-02837), June 4, 2019 (DOS-2019-03124), July 2, 2019 (DOS-2019-03668), and 26 November 2020 (this complaint

Competition (UWG) Paragraph 15(1) German Law on Telemedia (TMG) Decided: 29.07.2019 Parties: Fashion ID GmbH & Co. KG Verbraucherzentrale NRW eV, Case Number/Name:

https://www.lawspot.gr/nomikes-plirofories/nomothesia/n-4624-2019/arthro-15-nomos-4624-2019-ereynitikes-kai-diorthotikes This provision notes: '8. Where

Decided: 24.09.2019 Parties: CNIL Google LLC Case Number/Name: C-136/17 Google LLC vs CNIL European Case Law Identifier: ECLI:EU:C:2019:773 Reference from:

10, 2018. By the Act of amendments to sectoral regulations of February 21, 2019. - changes were made to over 160 acts regulating various sectors and areas

complaint of XXXX against the decision of the data protection authority of XXXX 2019, XXXX , regarding the provision of a copy of the processed personal data

than one million kroner from 2018 to 2019. From a small profit in the operating profit for 2018, the accounts in 2019 showed a deficit of more than 363,000

1 October 2019, Mr. Van Graafeiland acted on behalf of the State. 1.5. Contrary to her letter of 1 October 2019, by letter of 13 November 2019, Mr. Van

protection authority of 11 February 2019, GZ DSB-D213.747/0002-DSB/2019, after an oral hearing on 22 November 2019 and 30 October 2020, in a closed session

obtained a self-disclosure from the defendant dated 21 October 2019. By letter dated 27 November 2019 (Annex K4), his counsel requested the defendant to delete

number to the citizens. In Portugal the GDPR is implemented by the Lei n.º 58/2019. In Portugal the Age of consent is 13 years old. You can help us fill this

or PDPA, promulgated with State Gazette No. 17/26.02.2019 and entered into force on 2nd March 2019. The Bulgarian government has also passed numerous laws

percentage disclosed Denmark 2019-2020: 30 June 2019 Emergency 2 / 50%. Other legal 29 / 52%. Preservation 8 / 45%. 31 December 2019 Emergency 3 / 0%. Other

notification requirements in the case of a personal data breach, 2019-441-1581 and 2019-441-1578. Both cases regarded insufficient access controls on a

plaintiff was set at 28 June 2019, and for submissions in response from the defendant at 29 July 2019. 3/9-On 18 June 2019, the defendant requested a copy

LOPDGDD). On April 4, 2019, the claim is transferred to EQUIFAX. On April 24, 2019, this Agency received, under registration number 021042/2019, a letter of allegations

the electoral census for delivery to political parties (date 06/03/2019).On 17/05/2019 an envelope with a miniature name and address, with the letterhead

dated August 1, 2019 (in the version of the correction of deficiencies dated September 10, 2019), the complainant alleged that on July 2, 2019, he requested

this section! In Czech Republic the GDPR is implemented by the Zákon č. 110/2019. You can help us fill this section! You can help us fill this section! You

Liberties Deliberation No. SAN-2019-010 of November 21, 2019 Deliberation of the restricted formation n°SAN-2019-010 of November 21, 2019 concerning the company

Office for Personal Data Protection in the letter of [...] June 2019, No. ZSPU.421.3.2019, constituting the notice of initiation of the procedure. Having

details. Product No.: PS/00188/2019 938-0419 DECISION ON DISCIPLINARY PROCEEDINGS In the sanctioning procedure PS/00188/2019, instructed by the Spanish Data

C/EX/4278-6/07.11.2019 (following the C/EX/4278-4/01.11.2019 document) and C/EX/4278-7/07.11.2019 (following the W/EX/4278-5/01.11.2019 document) documents

Protection Board's interpretation guidelines issued on 2 December 2019 Guidelines 5/2019 on the criteria of the Right to be Forgotten in the search engines

] January 2019, the Company's letter of [...] February 2019, as well as reports of violations made by the Company). Order of [...] August 2019. The President

Decision 11-2019 of November 25, 2019; Decision 10-2019 of November 25, 2019; Decision 04/2019 of May 28, 2019 and Decision 30/2020 of November 8, 2019; Decision

Deliberation SAN-2019-001 of 21 January 2019 Print National Commission for Information Technology and Civil Liberties Deliberation No. SAN-2019-001 of January

("ePrivacy Directive") (see Opinion 5/2019 on the interaction between the ePrivacy Directive and the GDPR of March 12, 2019). The data protection authority also

this section! In Belgium the GDPR is implemented by the Data Protection Act (2019). You can help us fill this section! The age of consent in Belgium is 13

The Personal Data Act (2018) GDPR A6 Proceedings Oslo District Court TOSLO-2019-98312 - Borgarting Court of Appeal LB-2020-18230 - Supreme Court HR-2021-2403-A

C/EIS/1342/19-01-2019, as completed by document No. C/EIS/2184/21-03-2019, according to which his telephone number ... received on ...2019 at ...2019 and time

from 23.07.2019 (and ref. Complaint C/ΕΙΣ/5141/23.07.2019) Complaint, as supplemented by 09.10.2019 (and ref. no. Out C/ΕΙΣ/6110/10.09.2019) an application

letter dated 17 April 2019, and asked questions to OLVG. These questions were answered by a letter dated 3 May 2019. On 22 May 2019, five inspectors from

of 11/12/2019 appears as closed, and the orders dated 11/14/2019 appear cancelled. The SIM change on 11/12/2019 was made (...) and on 11/14/2019 via (..

true that the e-mail message of 20 March 2019, unlike, for example, the letters of 5 September and 10 December 2019, does not explicitly state that it concerns

investigating. In a letter dated April 1, 2019 (page 10 of the file), which the plaintiff received on April 2, 2019, the defendant terminated the employment

to achieve these goals (2019. judgment of 24 September GC et al. GC et al. [Delete links to special data], C‑136/17, EU:C:2019:773, paragraph 74), and

College. Thus, the complainant underlined that, under Article 55 of Law 4629/2019, the College had the legal responsibility, as a data processor, to inform

particular its articles 20 and following; Considering the decree n o 2019-536 of May 29, 2019 taken for the application of the law n o 78-17 of January 6, 1978

C/EX/7597/05-11-2019, the complainant was invited to a hearing at the meeting of the Authority’s Section on 04-12-2019.After number one.C/ES/8386/03-12-2019 of the

C/EX/6013-1/03-10-2019 document in which it requested its views on the complainants. The company complained responded by no. C/ES/7002/15-10-2019 document in

dataprotection.ie/sites/default/files/uploads/2018-12/DPC_ChildrensRights_2019_English.pdf https://www.dataprotection.ie/en/legal/data-protection-legislation

Considering the decisions n ^o 2019-081C of April 24, 2019 and n ^o 2019-102C of June 6, 2019 of the President of the National Commission

complainant indicates that she received this formal notice on March 1 2019. 8. On March 3, 2019, the complainant wrote to the second respondent to receive explanations

C/ΕΞ/8101/22-11-2019 Hearing, in relation to the complaint.The complainant was also informed of the meeting by letter ref.C/ΕΞ/8139/25-11-2019 of the Authority

February 2019, A requested that the blocking of her user on the job server and forwarding of her e-mail to the employer cease. On 27 February 2019, the employer

no. No. C/EX/7600/05-11-2019 document complained to a hearing at the meeting of the Department of the Authority on 04-12-2019, during which the above-mentioned

the promotion of the defendant's candidacy at the parliament elections of 2019 violated Article 13 of the ePrivacy Directive. The DPA received two complaints

1 October 2019, Mr. Van Graafeiland acted on behalf of the State. 1.5. Contrary to her letter of 1 October 2019, by letter of 13 November 2019, Mr. Van

implemented in May 2019. The breach of Article 39.1.a) of the GDPR therefore lasted for at least between May 25, 2018 and May 2019. __________________

February 2019 - reference is made to the facts of the challenged decision (pp. 251 et seq. of the German version). In its ruling of March 29, 2019, the Regional

entry into this Agency on 02/13/2019 (a few days after that admission for processing on 02/01/2019), 05/23/2019 and 08/27/2019; and admitted for processing

last BGH, judgment v. v. 2.7.2019 - VI ZR 494/17, NJW 2019, 453; see also Senate, judgment of 7.6.2018 - 15 U 127/17 BeckRS 2019, 7664). The mere fact that

Dispute Chamber Interim decision 26/2021 of 23 February 2021 File no. : DOS-2019-01377 Subject: Language of the procedure - complaint against IAB Europe The

administrative court (VwGH January 14, 2020, Fr 2019/12/0042 with reference to VwGH July 2, 2019, Fr 2019/12/ 0028; 25.5.2016, Fri 2015/11/0007). Even if

reiterated on...2019 The Centre refused to accede to the Centre for the same reasons and a subsequent request from the applicant on...2019, in which it also

Protection Board, Guidelines, Guidelines 3/2019 on processing of personal data through video devices, 10.07.2019, p. 21ff, available online at https://edpb

December 2017). 6. On 11 September 2019, a copy of the file will be sent to the defendant. 7. on 26 September 2019, the Disputes Chamber will receive the

engaged by the Applicant as an employee, beginning in 2019. 4. On November 26, 2019 and December 14, 2019, Mr. X and shareholder company W exchange letters

intersubjective communication. TEXT Judgment of the Constitutional Court No. 464/2019 Summary: Declares the rule contained in article 3 of Organic Law no. 4/2017

the consistent and homogeneous application of these provisions. On 26 April 2019, a shareholder of a Hungarian public limited company attended its general

submitted her request on May 13, 2019 and only received an answer on November 21, 2019 (probably meaning: November 27, 2019). In addition, the statements

for a statement, which was sent on 8 October 2019. The request was answered in statement dated 21 October 2019. Attached were the company's routines for camera

to conclude. Google's submissions were received on 30 September 2019. On 15 October 2019, the the Registry of the Litigation Chamber, in the absence of

paragraph 81, as well as of 24 September 2019, GC etc. (Delete links to sensitive data), C-136/17, EU:C:2019:773, paragraph 66]. 63. In particular, when

5.2020 - Ro 2019/04/0229, ZD 2020, 463; BVwG, Spruch vom 19. August 2019 - W211 2217629-1/10E Rn. 29 et seq.; Spruch vom 23. Oktober 2019 - W258 2227269-1/114E

found out about the registration on December 1, 2019. 11With a letter from a lawyer dated December 4th, 2019, the defendant was asked to revoke the illegal

ri-2019.pdf. 236Decision of the General Secretariat No. 01/2019 of 16 January 2019, para. 6.8). 237Decision of the General Secretariat No. 01/2019 of 16

Norwegian original for more details. Decision of the Privacy Board 21 January 2019 (Mari Bø Haugstad, Bjørnar Borvik, Line Coll, Hans Marius Graasvold, Gisle

particular its articles 20 and following; Having regard to decree no. 2019-536 of May 29, 2019 taken for the application of law no. 78-17 of January 6, 1978 relating

C-399/11, EU:C:2013:107, para. 60; judgment of 29 July 2019, Pelham and others, C-476/17, EU:C:2019:624, para. 80 et seq.) This is to be taken into account

with IMI number 69346 and dated June 17, 2019. One month is given at authorities to manifest.  On August 24, 2019: the data protection control authority

4 September 2019, he resigned with effect from 30 September 2019. The applicant’s requests to the SRB3        By an email of 29 September 2019, the applicant

financing applications. In the contested decision of XXXX 2019, delivered electronically on XXXX 2019, the data protection complaint was dismissed as unfounded

Greek Constitution Article 1(g) Law 4629/2019 Article 9 Law 4629/2019 Article 15 Law 4629/2019 Article 33 Law 4629/2019 Type: Complaint Outcome: Other Outcome

as a unilateral body in accordance with Articles 17 par. 1 of Law No. 4624/2019 (Government Gazette A' 137), within the framework of the powers provided

religious or non-religious beliefs. The HDPA referred to its own past Decision 28/2019, where it held that the disclosure of the fact that a student is not Orthodox

The 2011 ruling included a ban on the right to run a business, however in 2019 a court removed this ban so that the data subject could become a general

regard Decisions APD 25/2022, sc. 1, 26/2019, sc. 7 and APD 43/2019, sc. 6. 6 See in particular, decision 44/2019 of the Authority, s. 17, and 54/2021, s

Authority has taken into account the following: Letter ref. C/ΕΙΣ/5370/06-08-2019 to the Authority, A denounces the PPC for failure to comply with its right

linked to their phone number by anyone in possession of such a number. In 2019, unknown “third parties” automatically combined telephone numbers and matched

decisions, which it handed over to credit information companies as of 5 November 2019 as default information based on final judgments. Binsnode and the registrar

decisions, which it handed over to credit information companies as of 5 November 2019 as default information based on final judgments. Binsnode and the registrar

decisions, which it handed over to credit information companies as of 5 November 2019 as default information based on final judgments. Binsnode and the registrar

penalty order on the grounds that, in the period from 25 May 2018 to 5 March 2019, the controller concerned deliberately omitted to take the necessary measures

same applies to the notice of increase on July 1, 2019 in tariff PT3. The notification letter from May 2019 states es: "Why is the contribution increasing

them to allow said personnel to opt out of being listed and reviewed. In 2019, the decision was overturned by the Privacy Appeals Board, was then taken

in particular Articles 20 et seq; Having regard to Decree No. 2019-536 of 29 May 2019 taken for the application of Law No. 78-17 of 6 January 1978 relating

participants will be kept in accordance with the current Greek legislation, Law 4624/2019 on the Personal Data Protection Authority and the General Regulation on Personal

issued from 1 March 2015 to 3 March 2019: family name, parents' names, 3) for identity cards issued after 4 March 2019: nationality, identity card number

inspection"), informing data subjects Registrar Medical clinic On 23 October 2019, a complaint regarding the registered person's right of inspection was initiated

under the terms the provisions of paragraph 3 of article 39 of Law no. 58/2019, of 8 August; iv. The Deliberation Project violates the technical independence

defendant had not disclosed the claimant's data to third parties. By 04.06.2019, the defendant had erased all data on "affinities for political parties"

of the claimed party, on March 22, 2022. Registration date March 28, June 2019. SECOND: In accordance with article 65.4 of Organic Law 3/2018, of 5 December

Act EU - 2nd DSAnpUG-EU) of 20 November 2019 (Federal Law Gazette I 1626, 1638) with effect from 26 November 2019. § Section 12 of the Federal Ministry of

Alongside the Data Protection Act (2018), in Cyprus there is also L. 44(I)/2019, which implemented the Directive (EU) 2016/680 on the protection of natural

November 2019, the Norwegian Data Protection Authority asked Sbanken for a statement. The bank explained its view in a letter dated 21 November 2019 and maintained

in particular Articles 20 et seq; Having regard to Decree No. 2019-536 of 29 May 2019 taken for the application of Law No. 78-17 of 6 January 1978 relating

3425/157/2019, 3578/157/2019, 3846/157/2019, 3871/157/2019, 3891/152/2019, 3918/157/2019, 4338/157/2019, 4666/154/2019, 5973/157/2019, 6773/157/2019 ja 7022/157/2019

740 m. Hansen/Struwe; KG MMR 2020, 239 m. Anm. Heldt, Ls. 5; Hacker, ZfPW 2019, 148 (184); Moos, in: Moos/Schefzig/Arning, Praxishdb. DSGVO, 2nd ed., ch

guardians' consent to establish of students' school accounts with Google. In 2019, Google changed the terms of use for G-Suite so that a number of additional

HDPA (Greece) - 47/2019 Authority: HDPA (Greece) Jurisdiction: Greece Relevant Law: Article 6 GDPR Article 21 GDPR Article 83 L. 4624/2019 (Data Protection

Started: Decided: 07.10.2019 Published: Fine: Reduced from 24,000 EUR to 22,000 EUR Parties: Forthnet National Case Number/Name: 36/2019 European Case Law Identifier:

Found Started: Decided: 25.03.2019 Published: 25.03.2019 Fine: 2000 EUR Parties: n/a National Case Number/Name: DELIBERAÇÃO/2019/222 European Case Law Identifier:

Started: Decided: 25.10.2019 Published: Fine: None Parties: Ergasias S.A National Case Number/Name: 39/2019 European Case Law Identifier: n/a Appeal: n/a Original

Started: Decided: 05.02.2019 Published: 05.02.2019 Fine: 20.000 EUR Parties: n/a National Case Number/Name: Deliberação 2019/21 European Case Law Identifier: Processo

Outcome: Upheld Started: Decided: 18.11.2019 Published: Fine: None Parties: Hospital National Case Number/Name: NAIH/2019/5112/15 European Case Law Identifier:

Upheld Started: Decided: 17. 12. 2019 Published: Fine: 2000 EUR Parties: Anonymous National Case Number/Name: 13/2019 European Case Law Identifier: n/a

GDPR Type: Investigation Outcome: Violation Found Started: Decided: 24.10.2019 Published: 30.01.2020 Fine: 100,000 EUR Parties: Food craft company (unknown)

Upheld Started: Decided: 11.12.2019 Published: Fine: 1,500 EUR Parties: Public sector National Case Number/Name: NAIH/2019/5112/15 European Case Law Identifier:

Outcome: Upheld Started: Decided: 11.12.2019 Published: Fine: None Parties: n/a National Case Number/Name: 43/2019 European Case Law Identifier: n/a Appeal:

Started: Decided: 18.10.2019 Published: Fine: 20,000 EUR Parties: [ΠΛΕΓΜΑ ΝΕΤ Wind Hellas] National Case Number/Name: 38/2019 European Case Law Identifier:

the FPS did not comply. The data subject then filed a second complaint in 2019. The DPA found that the FPS had not established internal procedures in compliance

Started: Decided: 06.05.2019 Published: Fine: 107.000 EUR Parties: DECO PROTESTE Editores, Lda. National Case Number/Name: Deliberação 2019/297 European Case

AEPD (Spain) - PS/00012/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 5(1)(f) GDPR Type: Complaint Outcome: Upheld Started: Decided:

AEPD - PS/00337/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 21(1) GDPR Article 39 Organic 5/1985, of June 19 on the General

AEPD - TD/00306/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Type: Investigation Outcome: No further action Started: Decided: 4. 2. 2020

National Council on G 72-74/2019 shall be rejected.6 The remainder of the application of the Members of the Bundesrat on G 181-182/2019 shall be rejected. Reasons

AEPD - PS/00098/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 13 GDPR Type: Complaint Outcome: Upheld Started: Decided: n/a Published:

Tietosuojavaltuutetun toimisto - 3425/157/2019 Authority: Tietosuojavaltuutetun toimisto (Finland) Jurisdiction: Finland Relevant Law: Article 21 GDPR

AEPD - PS/00367/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 5(1)(f) GDPR Article 83(5)(a) GDPR Article 58(2) GDPR Type: Complaint

AEPD - PS/00429/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 6(1) GDPR Type: Complaint Outcome: Upheld Started: Decided: 04.03

AEPD - PS/00406/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 5(1)(f) GDPR Article 83(5)(a) GDPR Type: Complaint Outcome: Upheld

AEPD - PS/00293/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 5(1)(c) GDPR Type: Complaint Outcome: Upheld Started: Decided: Published:

AEPD - E/06179/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 32 GDPR Article 33 GDPR Article 34 GDPR Type: Investigation Outcome:

AEPD - PS/00027/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 5(1)(b) GDPR Article 83(5) GDPR Type: Complaint Outcome: Upheld

AEPD - PS/00438/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 6(1)(a) GDPR Article 8(1) GDPR Article 13 GDPR Article 7 LOPDGDD

distraint upon the salary was sent to the complainant’s employer. On 2nd January 2019 the individual sent e-mail to the private bailiff with detailed explanation

bankruptcy took place on 27/07/2019 and that they became aware of it on 31/07/2019. The notification was made on 02/08/2019. The number of people affected

bankruptcy took place on 27/07/2019 and that they became aware of it on 31/07/2019. The notification was made on 02/08/2019. The number of people affected

technical and organisational security measures. See the updated decision 2019-441-1480 here. Share blogs or news articles here! The decision below is a

Tietosuojavaltuutetun toimisto - 3846/157/2019 Authority: Tietosuojavaltuutetun toimisto (Finland) Jurisdiction: Finland Relevant Law: Article 17 GDPR

AEPD - PS/00292/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 5(1)(a) GDPR Article 6(1)(b) GDPR Article 83(2)(b) GDPR Article

invoice dated 30/04/2019. On 03/07/2019, a request for information is sent to TECSIBLE, not having received a reply. On 10/09/2019, it is verified in ***URL

safety at law firm Published 05-11-2019 Decision Private companies Journal number 2019-41-0026Agency Summary In 2019, the Danish Data Protectioncarried

- 2019-0878 Authority: EDPS Jurisdiction: European Union Relevant Law: Article 7 GDPR Regulation (EU) 2018/1725 Directive 2002/58/EC Type: Complaint Outcome:

notification requirements in the case of a personal data breach, 2019-441-1581 and 2019-441-1578. Both cases regarded insufficient access controls on a

AEPD - PS/00187/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 4(11) GDPR Article 5(1)(a) GDPR Article 6(1)(a) GDPR Article 83(5)(a)

Constitutional Court - 135/2019 Court: Constitutional Court (Belgium) Jurisdiction: Belgium Relevant Law: Article 23 GDPR PNR Directive 2016/681/EU API

HDPA (Greece) - 43/2019 Authority: HDPA (Greece) Jurisdiction: Greece Relevant Law: Article 5(1)(a) GDPR Article 5(2) GDPR Article 58(2)(c) GDPR Article

of investigation, E/01730/2019, as well as the documents supported by the claimed on July 15, 2019: FIRST: On 15 January 2019, when the claimant accesses

for processing on September 19, 2019.FOURTH: In relation to the research actions referenced with thecode E / 08848/2019, a new information request was sent

Please refer to the Spanish original for more details. Procedure Nº: E / 08452/2019 940-0419 RESOLUTION OF FILES OF ACTIONS Of the actions carried out by the

complaint filed by Mr. A.A.A. (hereinafter, the claimant) was filed on 14 June 2019 with the Spanish Data Protection Agency. The claim is directed against the

Bulgaria, held on 26.05.2019 г. The complainant claims that he has established the violation after an electronic inquiry made on 27 April 2019 at the Central Election

09.10.2019 Case number DSB-D130.073/0008-DSB/2019 Contestation before the BVwG/VwGH/VfGH This decision is final. Text GZ: DSB-D130.073/0008-DSB/2019 of 9

complainant's name. On July 11, 2019, Y Municipality issued an opinion on the case, which complaints on July 16, 2019 sent its comments to. 2.1. Y Municipality's

Please refer to the Spanish original for more details. Procedure No.: E/08205/2019 940-0419 TERMINATION OF PROCEEDINGS Of the actions carried out by the Spanish

Google My Business. The complainant was informed of this on 17 June 2019. On June 27, 2019, this Agency, through the support of the Electronic Notification

Technology and Civil Liberties) Decision n°MED-2019-025 of November 5, 2019 Decision n° MED 2019-025 of November 5, 2019 giving formal notice to the company BOUTIQUE

been set for 6 August 2019 and the final date for the submissions in response from the defendant for 26 August 2019. -On 21 August 2019, the Litigation Chamber

Spanish Data Protection Agency in Case E/07449/2019, and on the basis of the following FIRST:On 23/10/2019, the Director of the Spanish Data Protection Agency

been set for 6 August 2019 and the final date for the submissions in response from the defendant for 26 August 2019. -On 21 August 2019, the Litigation Chamber

: PS/00174/2019 RESOLUTION R/00585/2019 ON THE TERMINATION OF THE PROCEDURE BY VOLUNTARY PAYMENT In the sanctioning procedure PS/00174/2019, instructed

development and testing environment from another supplier. Journal number: 2019-431-0036 Summary In one specific case, the Data Inspectorate criticized the

following FACTS FIRST: Mrs. A.A.A. (*hereinafter, the claimant) on February 7, 2019 filed a claim before the Spanish Data Protection Agency, motivated by the

security (respectively, the Supervisory Authority's Nos. 2019-441-3399, 2019-441-4055 and 2019-441-4160). 1. Decision After a review of the cases, the Data

In a letter of 14 February 2019 to complaints, the Labor Market Holiday Fund stated that in the letter of 28 January 2019, the Fund's decision to place

protection. The audit was to be conducted from 29 July 2019 to 2 August 2019. By letter of [...] July 2019. (mark: [...]) Urząd Ochrony Danych Osobowych via

Decision MED-2019-027 of 12 November 2019 Print National Commission for Information Technology and Civil Liberties Decision n°MED-2019-027 of November

to the Spanish original for more details. OEPD • Procedure No.: PS/00390/2019 RESOLUTION OF THE SANCTIONING PROCEDURE The procedure instituted by the Spanish

Spanish Data Protection Agency, made an appeal under Law TD/00127/2019 on 4 June 2019, to review the complaint made by A.A.A. and to invite the respondent

Spanish original for more details. File No.: TD/00182/2019 1037-100919 RESOLUTION Nº: R/00514/2019 Having regard to the appeal for reversal issued by the

the party responsible on June 28, 2019, as stated in the Notific@ certificate in the file. FIFTH: On November 29, 2019, the Director of the Spanish Data

community of law firms Published 05-11-2019 Decision Private companies Journal number: 2019-41-0029Agency Summary In 2019, the Danish Data Protectioncarried

Please refer to the Spanish original for more details. Procedure No: PS/00425/2019 RESOLUTION OF PENALTY PROCEEDINGS Procedure initiated by the Spanish Data

with the authority's disclosure obligation. Journal number: 2019-432-0024 Summary In April 2019, the Data Inspectorate initiated a case of its own operation

sanction procedure; to this procedure, Glovo stated that, in March 13th, 2019, it had formally appointed a DPO, but it had decided not to make this appointment

disproportionate number of images of public spaces at least from 2012 to 2019 that it was operating. Following Article 83(5)(a)GDPR, read in the lights

File No.: DOS-2018-06068 Litigation Chamber Decision on the merits 10/2019 of 25/11/2019 Subject: Complaint by X against a candidate in election Y The Litigation

banking). On September 3, 2019, BEC deleted the historical postings from Danish banks and subsequently, on October 14, 2019, deleted 2000 postings, from

(respondent) with the Spanish Data Protection Agency (AEPD) on 16 May 2019. On 20 February 2019 the complainant received an email with an invoice for an alleged

municipalities in question. By letters dated 8 November 2019, 20 November 2019 and 21 December 2019, Schultz has commented on the matter. 2.1. About the incident

Please refer to the Spanish original for more details. Product No.: PS/00324/2019 DECISION ON DISCIPLINARY PROCEEDINGS From the procedure instructed by the

visualized by a third party due to an error in charging a bill. On May 14, 2019, the claimant received a call from a client of XFERA MOBILES. In that call

General Elections of 28 April 2019 was made on 5 March, so the deadline for the submission of claims was set from 11 to 18 March 2019. The same deadlines apply

Protection Regulation by sending unencrypted emails between January 1, 2019 and April 9, 2019, where information on trade union affiliation could be derived and

distributing election advertising in violation of Article 5(1)(b) GDPR. On 23/05/2019 it was published in the newspaper "Segre" that the Medical Association of

sent on March 21, 2019. The third part of the reply was sent on March 22, 2019, and the last part of the reply was sent on March 25, 2019. Thus, the objection

occurring if-thousands.4. Any other that you consider relevant . "On 01/22/2019, the Administrator Secretary of the claimed party, namednothing GESTICAN

Inspection proceeded to carry out the following actions: On 14/05/2019, and again on 27/05/2019, the letter submitted for analysis and communication to the complainant

schools. MaCom A / S is processing answers of assignments. On 15 and 16 August 2019, respectively, the data controllers reported breaches of personal data to

to open file PS/0006/2019 was made electronically on 07/02/2019 (date of availability) and was automatically rejected on 18/02/2019. This is confirmed by

Management Page on 06/10/2019 and on 20/10/2019 that were observed by the Inspection Service on the website on 17/10/2019 and on 20/10/2019 respectively, a copy

unsolicited emails after a customer has requested the deletion of his data. In 2019, Mr D, a customer of Iberia Airlines, requested the company to delete all

publisher's obligation to provide information. Journal number: 2019-431-0018Agency Summary In January 2019, the Danish Data Protectioninitiated a case of its own

details. • File Nº: TD / 00318/2019 1037-100919 RESOLUTION Nº: R / 00062/2020 Having regard to the claim made on June 9, 2019 before this Agency by D. AAA

details. • File Nº: TD / 00318/2019 1037-100919 RESOLUTION Nº: R / 00062/2020 Having regard to the claim made on June 9, 2019 before this Agency by D. AAA

following ACTS FIRST: Mr. AAA (* hereinafter, the claimant) dated August 6, 2019filed a claim with the Spanish Data Protection Agency. Theclaim is directed

installation and commencement of operation of the system (see also HDPA Decision 43/2019). Furthermore, the HDPA underlined that the transmittal of the video surveillance

00410/2019938-051119RESOLUTION OF PENALTY PROCEDUREIn the sanctioning procedure PS / 00410/2019, instructed by the Spanish Agency ofData Protection, before entity GARANTIZA

infringing its duties taking into account that the claim is dated February 2019], the AEPD decided to impose a fine of 3,000 € to the defendant. Additionally

Please refer to the Spanish original for more details. • Product No.: PS/00315/2019 DECISION ON DISCIPLINARY PROCEEDINGS From the procedure instructed by the

: PS/00291/2019 RESOLUTION R/00559/2019 ON THE TERMINATION OF THE PROCEDURE BY VOLUNTARY PAYMENT In the sanctioning procedure PS/00291/2019, instructed

context of its guidelines (Guidelines 4/2019 on Article 25 Data Protection by Design and by Default, 13.11.2019). According to these guidelines, it should

(h) GDPR.) Supervision of Payment Denmark's processing of personal data In 2019, the Data Inspectorate carried out a planned audit at Payout Denmark. The

to the agreement of initiation of PS/00275/2019, presented by the denounced entity. SIXTH: On November 29, 2019, the Proposal for Resolution was issued and

: PS/00266/2019 RESOLUTION R/00574/2019 ON THE TERMINATION OF THE PROCEDURE BY VOLUNTARY PAYMENT In the sanctioning procedure PS/00266/2019, instructed

: PS/00268/2019 RESOLUTION R/00578/2019 ON THE TERMINATION OF THE PROCEDURE BY VOLUNTARY PAYMENT In the sanctioning procedure PS/00268/2019, instructed

details. File No.: TD/00262/2019 1034-080719 RESOLUTION Nº: R/00651/2019 Having regard to the complaint made on 8 April 2019 to this Agency by Ms. A.A.A

22-09-2020 DecisionPublic authorities Journal number: 2019-431-0037 In December 2018 - February 2019, the Danish Data Protection Agency received a number

delivered by the Post Office on March 21, 2019. No reply is received. On June 5, 2019 these actions began. On October 29, 2019, Tesys Internet SLU sent this agency

to the agreement of initiation of PS/00278/2019, presented by the denounced entity.SIXTH: On November 29, 2019, the Proposal for Resolution was issued and

the file E / 05725/2019. - To consider reproduced for evidentiary purposes, the allegations to the agreement of start PS / 00366/2019 submitted by the claimed

Data Inspection carried out the following actions: On 18/02/2019, reiterated on 12/04/2019, the complaint submitted was transferred to the SSCM for analysis

Forces and Corps (Fuerzas y Cuerpos de Seguridad del Estado) in November 2019. In addition, the system does not have an informational poster indicating

referred to as the The complainant) filed a complaint with the Agency on 9 April 2019 Spanish Data Protection. The claim is directed against A.A.A. with NIF ***NIF

details. PS 49/2019 Carrer Rosselló, 214, esc. A, 1r 1a 08008 Barcelona File identification Resolution of the sanctioning procedure no. PS 49/2019, referring

reported data breach were in accordance with the data protection law. On 30 May 2019 CaixaBank S.A. notified the Spanish Data Protection Agency (AEPD) about a

The complainant requested access on 30 May 2019. Reto Moto replied to the complainant’s request on 26 June 2019. Reto Moto wrote in the reply, that data

data for direct marketing Applicant 's claims and reasons On 27 November 2019, the Finnish Competition and Consumer Authority transferred the applicant's

(ECLI) ECLI:AT:DSB:2019:DSB.D122.970.0004.DSB.2019 Last updated on 09.01.2020 Document number DSBT_20191108_DSB_E122_970_0004_DSB_2019_00 To the top of the

21 May 2019, a Tuesday. The third working day afterwards is May 24, 2019. Since 30 days later is a Sunday, the first working day is (24 June 2019) the last

concerned women. The police filed a respective claim with the AEPD on July 9, 2019. Whether the taking of pictures in public without the consent of the data

PROTECTION AGENCY PERSONAL DATA CLASS: REGISTRATION NUMBER: Zagreb, 28 August 2019 The Personal Data Protection Agency pursuant to Articles 57 (1) and 58 (1)

followingACTSFIRST: VIGO CITY COUNCIL (* hereinafter, the claimant) dated 7October 2019 filed a claim with the Spanish Agency for the Protection ofData. The claim

VODAFONE on 28/01/2019, which responded on 01/02/2019. The Acting Inspector issues the Report of Investigation Actions (signed on 15/02/2019) from which the

refer to the Spanish original for more details. *Procedure No.: PS/00452/2019 180-100519 Appeal No. RR/00326/2020 The action for annulment brought by ORANGE

Nº: PS / 00475/2019RESOLUTION R / 00252/2020 OF TERMINATION OF THE PAYMENT PROCEDUREVOLUNTARYIn the sanctioning procedure PS / 00475/2019, instructed by

from 19 August 2019'. 2.9. On 26 August 2019 [plaintiff] objected to the decision to withdraw her Dutch citizenship. On 29 August 2019, she applied to

1/12936-031219Procedure Nº: PS/00397/2019RESOLUTION R/00028/2020 OF TERMINATION OF PROCEEDINGS FOR PAYMENT IN THE PS/00397/2019 sanctioning procedure, instructed

TD/00325/20191037-100919RESOLUTION No.: R/00657/2019Having regard to the complaint filed on 9 May 2019 with this Agency by D.A.A.A., (hereinafter the complaining

Product No.: PS/00379/2019 DECISION R/00154/2020 ON TERMINATION OF PROCEEDINGS FOR PAYMENT VOLUNTEER In sanction procedure PS/00379/2019, conducted by the

that the appellant is not discussing the substance of this case (PS/00299/2019), but requiring the AEPD to solve another claim he/she had previously submitted

incorrectly request permission for placing tracking cookies News item/10 December 2019 Category: Cookies The Personal Data Authority (Autoriteit Persoonsgegevens

The following points are also noted: • On June 28, 2019, within the framework of file E00413/2019, the respondent was requested to provide information

of the data protection authority of 7 March 2019, GZ DSB-D130.033/0003-DSB/2019). In its opinion of 8 May 2019, the respondent names R*** Hotels GmbH as

refusal. The decision shows similarities with the Planet49 case, C‑673/17, EU:C:2019:801. The Court refers to Planet49 on multiple occasions with regards to the

modified by Final Provision 3. One of the LOPDGDD). The Agreement 2/2019, of 23 January 2019, of the Central Electoral Board establishes the following about

admitted for processing through a resolution of July 10 of 2019. FOURTH: On October 25, 2019, the Director of the Spanish Agency for Data Protection agreed

Policy Rules 2019 (hereinafter: Penalty Policy Rules) for this purpose.24 24 Stcrt. 2019, 14586, 14 March 2019. 25 Stcrt. 2019, 14586, 14 March 2019. In the

Reported personal data incidents 2019 (report 2020: 2). Page 6 of 10, Integrity Protection Authority Record number: DI-2019-9457 7 (10) Date: 2022-01-26 The

details. Procedure No: PS/00235/2019 938-0419 RESOLUTION OF THE DISCIPLINARY PROCEEDINGS In penalty proceedings PS/00235/2019, instructed by the Spanish Data

consent to to the processing of his personal data by the controller. In March 2019, the complainant withdrew his consent to the processing of personal data

implemented so that events such as the object of theclaim.THIRD: On 01/04/2019, a letter is received stating that he is a delegate ofdata protection, performing

deleted or anonymized per. April 30, 2019. The information processed by Dansk Kabel TV A / S until 30 April 2019 was ordinary personal data, including

respect to three properties which in 2019 became subject to orders for possession. Over the period of two years (2017-2019), during the court proceedings for

in the case. THIRD: On 02/26/2019, the Director of the AEPD agrees to admit the claim for processing. FOURTH: On 11/28/2019, the Director of the Spanish

Policy Rules, Authority for Personal Data, 2019 (Fines Policy Rules, 2019) The AP has adopted fine policy rules in 2019 in the implementation of the aforementioned

details. Procedure No:PS/00209/2019 938-0419 RESOLUTION OF THE DISCIPLINARY PROCEEDINGS In sanction proceedings PS/00209/2019, instructed by the Spanish Data

E/0113/2019, carried out the following actions of prior investigation: 1. Request for information from FEDA: The request, signed on August 7, 2019, was notified

(ECLI) ECLI:AT:DSB:2019:DSB.D123.768.0004.DSB.2019 Last updated on 17.03.2020 Document number DSBT_20191218_DSB_D123_768_0004_DSB_2019_00

AEPD - PS/00306/2019 Authority: AEPD (Spain) Jurisdiction: Spain Relevant Law: Article 5(1)(c) GDPR Type: Complaint Outcome: Upheld Started: Decided: Published:

Inspection proceeded to perform the following actions: On 18/05/2019, reiterated on 30/05/2019, the complaint submitted for analysis and communication to the

telephoned on October 8, 2019 that complaints on September 10, 2019 have been provided with insights into the reports found in the July 2019 search. 2.2. The complainant's

Gruppen A / S Published 07-08-2020 Decision Private companies Journal number: 2019-41-0043 Summary In August 2020, the Danish Data Protection Agency completed

details. Procedure No.: PS/00369/2019RESOLUTION R/00078/2020 TO TERMINATE THE PROCEDURE FOR PAYMENT IN THE PS/00369/2019 sanctioning procedure, instructed

request for clarification dated 26 November 2019. The registrar has submitted his report on 19 December 2019. According to the statement provided by the

25/10/2018; 8/1/2019; 5 and 16/9/2019), as well as to supplement the inspections indicated above (feedback 8/3/2019, 20/3/2019 and 2 / 5/2019), the following

No.: PS / 00219/2019 RESOLUTION R / 00449/2020 TERMINATION OF THE PAYMENT PROCEDURE VOLUNTARY In the sanctioning procedure PS / 00219/2019, instructed by

authority Data protection authority Decision date 07/26/2019 Business number DSB-D123.921 / 0005-DSB / 2019 Appeal at the BVwG / VwGH / VfGH Both parties have

June 2019, respectively, the emergency services recorded a telephone conversation between the complainants and the emergency services. On 3 July 2019, complainants

for more details. Insight into medical consultant reviews Published 18-11-2019 Decision Private companies The Danish Data Protection Agency has decided

: PS / 00473/2019 RESOLUTION R / 00258/2020 OF TERMINATION OF THE PAYMENT PROCEDURE VOLUNTARY In the sanctioning procedure PS / 00473/2019, instructed by

representation filed a letter of extension on 13/08/2019, which was answered by letter of 26/08/2019. SIXTH: On 05/11/2019, a proposal for a resolution was issued

Cfr. Arrêt de la CJUE du 29 juillet 2019, Fashion ID GmbH & Co KG c. Verbraucherzentrale NRW eV, C-40/17, ECLI:EU:C:2019:629, paragraphe 76. Décision sur

been processed in violation of the data protection rules. Journal number: 2019-431-0052 Summary On 17 January 2020, the Danish Data Protection Agency decided

00317/20191037-100919RESOLUTION Nº: R / 00137/2020Considering the claim made on August 16, 2019 before this Agency byD. AAA , against SAGE SPAIN, SL, for not having duly

posting available on the website on 12/04/2019 and the date of acceptance of the notification on 15/04/2019 as attested by the certificate issued by the

Furthermore, on 13/06/2019, VOX provided the AEPD with a document containing the measures adopted following the S21Sec report and on 12/10/2019 presented two reports

processing on 03/28/2019. Appealed, on appeal RR 354/2019 was resolved on 07/09/2019 being dismissed, highlights, in fact “On May 3, 2019, the affected party

General ofData Inspection proceeded to carry out the following actions:On 05/07/2019, the claim submitted for analysis was transferred to the defendantand communication

position in several letters addressed to the CNPD of 04/04/2019; 04/23/2019 and 07/22/2019 […]”. Copies of letters of the auditee are part of the documents

19 July 2019 to replace the deadline for the final filing of the submissions for the respondent of 19 July 2019 with the date of 19 August 2019; Having

dates 07/17/2019 and 09/23/2019 to those who do not answered. The notifications were accepted, respectively, on dates 07/17/2019 and 09/30/2019. The first

2Research reportAP, 3 September 2019, appendix 2 to 8. 3Research reportAP, 3 September 2019, appendix 2 to 8. 4 Letter of 7 May 2019 from CP & A on AP. Research

August 2019. E-mail from the complainant to the defendant dated 19 August 2019E-mail from the complainant to the defendant dated 13 September 2019 "Where

EWCA - C1/2019/2726/QBACF Court: EWCA (UK) Jurisdiction: United Kingdom Relevant Law: Article 23 GDPR Data Protection Act 2018, Schedule 2, Part 1, Paragraph

and submitting it per mail. On 29-04-2019 the BKR added free digital access requests. Between 25-05-2018 and 12-03-2019, the BKR stated in their privacy policy

Bank of Poland in the table of exchange rates on 28 January 2019. EXAMPLE On [...] February 2019, pursuant to Article 78(1), Article 79(1)(1) and Article

2018/2019 school year, as well as the exhibition in the glass facade of the electoral census (census of responsible) of the academic year 2018/2019 with

apparently with minor mistakes fixed) here: PS/00165/2019 https://www.aepd.es/es/documento/ps-00165-2019.pdf Share blogs or news articles here! The decision

DD: 2022: 44 AS AMENDED BY DECREE OF THE COURT. 10.6.2019 ADMINISTRATIVE COURT (Case No. 92/2019) February 3, 2022 [SERAPHEIM, DDD. OF THE REPUBLIC OF

XXXX .2019, the DPO again addressed the XXXX and asked two specific questions for an answer. The XXXX announced with statement of the XXXX .2019 that a

replied to the complainant’s email on 2 January 2019. 2.9.The complainant contacted again on 9 May 2019. has not attached any other documents concerning

decisions of Google of 30 July 2020, 7 August 2019 and 29 August 2019. The petition of 15 August 2019. October 2019 was submitted later than six weeks after

account on 2 September 2019, the erasure of the account was commenced the same day and confirmed to have been completed on 24 October 2019. Accordingly, there

thereof, on June 12, 2019 the Director of the AEPD agreed to admit the claim presented by the claimant SIXTH: On November 14, 2019, the Director of the

Statement by the registrar on 13 December 2019 According to the report given by the registrar on 13 December 2019, the user logs into the online appointment

district Court of NicosiaDIMITRIOS DIMITRIADIS — ANDREOU, DED Goods: 3353/2019 After: Griffin Property Finance II XXXXX XXXXX XXXXX XXXXX XXXXX iepublicznych

a procedural order of 2 August 2019, ref. DSB-D124.1182/0001-DSB/2019, replied to this in his opinion of 30 August 2019: The defendant first contested

data, approved with resolution of n. 98 of 4/4/2019, published in the Official Gazette no. 106 of 8/5/2019 and in www.gpdp.it, doc. web no. 9107633 (hereinafter

customer.  Copy of claim in OMIC dated 04/08/2019 being the claimed Vodafone.  Copy of claim in OMIC dated 04/08/2019 being the claimed Movistar requesting that

complied with Article 33 GDPR. An investigation was started on 20 December 2019 over the practices of the controller. The controller owned a platform which

June 2019. (ref. [...] [...] July 2019) was returned to the sender with the words 'not returned on time'. Therefore, by letter of [...] July 2019, the

duly delivered to the Company on [...] September 2019. By letters of [...] May 2019 and [...] September 2019. The Company was informed that failure to respond

answer to the one received on June 2019. b. That on May 21, 2019 is communicated by Asnef- Equifax that on May 20, 2019 the Testa Residencial entity Socimi

Freedom of Information imposes fine on real estate company On October 30, 2019, the Berlin Commissioner for Data Protection and Freedom of Information imposed

the CNIL did not issue a decision, pursuant to Article 10 of the Decree n° 2019-536 of May 29. The motion to institute proceedings must be presented to the

the original. Please refer to the German original for more details. 03.12.2019 Fines against hospital due to data protection deficits in patient management

ion-infantil-y primaria-curso-2018-2019)". SECOND: In view of the facts, the complaint was transferred on 1/04/2019 to inform the requested party of the

letter f to process the credit information on complaints obtained on 27 August 2019. We also refer to our assessment of the legal basis in the notice, section

from the complainant was recorded on 7 October 2019 and 7 November 2019 for the defendant. 5. On April 26, 2019, the Disputes Chamber will receive the notification

report of 5 December 2019, page 23. 16See File 11, report of 5 December 2019, page 25. 17See File 11, report of 5 December 2019, page 4. 18See File 11

September 2019, GC et al, C-136/17, EU:C:2019:773, marginal 36 f.; judgment of 24 September 2019, Google [Portée territoriale], C-507/17, EU:C:2019:772, marginal

6 September 2019, this one for the The complainant's reply of 7 October 2019 to the defendants on 7 November 2019. 10. On 4 September 2019, the Disputes

plaintiff has already submitted his letter of July 22, 2019 and the defendant's reply of August 23, 2019 with the statement of claim without opening a subject

AUTHORITY PERSONAL CHARACTER Decision 44/2019 Athens, 19-12-2019 No. Prot .: f /EE/ 8907 / 19-12-2019 RESOLUTION NO. 44/2019 (Department) The Personal Data Protection

Authority for Personal Data 2019 (hereinafter: Fines Policy Rules 2019). 3.2. Fine policy rulesAuthorityPersonal data2019 The relevant provisions of the

processing on 13 November 2019. The controller provided its response to the request for clarification within the deadline of 12.12.2019. The controller has been

15 March 2019, ECLI:NL:HR:2019:376, paragraph 4.2.2, of 28 May 2019, ECLI:NL:HR:2019:793, paragraph 2.4.5, and of 19 July 2019, ECLI:NL:HR:2019:1278, paragraph

23.05.2019 Published: Parties: Schrems Facebook Ireland Ltd National Case Number/Name: 6 Ob91/19d European Case Law Identifier: ECLI:AT:OGH0002:2019:0060OB00091

GDPR Type: Complaint Outcome: Rejected Started: Decided: 01.11.2019 Published: 13.11.2019 Fine: None Parties: Luminor Pank AS anonymous National Case Number/Name:

pursuant to art. 77 of the Regulation on 25 February 2019 and spontaneously regularized on 17 April 2019 by Mrs. XX against Reweb s.r.l.; HAVING EXAMINED the

(e-mails of [...] July 2019, [...] July 2019, [...] July 2019, [...] April 2020), video monitoring (e-mail of […] July 2019 and […] July 2019 and […] April 2020)

Article 6(1)(a) GDPR Type: Complaint Outcome: Upheld Started: Decided: 11.10.2019 Published: Fine: 14,000 EUR Parties: Anonymous National Case Number/Name:

Section 40(2) FOIA Type: Complaint Outcome: Rejected Started: Decided: 28.10.2019 Published: Fine: None Parties: Pendle Borough Council Anonymous National

email sent on 08/23/2019 to the AEPD Inspection Branch includes this message: "... in relation to the sanctioning file PS / 00114/2019 is provided as proof

and 19006872 ; Having regard to decisions No. 2019-081C of April 24, 2019 and No. 2019-102C of June 6, 2019 of the President of the Commission Nationale

On 28 May 2019, the Privacy Commissioner of Canada notified the AP that it was working on the AP's 25 March 2019 request. On 22 July 2019, the AP sent

days. However, in 2019 the Agency decided to defer the deadline to join the service by October, 31st 2019. Then, the Law Decree n. 124/2019 provided that "the

of 4/4/2019, published in G.U. No. 106 of 8/5/2019 and at www.gpdp.it, web doc. No. 9107633 (hereinafter "Regulation of the Guarantor No. 1/2019"); Having

GDPR Type: Investigation Outcome: Violation Found Started: Decided: 28.11.2019 Published: Fine: 11,000 EUR Parties: Fan Courrier Express SRL National Case

initial information notice of 2017, but was included in the later notice of 2019. Assessing the legality of such processing, first the ADP analysed the Respondent

Business Registers (LBR) pursuant Article 15 Law of 13 January 2019 (Law of 13 January 2019 of Luxembourg establishing the Beneficial Owner Register - transposing

of 02/27/2019, 03/08/2019, 03/18/2019, 06/07/2019 information requirements to VODAFONE ESPAÑA, SAU and on dates of 09/18/2019 and 09/30/2019 a face-to-face

Security Policy in the CSO of 2019, 2) Order No. [...] of the Director of the Comprehensive School Complex in D. of [...] October 2019, 3) the protocol of destruction

05-16-2019 confirming the deletion of thethemselves; that that same day he receives mail for transfer to the department ofaffiliates and on 10-15-2019 an

of a letter of 07/01/2019 from the claimant to the claimed, indicating in reference- reference to the burofax received on 06/20/2019, where they indicated

506/2004 Type: Investigation Outcome: Violation Found Started: Decided: 15.10.2019 Published: Fine: 2,000 EUR Parties: Vodaphone Romania S.A National Case Number/Name:

responded promptly to the October 10 and 14, 2019 at his request of October 7, 2019. 14. On November 7, 2019, the complainant, still addressing the respondent

Administrative Court of 16 September 2019, the suspensive effect of the action against the defendant's decision of 14 May 2019 addressed to the party summoned

GDPR Type: Investigation Outcome: Violation Found Started: Decided: 22.11.2019 Published: Fine: 2,000 EUR Parties: BNP Paribas Personal Finance SA Paris

(France) Jurisdiction: France Relevant Law: Article 17 GDPR Decided: 06.12.2019 Published: Parties: National Case Number/Name: N° 391000N° 393769 N° 395335

Prosecutor's Office on May 16, 2019. - Copy of the agreement of the Ponferrada Zone Electoral Board dated May 13 of 2019, where the incidence related to

S *** - S *** CoC", approved by decision of November 5, 2019, GZ: DSB-D196.006 / 0005-DSB / 2019, as amended from time to time, accredited. 2. The application

the request for elements (note dated 17 September 2019) formulated by the Office, by note dated 28.10.2019 stated that: a. the internal rules were adopted

Datenschutzrecht, 2019, § 3 Rn. 243; Specht/Mantz, Handbuch Europäisches und deustsches Datenschutzrecht, 2019, § 3 Rn. 243; Wybutil, NJW 2019, 3265, 3268)

letter dated 20 March 20 March 2019, delivered by hand after the site visit, and by letter dated 6 May 2019. 6 May 2019. 7. At the end of his investigation

GDPR Type: Complaint Outcome: Rejected Started: Decided: 01.11.2019 Published: 13.11.2019 Fine: None Parties: anonymous National Case Number/Name: 2.1.-1/19/126

controllers for violation of Article 32(1), (2) and (4) GDPR. On the 1st of October 2019, the National Supervisory Authority finalised two investigations at Raiffeisen

Agency for Data Protection, issued on July 23, 2019, resolution of protection of right TD / 00128/2019, proceeding to “estimate the claim made by D. A

dated 03.08.2018. 1.3 In a letter from a lawyer dated 11 June 2019, improved on 13 August 2019 after an order to remedy deficiencies, XXXX complained to the

720/0003-DSB-2019) of June 28, 2019, the data protection authority requested the respondent to comment. 3. In a letter dated July 26, 2019 (received on

discontinuance date was set at March 31, 2019, prior to which the Decision on the merits 72/2020 - 3/14 to be postponed to June 30, 2019. The complainant further confirms

(communications of 6.5.2019- prot. no. 25344; of 9.5.2019- prot. no. 26161 and of 22.5.2019- prot. no. 28317). In the communication of May 6, 2019, the Company stated

Decided: 29.09.2019 Parties: Google LCC CNIL Case Number/Name: C-507/17 Google LLC vs. CNIL European Case Law Identifier: ECLI:EU:C:2019:772 Reference from:

March 2019. [the employee] has not disputed this. Furthermore, [the employee] has not disputed that on 7 January 2019, 8 January 2019 and 2 April 2019, he

van de Geschillenkamer 12/2019 van 17 december 2019; Arrest HvJEU van 1 oktober 2019, Planet49 GmbH, C-673/17, ECLI:EU:C:2019:801. Beslissing ten gronde

98 of 4/4/2019, published in G.U. No. 106 of 8/5/2019 and at www.gpdp.it, web doc. No. 9107633 (hereinafter "Garante Regulation No. 1/2019"); HAVING REGARD

defendant. 7. On 10 October 2019, the Disputes Chamber will receive the defendant's defences. 8. By e-mail dated 7 December 2019, the complainant informs

DECISION ECLI:NL:GHAMS:2019:3232 Authority Amsterdam Court of Appeal Date of judgment 03-09-2019 Date of publication 29-10-2019 Case number 200.247.727/01

"SIXTH: On 11/18/2019 a trial practice period opens in whichagree, as the only evidentiary proceedings, the incorporation into PS / 25/2019 of thedocuments

4, of decree n ° 2019-536 of May 29, 2019 taken for the application of the Data Protection Act (hereinafter the decree of 19 May 2019), the rapporteur

personal data, approved by resolution no. 98 of 4/4/2019, published in the Official Gazette n. 106 of 8/5/2019 and in www.gpdp.it, doc. web n. 9107633 (hereinafter

The AP therefore collected a penalty payment of €50,000 at the beginning of 2019. The health insurers have since changed their working methods. The AP has

request dated June 28, 2019, she requested the deletion of her data, the respondent rejected the deletion with a letter of July 25, 2019. 2. In a statement

RESEARCH ACTIVITIES 1. On 31 October 2019, the Foundation was asked for information and the reply received on 14 November 2019 showed that this was the case:

recognition of responsibility and making an early payment of the fine. On 9 July 2019, a data subject ("complainant") submitted a complaint to the AEPD stating

Reddit Share via LinkedIn Share via email Date 01 February 2019 Type News Update, 9 April 2019 Elizabeth Denham’s quote in this press release has been updated

the electronic headquarters on 01/02/2019, the notification being accepted by the claimed on 5/02/2019. On 05/04/2019, a letter from the DPD of the respondent

Ministers of 19 June 2019, no. 93, published in G.U. 21 August 2019, n. 195 "; - «Following publication in the Official Gazette 21 August 2019 n. 195, the aforementioned

in point 1. Article 2 Act no. 75/2019 in the same way as is done in Act no. 90/2018. With Article 37 Act no. 75/2019, Temporary Provision III in Act no

Article 6(1)(c) GDPR Article 24(1) of Regulation 2015/2447 Decided: 16.01.2019 Parties: Deutsche Post AG Hauptzollamt Köln Case Number/Name: Case C-496/17

Supervision Authority of 05.11.2019 No 2.1-3/19/3612 and reopen the complaint lodged by the applicant of the complaint of 10.10.2019 and refer the matter to another

affected party on September 6, 2019, according to notice of receipt that appears in the file. THIRD: As of October 4, 2019 A.A.A. has filed an appeal for

October 2019 Barclays informed the Garante that Crif S.p.A., the service provider for the CIS, deleted the information from the system as of May 2019. As mentioned

INE movement", from 07/16/2019, referring to the claimant's data, “communication to the municipality”, “variation date 05/07/2019 ”,“ Withdrawal due to change

proceedings on appeal 1.1 The court of appeal refers to its judgment of 9 July 2019 for the course of the proceedings in the first instance and the course of

authority must use the financial year 2019 as the basis for the determination of fees, not 2020. X AS made a loss in 2019 of NOK 63,000 due to costs for lawyers

data, approved with resolution no. 98 of 4/4/2019, published in the Official Gazette no. 106 of 8/5/2019 and in www.gpdp.it, doc. web n. 9107633 (hereinafter

libertés, notamment ses articles 20 et suivants ; Vu le décret no 2019-536 du 29 mai 2019 pris pour l'application de la loi no 78-17 du 6 janvier 1978 relative

deletion of 18 September 2019.  Article 12 (3) of the Data Protection Regulation by providing incorrect information on 22 September 2019 that the complainant's

particular its articles 20 and following; Considering Decree No. 2019-536 of May 29, 2019 taken for the application of Law No. 78-17 of January 6, 1978 relating

become increasingly agitated and aggressive (email of January 9, 2019).4. On January 10, 2019, the Y1 delegate responded to this email, writing in particular

analyzed at the time of the security breach (s) (dated 06/28/2019, 10/31/2019 and 11/22/2019), it is true that with the current basic structure of the The

that the respondent received the notification on 01/10/2019 notification on 01/10/2019. On 09/10/2019, the AEPD received the respondent's reply, with which

C/13/655766 / KG ZA 18-1104 judgment of the multiple civil chamber of 5 November 2019 [appellant] , living at [residence] , appellant, Attorney at law: Mr. K.J

claimant to the respondent giving rise to the files E / 01699/2019, E / 06311/2019, E / 11566/2019 and E / 01520/2020. In all They stated that the incident

procedure 1. With the preliminary filing of April 17, 2019, repeated on June 23, 2019 and July 26, 2019, the complainant alleged a violation of the right to

05/04/2019, 06/04/2019, 07/04/2019, 08/04/2019, 09/04/2019 respectively and where it consists: to. The first consumption period is from March 18, 2019 to

2018, quashing the decision of refusal of 17 January 2019 and the decision of opposition of 14 March 2019. Order the defendant to pay the costs. The judgment

refer to the Norwegian original for more details. JUDGMENT given on 26 June 2019 by the Supreme Court composed of Justice Bergljot Webster Justice Wilhelm

c) and 13 of the GDPR, as detailed in his letters of January 31, 2019, October 7, 2019 and August 27, 2020. More in particular, it takes note of the following

declared (see minutes of operations carried out on 16.10.2019) that: to. "As of February 4, 2019 the supermarket managed by the company TB srl located in

Administrative Court on February 18, 2019. At the same time, he applied for interim relief. By order dated March 15, 2019 (RN 3 p. 19,266), the Administrative

documentation: - Letter from the CGT dated 01/24/2019. - Response from IBERIA on 01/29/2019. - Letter from CGT dated 03/18/2019. - Analysis of Impact on privacy on

For the year 2019, it has achieved revenues of approximately 7.7 billion euros. 2. Pursuant to Decisions No. 2019-224C of November 29, 2019 and No. 2020-042C

the defendant in January 2019 (S 3 in Supplement ./1; Supplement .IN). With decision of 11.02.2019 on DSB D213... 747/0002-DSB/2019, the data protection authority

Article 55 of the GDPR, on 16 July 2019 and to the Prosecutor's Office of Sofia City on 17 July 2019. Again, on 17 July 2019, NRA requested an all-round audit

data, approved with resolution no. 98 of 4/4/2019, published in the Official Gazette no. 106 of 8/5/2019 and in www.gpdp.it, doc. web n. 9107633 (hereinafter

Institute of the Environment Tallinn Centre between 25.10.2019 and 31.12.2019 and submitted on 31.12.2019 did not meet all the requirements of the initial task

March 25, 2019 of the Court of First Instance nº3 of Pontevedra. 3. Copy of the invoice notification emails available On September 25, 2019, this Agency

the Court of Appeal refers to the contents of the judgment of 8 February 2019 rendered by the Interim Injunction Judge in the District Court of Midden-Nederland

protection of personal data (Journal of Laws of 2019, item 1781) - to present the Company's financial statements for 2019 or, in the absence thereof, a statement

this Agency, of two investigation files: E/0065/2019 and E/3498/2019. A) With regard to Procedure E/0065/2019: C/ Jorge Juan, 6 www.aepd.es 28001 - Madrid

following:On May 6, 2019, it was agreed not to admit theclaim submitted by the claimant.THIRD: The claimant filed on May 20, 2019, an appeal forreplacement

Protection Authority on 30 October 2019. A sent further letters to the Norwegian Data Protection Authority in November 2019 and in January 2020, where she

future. The Applicant paid the debt claimed by the Debtor on 13.02.2019. On February 15, 2019, Ké relmező received an SMS notification from the Debtor to its

having submitted an application for access, on 28 March 2019, to which the Company replied on 3 April 2019 with a merely interlocutory reply. The complainant

September 2018, notification of decision of 29 April 2019 and Oslo municipality response of 21 June 2019. Based on the information in the case, the Data Inspectorate

the livestream, which had started on 19 August 2019, but that a prior livestream sent on 28 January 2019 had received 13,000 views during 140 days. Recordings

(Journal of Laws of 2019, item 2325). Pursuant to Article 74 of the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2019, item 1781)

(reference DOS-2019-06201); Accordingly: 1V l. Richard SUSSKIND, Online Courts and the future of Justice, Oxford Universit y Press , 2019. r PAGE 01-00

the complainant on January 8, 2019, which with the decision of February 11, 2019 on the GZ DSB-D213.747 / 0002-DSB / 2019 has ended. 2. On the basis of

according to the Commission. 5.1. In its judgment of 23 January 2019, ECLI: NL: RVS: 2019: 184, the Department ruled that the Wob and the Wbp relate to different

that it considered the consent for marketing given by anyone before July 2019 (when the issue was discovered) to be invalid and not given. The use of the

98 of 4/4/2019, published in G.U. No. 106 of 8/5/2019 and in www.gpdp.it, web doc. No. 9107633 (hereinafter "Garante Regulation No. 1/2019"); Having regard

through written Date 4 and 5/11/2019, to the DPD, by email dated 6/11/2019. In response to these writings and email, on 11/22/2019 the Entity delivered by hand

19, 2020, Ra 2019/12/0038, with which the appeal of the complainant against the decision of the State Administrative Court of April 29, 2019 was discussed

131/18k (ecolex 2019/151 [Zemann] = iFamZ 2019/78 [Deixler-Hübner] = jusIT 2019/29 [Thiele; Jahnel, 123] = RZ 2019/11 [Spenling] = MR 2019, 190 [Walter])

controller on 4 November 2019 after he hadn’t heard back from the controller. The Data subject received an email on 7 November 2019 from the privacy team

81. SECOND: On May 9, 2019, the complaint was transferred to COMMUNITY OF OWNERS RRR , in the actions with reference E / 04557/2019. The notification is

investigation report sent on July 9, 2019 to theContentious chamber;5. Having regard to the letter dated July 25, 2019 from the Litigation Chamber informing

the GBA by letter of 12 March 2019. 4. The Inspectorate sent two letters to the defendant dated 12 March 2019 and 16 May 2019 with questions relating to alleged

The President of the Personal Data Protection Office in Poland (PUODO) decided to discontinue proceedings concerning the processing of data in connection

compliance with the GDPR. By deliberation n ° SAN 2019-010 of 21 November 2019, notified on 25 November 2019, the restricted formation of the CNIL imposed

October 28, 2019. The complainant repeated his request via e-mail on October 30, 2019. The company contacted the complainant on November 6 2019 to request

claimant's identity on February 25, 2019, providing subsequently denounced on February 26, 2019 and dated March 4, 2019, proceeded to the suspension of services

es 28001 - Madrid sedeagpd.gob.es Page 3 3/14 On April 10, 2019, within file E / 04042/2019, it was transfers the claim to the claimed via the Notific

decision. 28. On January 31, 2019, the plaintiff lodged an appeal against the decision served on him on January 25, 2019 and, after a corresponding extension

hiring, termination and relocation of employees, 24.9.2019, in Annex 7, Company note 10.10.2019). In order to bring the processing of employees' personal