Search results
From GDPRhub
- CNIL (France) - SAN-2022-019 (category Article 3(2) GDPR) (section English Machine Translation of the Decision)data subjects in the EU. (2) Secondly, the DPA held that the processing of the controller was linked to the monitoring of the behaviour of data subjects (Article11 KB (1,452 words) - 17:03, 6 December 2023
- Insolvency Act prohibits the Director of an insolvent company to use the name of that company in the 12 months leading up to the liquidation. The Insolvency Service5 KB (573 words) - 21:38, 21 April 2021
- redacted version of the document in question but sought to withhold the redacted information on the basis of section 40(2) of FOIA. 2. The Commissioner’s24 KB (3,788 words) - 16:22, 7 March 2022
- defined by the Data Protection Act 2018 (‘DPA’). By referring to section 3(2) of the DPA, the ICO stated that the withheld information in the audio record5 KB (673 words) - 16:37, 12 May 2020
- Article 9 GDPR (section (c) Protection of the vital interests of the data subject or of another natural person)high level of protection of natural persons and to remove the obstacles to flows of personal data within the Union, the level of protection of the rights and44 KB (5,905 words) - 14:00, 24 October 2023
- General to the DPA. The current Panel had been elected by the Italian Parliament on the 14 July 2020. The Garante operates under the GDPR and the national7 KB (808 words) - 08:17, 16 February 2023
- consequence, the exporter must verify the state of law and practice in the third country. The analysis should not cover the entire legal system of the third country34 KB (3,646 words) - 08:53, 27 March 2023
- indicates that the processing would result in a high risk in the absence of measures taken by the controller to mitigate the risk. 2. Where the supervisory31 KB (3,646 words) - 08:51, 21 July 2023
- Article 32 GDPR (section (4) Natural persons acting under the authority of the controller or the processor)for ensuring the security of the processing. 2. In assessing the appropriate level of security account shall be taken in particular of the risks that are41 KB (5,197 words) - 12:17, 17 April 2024
- Secretariat, the Director of the Knowledge Center, the Director of the Front Line Service, the Inspector General and the President of the Litigation Chamber9 KB (993 words) - 07:10, 28 July 2022
- aware of the act. The enforcement of a DPA decision shall not be suspended during the deadline for the submission of the cancellation request. The complainant23 KB (2,039 words) - 08:15, 25 April 2024
- Public Authorties and Bodies In the context of the adoption of the Member State law on which the performance of the tasks of the public authority or public52 KB (7,297 words) - 08:05, 18 July 2023
- Article 40 GDPR (section (7-10) Role of the DPAs and the EDPB in the approval of codes with general validity)subjects; (f) the exercise of the rights of data subjects; (g) the information provided to, and the protection of, children, and the manner in which the consent44 KB (5,008 words) - 14:50, 28 July 2023
- Datatilsynet (Norway) (category DPA) (section Department for the enforcement of rules, international cooperation and sanctions)objections, the DPA will reassess the case and can, consequently, change parts of or their whole decision. The DPA will then send the recipient the final decision10 KB (1,078 words) - 06:40, 26 March 2023
- Article 4 GDPR (section (3) Restriction of processing)Member State, the place of its central administration in the Union, unless the decisions on the purposes and means of the processing of personal data are125 KB (16,328 words) - 16:01, 8 March 2024
- in respect of Article 33. If a controller who is not established in the EU but falls under the scope of Article 3(2) or Article 3(3) of the GDPR experiences54 KB (6,536 words) - 08:22, 16 June 2023
- consists of four internal organisational units: (1) the cabinet of the Information Commissioner, (2) the Sector for public information, (3) the Sector for protection10 KB (1,242 words) - 10:51, 6 February 2024
- provide the complainant with information about progress on the complaint, or of the outcome of the complaint, before the end of the period of 3 months beginning18 KB (2,488 words) - 15:22, 14 December 2021
- Article 42 GDPR (section (2) Demonstrating safeguards through data protection certification mechanisms, seals or marks)competent DPA.sIn any case, both must follow the certification criteria which will have previously been approved by the DPA or the EDPB. The fact that a certification27 KB (2,452 words) - 14:26, 28 July 2023
- Article 37 GDPR (section (2) Group of undertakings)excluded from the requirement to have a DPO, the reason for this being the principle that the judiciary is not subject to the authority of the DPA pursuant43 KB (4,904 words) - 12:59, 21 July 2023
- Article 47 GDPR (section (3) Exchange of Information)members; (b) the data transfers or set of transfers, including the categories of personal data, the type of processing and its purposes, the type of data subjects29 KB (2,823 words) - 15:15, 28 April 2022
- considers the decision invalid. However, a national court may not refer a question on the validity of the decision of the Board at the request of a natural30 KB (3,874 words) - 10:46, 7 December 2023
- “accredited” by the competent DPA for the purpose of ensuring compliance with the code of conduct. The criteria for this accreditation is provided in the section30 KB (2,720 words) - 14:02, 28 July 2023
- conflict of interests. 3. The accreditation of certification bodies as referred to in paragraphs 1 and 2 of this Article shall take place on the basis of criteria22 KB (1,634 words) - 14:40, 28 July 2023
- here. The budget of the CNIL is decided by the Parliament as part of the annual finance act. data on the budget since 2000 can be found here. You can help8 KB (824 words) - 22:52, 27 February 2024
- relevant, as to: (a) the purposes of the processing or categories of processing; (b) the categories of personal data; (c) the scope of the restrictions introduced;44 KB (4,896 words) - 06:25, 16 June 2023
- includes general elements of any procedure like the service of documents (Section 106 DPA 2018) or the appeals system (Section 150 DPA 2018) in data protection8 KB (1,034 words) - 14:13, 20 August 2021
- Article 91 GDPR (section (2) DPA supervision)itself, or the general DPA responsible for monitoring the application of the GDPR at the regional or national level. In both cases, all the conditions25 KB (2,482 words) - 10:04, 19 March 2024
- Spanish DPA regarding a controller established in the UK. The Spanish DPA was unable to settle a case after the British DPA, following Brexit, left the Internal17 KB (1,142 words) - 15:41, 28 April 2022
- Article 39 GDPR (section (2) Risk-based approach)and on the demonstration of compliance by the controller or the processor, especially as regards the identification of the risk related to the processing23 KB (2,165 words) - 15:10, 27 July 2023
- Article 55 GDPR (section (2) Exclusive competence regarding processing for compliance with a legal obligation or in the public interest)for the performance of the tasks assigned to and the exercise of the powers conferred on it in accordance with this Regulation on the territory of its35 KB (3,971 words) - 21:34, 1 April 2024
- Article 83 GDPR (section (3) Multiple infringements caused by the same or linked processing operations ("unity of action"))or in the case of an undertaking, up to 2 % of the total worldwide annual turnover of the preceding financial year, whichever is higher: (a) the obligations55 KB (7,622 words) - 14:04, 7 November 2023
- according to § 2(3) LDSG and § 2(5) LDSG-JB. According to § 25(3) LDSG the LfDI is responsible for complaints against governmental institutions of Baden-Württemberg4 KB (275 words) - 11:13, 8 May 2022
- investigative powers of the competent DPA. The powers in question are provided for in Article 58(e) and (f) GDPR, under which the DPA can “obtain, from the controller18 KB (1,599 words) - 12:26, 29 April 2022
- Article 63 GDPR (section Any Other Matter of General Application or Producing Effects in different Member States)“either between the DPAs over the course of the one-stop-shop mechanism [...], or when a DPA disregards or fails to seek the opinion of the EDPB in those15 KB (851 words) - 06:55, 29 April 2022
- following the expiration of the second month referred to in paragraph 2 by a simple majority of the members of the Board. Where the members of the Board are33 KB (4,185 words) - 16:09, 2 November 2023
- Law, supplementing the GDPR) Regulation n.º 757/2020, of 10 September, on the organisation and functioning of of support services for the CNPD [1]. Regulation5 KB (531 words) - 13:25, 3 May 2023
- 14(1)(1)(6) BDSG the BfDI is responsible for complaints under Article 77 GDPR. The BfDI has to inform the complainant about the ongoing procedure and the results3 KB (297 words) - 14:49, 1 December 2020
- Article 21 GDPR (section Or processing concerns the establishment, excercise or defence of legal claims)reiterates the obligation on the data controller to inform about the existence of the right to object at the time of the first communication with the data subject49 KB (5,993 words) - 06:22, 16 June 2023
- Article 34 GDPR (section (2) Minimal requirements of the controller's communication to the data subject)that the enforcement of Article 34 GDPR is likely to be difficult as the controller is the entity making the assessment of the level of the risk. The reporting37 KB (3,962 words) - 15:20, 16 June 2023
- necessary by the Commissioner for the purposes of the investigation 4. Following the conclusion of the investigation, you will be informed of the outcome.4 KB (483 words) - 08:17, 12 July 2022
- Article 38 GDPR (section (2) Necessary resources)monitoring of the data subjects on a large scale, or where the core activities of the controller or the processor consist of processing on a large scale of special29 KB (2,951 words) - 14:19, 25 July 2023
- helps to clarify the scope of obligations placed on controllers and processors based outside of the EU. Where Article 3(2) GDPR applies, the controller or25 KB (2,418 words) - 14:11, 24 May 2023
- Authority for the German state of North Rhine-Westphalia. It is in charge of enforcing the GDPR in the private sector in the German state of North Rhine-Westphalia4 KB (372 words) - 10:45, 22 September 2021
- referenced in all documents. The individual employee decides on behalf of the Slovak DPA. The head of the Slovak DPA is the President of the Office for Personal9 KB (1,006 words) - 07:13, 7 July 2021
- relevant to this issue is the case-law of the European Court of Human Rights (ECtHR) on the interpretation of the provisions of the European Convention on33 KB (3,748 words) - 14:25, 7 November 2023
- such a manner that the processing will meet the requirements of the GDPR and ensure the protection of the rights of the data subject. The controller must72 KB (9,140 words) - 13:12, 2 June 2023
- related to the spelling of the name cannot be considered insignificant because they impact the primary identifier of the data subject in the realm of automated23 KB (2,489 words) - 23:24, 6 March 2024
- Article 49 GDPR (section (b) Necessary for the performance of a contract between the data subject and the controller or the implementation of pre-contractual measures taken at the data subject's request)consideration to the nature of the personal data, the purpose and duration of the proposed processing operation or operations, as well as the situation in the country29 KB (3,500 words) - 08:54, 27 March 2023
- Article 57 GDPR (section (m) Encourage the drawing up of codes of conduct and regulate the use of codes of conduct)indicate the supervisory authority which has issued the measure, the date of issue of the measure, bear the signature of the head, or a member of the supervisory60 KB (7,796 words) - 20:12, 1 April 2024
- Article 54 GDPR (section In the course of the performance of their tasks or exercise of their powers)procedures for the appointment of the member or members of each supervisory authority; (d) the duration of the term of the member or members of each supervisory34 KB (3,649 words) - 13:19, 30 October 2023
- relation to the protection of personal data. 3. The Commission, after assessing the adequacy of the level of protection, may decide, by means of implementing43 KB (5,641 words) - 14:58, 28 April 2022
- Article 52 GDPR (section In the context of mutual assistance, cooperation and participation in the EDPB)under Article 8(3) of the Charter of Fundamental Rights of the European Union ("CFR"), Article 16(2) of the Treaty on the Functioning of the European Union47 KB (5,594 words) - 22:45, 1 April 2024
- Data Protection in Germany (section BfDI (Federal DPA))counter the risk of violating the general right of personality. Context According to the provisions of the Census Law, a census in the form of a total18 KB (1,831 words) - 13:49, 3 November 2022
- Datatilsynet (Denmark) - 2019-31-2071 (category Article 15(3) GDPR) (section English Machine Translation of the Decision)July 2019, the data subject filed a complaint about the controller's answer at the DPA. The DPA continued to review the case. First, the DPA reprimanded26 KB (3,820 words) - 16:22, 6 December 2023
- within the scope of Article 100(3) ZVOP-2 in relation to Article 100(1)(2) ZVOP-2 for infringing general provisions on video surveillance. The DPA noted6 KB (645 words) - 10:59, 31 January 2024
- 2020 the Sanctions Board of the Office imposed fines for the first time. The Board has imposed a total of 21 fines, the total amount of which is €3,5035 KB (492 words) - 18:09, 19 March 2024
- CNIL (France) - SAN-2022-020 (category Article 3(2)(a) GDPR) (section English Machine Translation of the Decision)fifteen, of which the controller was fully aware, according to the DPA. Fine The DPA imposed a fine of 800,000 euros on the controller. The amount of the fine59 KB (9,566 words) - 17:03, 6 December 2023
- DSB (Austria) (category DPA) (section Relevant Elements under the Austria Data Protection Act and Administrative Procedural Act)possible the controller, the facts of the case, the reasons why the complainant feels his rights are violated, the request to find a violation of the law and11 KB (1,468 words) - 13:27, 14 May 2023
- and the data protection officer; (b) the purposes of the processing; (c) a description of the categories of data subjects and of the categories of personal31 KB (3,327 words) - 15:31, 5 June 2023
- APD/GBA (Belgium) - 161/2022 (category Article 3(2) GDPR) (section English Machine Translation of the Decision)Article 3 of the GDPR assumes of two different cases. In the first case (Article 3.1 of the GDPR), the data processing carried out in the context of the activities19 KB (2,689 words) - 15:30, 23 November 2022
- hereinafter: ZVOP-2), according to point 2 of the first paragraph of Article 103 of ZVOP-2 and according to point 3 of the first paragraph of Article 105 of ZVOP-221 KB (3,272 words) - 08:50, 1 March 2024
- Datatilsynet (Norway) - 20/02136 (category Article 3(2) GDPR) (section (a) the nature, gravity and duration of the infringement taking into account the nature scope or purpose of the processing concerned as well as the number of data subjects affected and the level of damage suffered by them)relevant in the present case. The NO DPA rejects Grindr's argument according to which the interpretation of the article violated was not clear. The NO DPA confirms18 KB (2,375 words) - 16:17, 6 December 2023
- in the text of the Regulation exempts such a category of data from the scope of the law. Finally, the DPA assessed whether the controller had a valid legal25 KB (3,679 words) - 11:30, 2 August 2023
- CJEU - C-230/14 - Weltimmo (section Was the processing carried out 'in the context of [Weltimmo's] activities' in Hungary?)circumstances, of the use of those data for the purpose of the invoicing of the advertisements after a period of one month." It referred to the Lindqvist and13 KB (1,888 words) - 13:07, 1 June 2023
- for the data transfer referred to in item 2.a). 3) The complaint against the respondent to the second complaint on the grounds of a violation of the general108 KB (17,097 words) - 13:52, 12 May 2023
- CNIL (France) - SAN-2022-024 (category Article 3 GDPR) (section English Machine Translation of the Decision)subjects in the EU (Article 3(2)(a) GDPR). The DPA concluded that Article 3(2)(b) GDPR was also not applicable. The DPA mentioned that the online collection30 KB (4,714 words) - 10:34, 4 January 2023
- Article 60 GDPR (section (3) Duty of lead supervisory authority (LSA) to communicate the relevant information and submit a draft decision)Cooperation Where the processing of personal data takes place in the context of the activities of an establishment of a controller or a processor in the Union and35 KB (4,017 words) - 16:04, 18 March 2024
- 2003/98/EC of the European Parliament and of the Council leaves intact and in no way affects the level of protection of natural persons with regard to the processing22 KB (2,177 words) - 10:01, 19 March 2024
- article 3 of the French Data Protection Act because the use of cookies is carried out within the framework of the activities of the company Google France which93 KB (14,936 words) - 17:09, 6 December 2023
- Authority for the Spanish autonomous region of the Basque Country. It is in charge of enforcing the GDPR in the public sector within the Basque Country3 KB (195 words) - 13:21, 15 September 2021
- DI-2020-11373 2(23) Date: 2023-06-30 2.2.1 Applicable regulations, etc. ................................................... .....9 2.2.2 The Privacy Protection113 KB (12,773 words) - 15:20, 6 December 2023
- Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 2) (category Article 5(2) GDPR) (section English Machine Translation of the Decision)in line with the GDPR. Furthermore, until the Municipality of Helsingor complies with the GDPR, the DPA suspended transfers of data to the United States75 KB (11,733 words) - 16:33, 21 August 2022
- Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 1) (category Article 5(2) GDPR) (section English Machine Translation of the Decision)high. . The warning shall be issued in accordance with Article 58 (2) of the Data Protection Regulation. 2, letter a. If the assessments of the risk made48 KB (7,442 words) - 10:24, 12 September 2022
- Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 3) (category Article 58(2)(f) GDPR) (section English Machine Translation of the Decision)Article 36(1), the ban is effective until the DPA has provided such consultation as per Article 36(2) or the DPA otherwise permits the processing until117 KB (18,075 words) - 10:19, 12 September 2022
- informed of outcome of the investigation would compromise the objectives of GDPR. The CJEU added that a DPA assessing a complaint has a margin of discretion15 KB (2,180 words) - 08:23, 13 December 2023
- AKI (Estonia) - EDPBI:ee:OSS:d:2022:343 (category Article 7(2) GDPR) (section English Machine Translation of the Decision)at a German DPA (not clear which German DPA) on 2 January 2020, which transferred the complaint on 7 May 2020 to the Estonian DPA (DPA), the lead supervisory42 KB (5,644 words) - 14:35, 30 November 2022
- decision on the language of the proceedings. Interlocutory decision 01/2021 - 4/6 2. Motivation 10. As part of the analysis of the language of the proceedings19 KB (2,707 words) - 16:50, 12 December 2023
- translation of the final decision to the provide parties. 3. On 4 February 2021, the DPA also provided the parties with the inspection report of 13 July 20208 KB (1,156 words) - 16:56, 12 December 2023
- and means of the collection and subsequent transfer of those personal data. The DPA confirmed that CDON AB is the controller. Thirdly, the DPA investigated121 KB (13,722 words) - 15:16, 5 July 2023
- ...11 2.2.2 The Privacy Protection Authority's assessment...................................13 2.3 Coop is the personal data controller for the processing115 KB (12,842 words) - 08:38, 5 July 2023
- Following the complaint, the DPA investigated the data transfers from the controller to the US through the use of Google Analytics. In its defense, the controller131 KB (14,752 words) - 08:36, 5 July 2023
- Data Protection in Greece (section Age of consent)Articles 2, 3(2)(b), 13(3), 15(1), 18(2) and (3) and 21 which remain in force according to Article 84 L. 4624/2019; 2) L. 4579/2018 on the obligations of air10 KB (1,037 words) - 14:52, 10 July 2020
- CJEU - C‑131/12 - Google Spain (section Responsibility of the operator of a search engine under Directive 95/46)Directive 95/46 … be applied, in the light of Article 8 of the [Charter], in the Member State where the centre of gravity of the conflict is located and more16 KB (2,423 words) - 13:03, 1 June 2023
- deposit in the amount of 110% of the amount enforceable on the basis of the judgment unless the judgment creditor provides security in the amount of 110% of52 KB (8,574 words) - 16:03, 10 March 2022
- BVwG - W258 2217446-1 (category Article 9(2) GDPR) (section Data on the "affinity for a political party" as special categories of personal data?)against the Austrian Postal Service. The DSB investigated i.a the records of processing activities and the data protection impact assessment of the Austrian79 KB (12,652 words) - 09:41, 10 September 2021
- Court of Appeal of Brussels - 2019/AR/1600 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)Article 82(2) GDPR. Most importantly, the controller challenged two of the three findings of the DPA, which had led to the fine: the absence of a valid legal60 KB (9,144 words) - 16:17, 22 March 2022
- EDPB - Binding Decision 3/2022 - 'Meta (Facebook)' (section English Machine Translation of the Decision)this case, the GDPR" (116). Turning to the facts of the case, the EDPB outlines a number of factors which, in contradiction to the view of the DPC, support53 KB (8,413 words) - 14:10, 30 January 2023
- those of the other persons attending the general meeting. The data subject filed a complaint with the Hungarian DPA asking it to order the controller to9 KB (1,308 words) - 12:54, 28 June 2023
- CNIL (France) - SAN-2019-005 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)principle of article 5(1)(e) GDPR as the purpose of the processing had been reached by awarding the lease to one of the candidates. The DPA sanctioned the company41 KB (6,558 words) - 17:09, 6 December 2023
- HDPA (Greece) - 3/2022 (category Article 58(2)(f) GDPR) (section English Machine Translation of the Decision)A' 137), within the framework of the powers provided for in Articles, 4 para. 3(a) and 10(3)(a) and (10)(a) 4 of the Authority's Rules of Procedure (Government11 KB (1,492 words) - 13:09, 23 November 2022
- Tietosuojavaltuutetun toimisto (Finland) - 4680/182/18 (category Article 9(2)(a) GDPR) (section English Machine Translation of the Decision)process the insurance application and any compensation case. The registrar states that the provision of Section 13, subsection 2 of the Act on the Status49 KB (7,496 words) - 14:44, 24 January 2024
- Personvernnemnda (Norway) - 2021-20 (20/01648) (section English Machine Translation of the Decision)83(2) GDPR, and in which case, how large it should be. The Board agreed with the DPA that the installation of the camera was not discussed with the employees31 KB (5,018 words) - 18:44, 5 March 2022
- rowspan="2" width="3"><img src="http://www.dpa.gr:80/APDPXPortlets/images/menutop_space.jpg" width="3" height="104"></td><!--/*++++++++++++++++++++++++2 Υπο56 KB (7,755 words) - 15:39, 6 December 2023
- HDPA (Greece) - 20/2023 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)such, the DPA ordered the controller to comply with the access request and issued a fine of: a) €60,000 for the violation of Article 21(3) GDPR as the controller6 KB (634 words) - 17:48, 17 July 2023
- BVwG - W211 2222613-2/12E (category Article 15(3) GDPR) (section English Machine Translation of the Decision)Is the term 'copy' in Article 15(3) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals51 KB (8,592 words) - 07:03, 2 November 2021
- Court of Appeal of Brussels - 2020/AR/1160 (First Interim Decision) (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)- 2020/AR/1160 -p. 3 3. Legal framework for the restricted debate. 3.1. Article 108 of the Law of 3 December 2017 establishing the Data Protection Authority25 KB (3,812 words) - 10:03, 20 August 2021
- Court of Appeal of Brussels - 2022/AR/549 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)legal basis for the processing of data. The DPA therefore considered that the controller had a legitimate interest for the processing of the data subject's37 KB (5,765 words) - 09:53, 14 December 2023
- Personvernnemnda (Norway) - 2018-14 (15/01355) (category Article 9(2)(a) GDPR) (section The relationship to freedom of speach and processing for journalistic purposes)Consequently, the DPA's decision item 8 was removed entirely, as the introduction of the GDPR removed the requirement for a license from the DPA to process144 KB (23,058 words) - 18:48, 5 March 2022
- Tietosuojavaltuutetun toimisto (Finland) - 6689/186/20 (section English Machine Translation of the Decision)correspondence on the matter by e-mail with the representatives of the data controller. Part of the correspondence has been delivered to the Office of the Data Protection41 KB (6,555 words) - 08:37, 4 March 2024
- APD/GBA (Belgium) - 149/2023 (category Article 7(3) GDPR) (section English Machine Translation of the Decision)erasure, the DPA concluded a breach of Article 12(3) GDPR. Regarding the request for the NRN data, the DPA agreed with the controller that to access the information113 KB (17,325 words) - 08:50, 19 March 2024
- associated the requirement to provide identifying data with the transfer of data to a company based in the United States of America. 2. 2. The same question30 KB (4,708 words) - 16:56, 6 December 2023
- ANSPDCP (Romania) - Fine against Telekom Romania mobile communications S.A. 2 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)violation of the provisions of art. 32 para. (1) and para. (2) of the General Regulation on Data Protection and violation of the provisions of art. 3 para.7 KB (900 words) - 15:18, 13 December 2023
- considered the risks that some of the addresses could be secret/protected. In the view of the DPA, those addresses entailed a high risk for the rights of the24 KB (3,365 words) - 16:37, 6 December 2023
- EWCA (UK) - WM Morrison Supermarkets Plc v Various Claimants (redirect from EWCA (UK) - A2/2018/0090) (section English Machine Translation of the Decision)excluded by the DPA in respect of the wrongful processing of data within the ambit of the DPA and the trial judge was right to hold that the common law87 KB (14,773 words) - 09:28, 1 March 2022
- APD/GBA (Belgium) - 21/2022 (section Joint controllership of publishers, CMPs and adtech vendors with regard to the means and purposes of the processing of personal data within the context of the TCF and of the OpenRTB)established "the purpose of the TC String, and in the broader sense of the processing of the TC String within the TCF as translated into the TCF Policies"429 KB (58,279 words) - 09:12, 2 November 2022
- Tietosuojavaltuutetun toimisto (Finland) - 8493/161/21 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)had processed the personal data in violation of the transparency principle. On the basis of the information gathered, the DPA held that the controller had52 KB (7,936 words) - 22:32, 2 March 2024
- Territorial competence of the French DPA In order to assess if the DPA was territorially competent to handle this decision under Article 3 of the French Data Protection73 KB (11,864 words) - 17:03, 6 December 2023
- EDPB - Binding Decision 1/2021 - 'WhatsApp' (section Additional infringement of the principle of transparency)found between the DPC and the concerned DPAs, on 3 June 2021, the DPC decided to refer the dispute to the EDPB. The task of the EDPB was to issue a binding29 KB (4,384 words) - 16:00, 6 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 4356/532/19 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)practice on the part of the credit information companies, as it is impossible for the operative part of the judgment to give an accurate picture of the debtor's43 KB (6,671 words) - 08:49, 27 January 2022
- Tietosuojavaltuutetun toimisto (Finland) - 834/532/18 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)practice on the part of the credit information companies, as it is impossible for the operative part of the judgment to give an accurate picture of the debtor's43 KB (6,677 words) - 08:47, 27 January 2022
- Datatilsynet (Norway) - 20/02178 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)documentation, to the DPA within four weeks (unless they appeal the decision). Following the DPA's notification of a decision, the company argued that the penalty7 KB (802 words) - 18:53, 17 May 2022
- into account the following. As aggravating factors, the DPA considered the intentionality of the infringement, since the installation of the system was intentional;74 KB (11,726 words) - 13:02, 13 December 2023
- Helsingin hallinto-oikeus (Finland) - 3620/2023 (section English Machine Translation of the Decision)request - the date of the call - the date of the reception visit - the date of the procedure (two different procedure dates) - the date of the reception visit22 KB (3,193 words) - 10:34, 29 February 2024
- 61 of the Act of 3 December 2017 and the complaint will be transferred to the Dispute Chamber under Article 62(1) of the Act of 3 December 2017. 3 On 2748 KB (7,926 words) - 16:56, 12 December 2023
- identifiers on devices of data subjects. The DPA also discussed the difference between the ePrivacy directive and the GDPR. The DPA stated that the reading/writing82 KB (13,463 words) - 17:03, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9860529 (section English Machine Translation of the Decision)as, in paragraph 3, that in the event of dissemination of data for journalistic purposes, the limit of the "essential nature of the information regarding16 KB (2,354 words) - 15:45, 6 December 2023
- FOUNDATIONS OF LAW Yo By virtue of the powers that article 58.2 of the RGPD recognizes to each authority of control, and according to the provisions of articles27 KB (4,121 words) - 15:06, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 8211/161/19 (category Article 24(2) GDPR) (section English Machine Translation of the Decision)practice on the part of the credit information companies, as it is impossible for the operative part of the judgment to give an accurate picture of the debtor's42 KB (6,579 words) - 08:46, 27 January 2022
- UODO (Poland) - DKN.5131.6.2020 (category Article 34(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of natural persons with regard to the processing of personal66 KB (10,785 words) - 10:00, 17 November 2023
- Tietosuojavaltuutetun toimisto (Finland) - 6633/182/2018, 6707/154/2018 and 7685/152/2020 (category Article 15(3) GDPR) (section English Machine Translation of the Decision)to the Finnish original for more details. The sanctioning panel of the Office of the Data Protection Commissioner has imposed a penalty payment of EUR7 KB (858 words) - 15:55, 11 December 2023
- and according to the provisions of article 47 of the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights10 KB (1,288 words) - 13:39, 13 December 2023
- procedure the Director of the Spanish Protection Agency of data. Likewise, article 63.2 of the LOPDGDD determines that: "The procedures processed by the Spanish22 KB (3,427 words) - 13:26, 13 December 2023
- DSB (Austria) - D124.1177/0006-DSB/2019 (category Article 9(2)(j) GDPR) (section Exclusion of the Right to Erasure under National Law not Applicable)largely removing the intelligibility of the content of the decision. The right of confidentiality (§ 1 DSG) and confidentiality interests of the respondent,31 KB (4,648 words) - 13:56, 12 May 2023
- DSB (Austria) - DSB-D130.217 (category Article 3 GDPR) (section English Machine Translation of the Decision)intensity of the interference was classified by the DPA as low. Therefore, the DPA held that the legitimate interests of the general public pursuant to Article77 KB (12,447 words) - 08:22, 4 April 2024
- breach of the company's internal routines. The DPA notes that the purpose of the processing was to identify the children in the footage. Sharing the footage49 KB (7,646 words) - 07:56, 7 March 2022
- Ordinance. The answer must therefore depend on an interpretation of the rules for mergers of companies in the Companies Act. Section 13-2 of the Norwegian40 KB (5,943 words) - 18:54, 5 March 2022
- HDPA (Greece) - 4/2020 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)headquarters on 12/3/2020, at 11.00 hours, at the time of the adjournment of the meetings of 04/3/2020 and 26/2/2020, in order to examine the case referred18 KB (2,865 words) - 15:33, 6 December 2023
- BVwG - W211 2210458-1/10 (category Article 2(1) GDPR) (section English Machine Translation of the Decision)by the husband of the owner of the kebab place. A police officer reported the case, which was ultimately handled by the DPA. The DPA a violation of (I92 KB (15,435 words) - 16:00, 22 March 2022
- CNPD (Portugal) - Deliberação 2022/1072 (category Article 35(2) GDPR) (section English Machine Translation of the Decision)83(4)(a), both of the RGPD, with a fine of up to €10,000,000 or up to 2% of the annual turnover, due to violation of the application of personal data security163 KB (27,222 words) - 16:54, 6 December 2023
- with the Spanish DPA against SIE. The Spanish DPA considered the certification of the digital signature of the supply contract through the sending of an32 KB (4,952 words) - 13:11, 13 December 2023
- VGH Baden-Württemberg - 1 S 397/19 (category Article 18(2) GDPR) (section English Machine Translation of the Decision)(ii) the entry of the date of birth claimed by the plaintiff or (iii) the replacement of his year of birth by the sequence of numbers "0000"? The Court112 KB (19,310 words) - 08:08, 23 June 2022
- satisfied the claims of the complaining party. Consequently, on April 2, 2023, for the purposes of provided for in article 64.2 of the LOPDGDD, the Director20 KB (3,078 words) - 13:05, 13 December 2023
- Datatilsynet (Norway) - 15/01355 (category Article 9(2)(a) GDPR) (section The relationship to freedom of speach and processing for journalistic purposes)Consequently, the DPA's decision item 8 was removed entirely, as the introduction of the GDPR removed the requirement for a license from the DPA to process16 KB (2,111 words) - 06:21, 6 March 2022
- therefore considers the existence of a breach of Article 6.1 f) of the RGPD in relation to the data of the complainant. In the case in question, the direct interpretation26 KB (4,231 words) - 14:44, 13 December 2023
- procedure the Director of the Spanish Protection Agency of data. Likewise, article 63.2 of the LOPDGDD determines that: "The procedures processed by the Spanish35 KB (5,475 words) - 13:21, 13 December 2023
- AEPD (Spain) - EXP202102430 (category Article 58(2)(d) GDPR) (section English Machine Translation of the Decision)Law 3/2018 and/or Organic Law 7/2021, as well as the rest of the details of the Record of activity of said treatment. “in accordance with art. 32 of LO33 KB (4,835 words) - 13:26, 13 December 2023
- LG Berlin - (526 OWi LG) 212 Js-OWi 1/20 (1/20), 526 OWiG LG 1/20 (section English Machine Translation of the Decision)personal data of tenants of the residential and commercial units. This occurs in the context of the new letting of a property, the ongoing management of an existing36 KB (5,810 words) - 13:09, 21 January 2022
- start the file and In accordance with the provisions of article 64.2.f) of the LPACAP, the aforementioned agreement of beginning is considered in the present26 KB (4,147 words) - 13:27, 13 December 2023
- Data Protection in Austria (section Age of Consent)property, (2) in case of previous violations of rights or special dangers or (3) in the interest of private documentation if an identification of persons8 KB (721 words) - 09:32, 24 April 2024
- School ... of the province of ... X, looking for the records of the name A. The complained (and already in the the petitioner) replied to the complainant14 KB (2,181 words) - 11:27, 13 September 2023
- accordance with the provisions of articles 47, 48.1, 64.2 and 68.1 of the Law Organic 3/2018, of December 5, Protection of Personal Data and guarantee of C/ Jorge22 KB (3,303 words) - 13:28, 13 December 2023
- APD/GBA (Belgium) - 06/2019 (category Article 58(2)(i) GDPR) (section English Machine Translation of the Decision)at 29 July 2019. 3/9-On 18 June 2019, the defendant requested a copy of the file (Article 95, § 2, 3° of the ICA). The defendant further declares that he20 KB (3,137 words) - 16:51, 12 December 2023
- about the election procedures of the heads of the DPAs. The applicant asked the court to temporarily block the election procedures and refer the case to14 KB (1,999 words) - 14:20, 18 July 2023
- case, the agreement of beginning of the disciplinary file determined the facts in which the imputation, the infringement of the GDPR attributed to the defendant22 KB (3,386 words) - 16:05, 13 December 2023
- AEPD (Spain) - PS/00070/2019 (category Article 5(2) GDPR) (section On the information within the privacy policy)and (2) of the Spanish Data Protection Law (LOPDGDD) to highlight the importance of the principle of transparency in data protection law. The DPA then422 KB (70,184 words) - 13:56, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 918/154/2019 (category Article 58(2)(c) GDPR) (section English Machine Translation of the Decision)to the passage of time, the availability of the information could no longer be considered justified. The DPA also emphasised the importance of the statutory26 KB (4,072 words) - 12:18, 27 March 2024
- accordance with the provisions of articles 47, 48.1, 64.2 and 68.1 of the Law Organic 3/2018, of December 5, Protection of Personal Data and guarantee of digital22 KB (3,257 words) - 13:28, 13 December 2023
- time of issuing the decision, the controller was not in breach of the GDPR under the competential scope of the AEPD. This decision is the first DPA decision44 KB (6,642 words) - 10:34, 13 December 2023
- Personvernnemnda (Norway) - 2021-03 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)€23,950) because of the long time it took the DPA to process the case. It took almost 16 months for the DPA to send the notices of orders and fines after25 KB (4,046 words) - 18:37, 5 March 2022
- APD/GBA (Belgium) - 53/2020 (category Article 25(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal35 KB (5,853 words) - 16:58, 12 December 2023
- one of the driving tests. Since the controller did not answer, the data subject filed a complaint with the Spanish DPA (AEPD). Towards the DPA, the controller20 KB (3,087 words) - 13:30, 13 December 2023
- CJEU - C-645/19 - Facebook Ireland and others v Gegevensbeschermingsautoriteit (category Article 56(2) GDPR)carried out ‘in the context of the activities of an establishment of the controller’ and, therefore, fell within the scope of the GDPR. IV. For the fourth question10 KB (1,311 words) - 15:26, 13 June 2023
- status. The complainant now resides in another city. In the context of the examination of this complaint, the Authority sent the complainant the number14 KB (2,127 words) - 15:37, 6 December 2023
- recipients. 3) The company of the complainant (under the name “B AND CIA” and D.t. “...”) issues and manages the communal properties of the apartment building14 KB (2,070 words) - 15:38, 6 December 2023
- against the claimed party, for the alleged infringement of Article 6.1 of the RGPD, typified in Article 83.5 of the GDPR. FIFTH: Notification of the aforementioned22 KB (3,319 words) - 13:00, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9347280 (section English Machine Translation of the Decision)The Italian DPA issued a favourable opinion on the draft decree of the president of the Council of State laying down the technical rules for the implementation16 KB (2,492 words) - 15:59, 6 December 2023
- provided the claimant with the proper response, in the event of exercise of the rights regulated in articles 15 to 22 of the GDPR. The result of said transfer16 KB (2,362 words) - 13:37, 13 December 2023
- HDPA (Greece) - 18/2020 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)principle of accountability shifts the ‘weight of proof’, in terms of the legality of the processing and compliance with the GDPR, to the controllers themselves12 KB (1,733 words) - 15:34, 6 December 2023
- Helsingin hallinto-oikeus (Finland) - 116/2024 (category Article 25(2) GDPR) (section English Machine Translation of the Decision)because the health status of the insured party and the risks associated with it are at the centre of the risk assessment related to the granting of the insurance41 KB (6,133 words) - 10:29, 25 March 2024
- on the company's website for the purpose of informing the public, for the entire duration of each promotion. The terms of the promotions state by 3, rule45 KB (7,165 words) - 15:22, 22 February 2022
- Rb. Midden-Nederland - UTR- 20 817 en UTR 20 3081 (category Article 78(2) GDPR) (section English Machine Translation of the Decision)explanation to the UAVG. Both the explanatory memorandum to the UAVG, 2 and the explanatory memorandum to the UAVG, 3 state that Article 78 of the GDPR is a25 KB (3,954 words) - 13:39, 16 November 2020
- 2022, the appeal filed was sent to the party claimed within the framework of the provisions of article 118.1 of Law 39/2015, of 1 October, of the Common62 KB (9,703 words) - 13:05, 13 December 2023
- and 2 a of the contested decision until the preliminary ruling by the Court of Justice of the European Union (ECJ) on the question submitted by the decision47 KB (7,519 words) - 09:28, 13 February 2024
- and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such5 KB (663 words) - 08:15, 27 April 2023
- differentiation of the numbers existed, in these cases, in the last two digits of the calling numbers). In one case, the complaint concerned the sending of a short54 KB (8,916 words) - 15:22, 22 February 2022
- outside the scope of the Data Protection Directive 95/46 under the exceptions stipulated in Article 3(2) of the Data Protection Directive 95/46? (2) Whether10 KB (1,282 words) - 14:38, 7 June 2023
- responsible for the delisting. Regarding the pages concerning the political preferences of the complainant, the Litigation Chamber of the BE DPA considered131 KB (22,429 words) - 16:57, 12 December 2023
- data subjects of their rights. On Article 15(3) GDPR and the rejection by the hospital of access to the audit report, the APD/GBA examined the justification7 KB (890 words) - 16:58, 12 December 2023
- Datatilsynet (Norway) - 21/03530 (category Article 58(2)(f) GDPR) (section English Machine Translation of the Decision)in line with our understanding of the scope of the IE Decisions. Please note the limitations of the scope of our order. The order does not in any way ban99 KB (14,431 words) - 16:20, 6 December 2023
- OLG Köln - 15 U 126/19 (category Article 17(3) GDPR) (section English Machine Translation of the Decision)217, 340), the interests of the plaintiff in the deletion of his data outweigh the interests of the defendant. For even taking into account the fact that121 KB (20,412 words) - 15:58, 10 March 2022
- date of birth and date of consultation of patients. In application of the decision n ° 2019-152C of September 20, 2019 of the President of the National26 KB (4,050 words) - 17:10, 6 December 2023
- APD/GBA (Belgium) - 81/2020 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)requirements for the implementation of Articles 5.2 and 24. 1-2 of the GDPR. As to the second defendant the Belgian DPA found that the following breaches127 KB (21,484 words) - 17:01, 12 December 2023
- Garante per la protezione dei dati personali (Italy) - 9852214 (category Article 58(2)(f) GDPR) (section English Machine Translation of the Decision)information on the key elements of the processing, in particular the legal grounds and the use of children’s personal data. The DPA held that the legal basis36 KB (5,598 words) - 10:15, 8 February 2023
- area (at the entrance of the portal next to the elevator) a Decree of Execution of Judicial Titles in which the name and the surnames of the claimant.34 KB (5,184 words) - 13:22, 13 December 2023
- CNPD (Luxembourg) - Délibération n° 20FR/2021 (category Article 38(3) GDPR) (section English Machine Translation of the Decision)emerges from the audit report that in order to verify the compliance of the organization with section 4 of Chapter 4 of the GDPR, the head of the investigation66 KB (9,458 words) - 19:42, 4 September 2021
- CNIL (France) - SAN-2020-009 (section On the violation of the obligation to fairly process personal data)So the French DPA held that there was a violation of the obligation of transparency as per Article 12 GDPR. On the one hand, the vagueness of the title48 KB (7,404 words) - 17:09, 6 December 2023
- proportional in terms of the weighting of the power of direction and control of business activity and the right to the privacy of the interested parties,75 KB (12,421 words) - 13:23, 13 December 2023
- UODO (Poland) - ZSPR.421.2.2019 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)d, 32(2), 58(2)(i) and 83(3), 83(4)(a), 83(5)(a) of Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection71 KB (11,304 words) - 10:01, 17 November 2023
- Tietosuojavaltuutetun toimisto (Finland) - 3216/452/17 (category Article 9(2)(a) GDPR) (section English Machine Translation of the Decision)in terms of the insurance contract. On the basis of the information provided by the controller, the DPA emphasised that Section 6(1)(1) of the Finnish Data60 KB (9,117 words) - 14:46, 24 January 2024
- OLG Köln - 15 U 89/19 (category Article 17(3) GDPR) (section English Machine Translation of the Decision)transparency in the health care system and is also failing to comply with the decision of the Federal Court of Justice in the judgment of the Federal Court of Justice143 KB (24,273 words) - 15:59, 10 March 2022
- within 2 days of notification to the accused or convicted person before the Head of the Prosecutor's Office of the First Instance or the Head of the Prosecutor's36 KB (5,761 words) - 17:19, 22 April 2024
- to transfer the page on the basis of data portability but the order was annulled by the Court of Appeal. The litigation chamber of the DPA issued this96 KB (15,396 words) - 16:50, 12 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - TSV/26/2020 (category Article 25(2) GDPR) (section English Machine Translation of the Decision)The DPA fined an IT retailer €856,000 for failing to determine the storage period of its customer data. The DPA also considered that the processing of77 KB (12,352 words) - 07:20, 23 April 2024
- Tietosuojavaltuutetun toimisto (Finland) - 7285/183/18 (category Article 25(2) GDPR) (section English Machine Translation of the Decision)Article 9 of the General Data Protection Regulation; and 2) in the processing of personal data, does the data controller comply with the regulation of Article73 KB (11,237 words) - 05:34, 21 July 2022
- charge of the invoices until the date of low". THIRD: On May 4, 2022, in accordance with article 65 of the LOPDGDD, the claim presented by the claimant45 KB (7,135 words) - 13:08, 13 December 2023
- report it.” The representatives of the defendant state that alerting them of the loss of the DNI would have resulted in the activation of the protocol available79 KB (12,408 words) - 13:24, 13 December 2023
- LG Köln - 33 O 376/22 (category Article 46(2)(c) GDPR) (section English Machine Translation of the Decision)11. (3) On the basis of the Google tracking pixels used, the defendant is able to recognise the end device of the data subject and to evaluate the user66 KB (9,990 words) - 12:30, 29 January 2024
- Helsingin hallinto-oikeus (Finland) - H6072/2021 (category Article 17(3)(a) GDPR) (section English Machine Translation of the Decision)received for it, part of the personal data of the person in question remains within the scope of his private life and the protection of privacy, which is his61 KB (9,876 words) - 21:38, 24 March 2024
- AP (The Netherlands) - 26.11.2020 (category AP (The Netherlands)) (section English Machine Translation of the Decision)related to the purpose of the investigation and falls within the scope of the purpose of the investigation. The AP explicitly mentioned that the investigation67 KB (11,415 words) - 17:15, 12 December 2023
- applicable, the circumstance that lifts the prohibition to process special categories of data, according to article 9 of the GDPR. 2.- The purpose of the treatment66 KB (10,558 words) - 13:14, 13 December 2023
- traders in the use of data on "credit relationships" to outweigh the interests of the persons concerned. The purpose of the data processing in the database39 KB (6,244 words) - 09:40, 10 September 2021
- assessment of the subject's health and the calculation of the settlement). The Court noted that, in regards to the missing health data, the controller48 KB (7,816 words) - 11:04, 29 July 2022
- incomplete dataset in English. The DPA found that much of the data that the complainant found as missing is data that the complainant is expected to possess4 KB (423 words) - 10:30, 13 December 2023
- DSB (Austria) - D130.206/0006-DSB/2019 (category Article 3(2)(a) GDPR) (section English Machine Translation of the Decision)with the conditions set out in points 2(a) to (f) of the decision in question, taking into account the requirements of Article 12(1) and (2) DPA, and to40 KB (6,007 words) - 13:59, 12 May 2023
- CNIL (France) - SAN-2021-023 (section The material competence of the CNIL and the non-application of the "one-stop shop" mechanism provided for by the GDPR)both the material scope of the ePrivacy Directive and the material scope of the GDPR, reference should be made to the relevant provisions of the two texts120 KB (19,650 words) - 09:00, 6 April 2022
- Datatilsynet (Norway) - 21/02873 (category Article 3(1) GDPR) (section English Machine Translation of the Decision)16 of the Norwegian Personal Data Act were applicable. The DPA ordered the controller (Article 58(2)(d) GDPR) to provide all of the information the data13 KB (1,583 words) - 16:20, 6 December 2023
- HDPA (Greece) - 50/2022 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)ordered the controller to uninstall the cameras within one month of the receipt of the notice. Furthemore, the DPA used its powers under Article 58(2)(i) GDPR19 KB (2,790 words) - 15:32, 6 December 2023
- background. Check the DPA page to find the code. DPAlogo=logoIE.png The DPA logo is always "logo" + Country Code + ".png". For example the Austrian DPA logo is "logoAT32 KB (6,006 words) - 16:33, 7 July 2021
- background. Check the DPA page to find the code. DPAlogo=logoIE.png The DPA logo is always "logo" + Country Code + ".png". For example the Austrian DPA logo is "logoAT34 KB (5,924 words) - 18:14, 20 April 2021
- Court of Appeal of Brussels - 2022/AR/556 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)have followed the instructions of the DPA if the DPA had taken a clear position regarding the legality of the controller's processing. The controller had83 KB (13,694 words) - 09:53, 14 December 2023
- cooperated with the DPA. Complaint 3: Polish data subject The DPA confirmed that the account of the data subject had been deleted, so the breach was eliminated42 KB (5,838 words) - 10:27, 13 December 2023
- APD/GBA (Belgium) - 19/2021 (category Article 21(2) GDPR) (section Mandatory quasi automatic acceptation of sharing of information through cookies)understand; 2. The presence of erroneous information; 3. The use of techniques that may have an impact on the choices of the data subject including the granting10 KB (1,290 words) - 16:55, 12 December 2023
- compatibility of Section 31 of the BDSG with Article 22 of the GDPR, because the German legislator only regulates the "use" of the "probability value", but52 KB (8,534 words) - 12:58, 15 December 2021
- Personvernnemnda (Norway) - 2021-18 (20/02059) (section English Machine Translation of the Decision)supported the rejection of the erasure request. First, the information was of public interest, especially due to the serious nature of the data subject's crimes36 KB (5,859 words) - 06:40, 6 July 2022
- HDPA (Greece) - 22/2023 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)facilitate the exercise of the rights of the data subjects and to satisfy the exercised rights within the deadlines provided for in article 12 par. 3 of the GDPR5 KB (616 words) - 09:37, 24 October 2023
- APD/GBA (Belgium) - 135/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)place of business of the controller was established, would become the DPA including for complaints against the controller, after the DPA in the UK had39 KB (5,674 words) - 08:57, 29 June 2023
- correctness of the data must be assessed in light of the processing purposes. As the purpose of the bank is to administer the customer relationship with the complainant26 KB (4,150 words) - 16:14, 6 December 2023
- AP (The Netherlands) - 09.04.2021 (category Article 14(3) GDPR) (section English Machine Translation of the Decision)determining the amount of the fine. In Annex 2, the infringement of Article 12(1) of the GDPR is classified into category III, for which the penalty range12 KB (1,616 words) - 17:08, 12 December 2023
- act without hearing the objections of the participant in the proceeding. According to the appellant, the DPA violated the principle of definition when issuing28 KB (4,474 words) - 10:31, 13 December 2023
- APD/GBA (Belgium) - 137/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)on the basis of the complaint submitted by the complainant, in the context of Decision 137/2021 - 3/5 1 the ‘procedure prior to the decision on the merits’14 KB (1,946 words) - 08:50, 29 June 2023
- AKI (Estonia) - 2.1.-3/19/4304 (category Article 15(3) GDPR) (section English Machine Translation of the Decision)individual II to the Board of the EPLÜ on individual I of shooting sportsman. 2) Minutes of the meeting of the Board of the EPLÜ, where the Board of the EPLU discussed13 KB (2,032 words) - 10:30, 13 December 2023
- ANSPDCP (Romania) - 24.04.2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)Consequently, the data subject filed a complaint with the Romanian DPA, prompting the DPA to investigate the matter. The DPA held that the controller's6 KB (707 words) - 15:15, 13 December 2023
- IMY (Sweden) - DI-2020-10518 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)Article 15 of the GDPR? The DPA considered that Klarna failed to process the request within the timeframe required by Article 12(3) and without the required18 KB (2,003 words) - 15:22, 6 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 6652/154/19 (category Article 17(3)(b) GDPR) (section English Machine Translation of the Decision)filed at the very end of the statute of limitations. On the basis of the information provided by the controller, the DPA considered that the controller19 KB (2,951 words) - 12:30, 23 April 2024
- CNIL (France) - SAN-2020-016 (category Article 2(2) GDPR) (section On the failure to obtain the consent of the person concerned by a direct marketing operation by means of electronic mail)decision on the following grievances : At the time of the audit, the manager of the company indicated to the CNIL that the operational activities of the company12 KB (1,602 words) - 17:10, 6 December 2023
- HDPA (Greece) - 20/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)that the DPA violated (1) the principle of proportionality and (2) the criteria for the imposition and assessment of fines for violations of the GDPR by16 KB (2,374 words) - 11:46, 18 August 2022
- Cypriot DPA found that the publication of the photographs of three (3) of the five (5) complainants in three (3) of the four (4) publications exceeded the principle31 KB (4,973 words) - 16:50, 6 December 2023
- Court of Appeal of Brussels - 2020/AR/1111 (category Article 3(2) GDPR) (section English Machine Translation of the Decision)cases, the Belgian DPA decided that Google Belgium is an establishment of Google LLC , triggering the applicability of the GDPR under article 3.1. Moreover37 KB (5,919 words) - 08:54, 20 August 2021
- return the CD. Not satisfied with this solution, the data subject filed a complaint with the Greek DPA. The Hellenic DPA underlined that the right of access9 KB (1,251 words) - 12:15, 8 May 2023
- APD/GBA (Belgium) - 140/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)complainant, the surname of the complainant and his daughter, the domicile details of the complainant, the e-mail address of the complainant, the domicile details17 KB (2,477 words) - 08:51, 29 June 2023
- NAIH (Hungary) - NAIH/2020/5553 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)5. In view of the above, the Applicant has applied to the Authority with the rights of the Applicant concerned and the conviction of the controller, and27 KB (4,279 words) - 10:12, 17 November 2023
- Commissioner (Cyprus) - 11.17.001.009.232 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)com along with the personal email of one of the employees of the German subsidiary. c. With the deletion of said data the complainant did not have access17 KB (2,515 words) - 11:17, 6 February 2024
- APD/GBA (Belgium) - 11/2024 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)relating to the protection of the processing of personal data. 11. In application of article 33, § 1 of the LCA, the Litigation Chamber is the body of administrative26 KB (3,856 words) - 08:51, 19 March 2024
- HDPA (Greece) - 52/2021 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)par. 2 and 4 of the GCP in combination with article 28 par. 3, c. He also imposed on the person in charge of processing ZENITH, the sanction of the reprimand8 KB (861 words) - 10:00, 22 December 2021
- Garante per la protezione dei dati personali (Italy) - 9440000 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)initiation of the procedure for the adoption of the measures referred to in art. 58, paragraph 5, of the Code. 2, of the Regulations, concerning the alleged violations24 KB (3,852 words) - 15:50, 6 December 2023
- AZOP (Croatia) - Decision 30-12-2021 (redirect from AZOP (Croatia) - Decision of 30 December 2021) (section English Machine Translation of the Decision)rights of others, prevention of disclosure of confidential information or for the purpose of preserving authority (Article 3, paragraph 3 of the Media Act)16 KB (2,411 words) - 15:44, 30 October 2023
- First-tier Tribunal - Miles v Information Commissioner (section English Machine Translation of the Decision)progress on the complaint, or of the outcome of the complaint, before the end of the period of 3 months beginning when the Commissioner received the complaint12 KB (1,722 words) - 14:39, 21 December 2023
- APD/GBA (Belgium) - 20/2023 (category Article 2(4) GDPR) (section English Machine Translation of the Decision)14. In the event of further processing of the case on the merits, pursuant to Articles 98, 2° and 3° juncto article 99 of the LCA, the Litigation Chamber14 KB (1,883 words) - 16:59, 20 March 2023
- violation of the principle of confidentiality. Second, the DPA found a violation of Article 32 GDPR. The DPA held Article 32 GDPR requires the controller58 KB (9,301 words) - 12:39, 13 December 2023
- contradict the legal idea of § 3(2) InsoBekV. 2. As long as the legislator has not adopted a different regulation for credit agencies regarding the storage51 KB (8,215 words) - 09:55, 13 May 2022
- override the rights and freedoms of the data subjects. In the case at hand, the DPA held that the processing of personal data for the sole purpose of warning23 KB (3,657 words) - 11:23, 17 April 2024
- article 58.2 of the RGPD recognizes to each control authority, and as established in articles 47 and 48 of the LOPDGDD, the Director of the Spanish Data31 KB (4,738 words) - 14:39, 13 December 2023
- Commissioner (Cyprus) - 11.17.001.008.222 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)24(b) of National Law 125(I)/2018, the DPA came to the following decision: There was an infringement of Article 12(3) GDPR because of the lack of a timely16 KB (2,438 words) - 09:07, 9 June 2023
- DSB (Austria) - 2022-0.296.352 (category Article 45(3) GDPR) (section English Machine Translation of the Decision)Findings of Facts The course of the procedure summarized under point A., together with the submissions of the applicant documented in the files, form the basis10 KB (1,335 words) - 13:39, 12 May 2023
- AP (The Netherlands) - 7.04.2022 (category Article 35(2) GDPR) (section English Machine Translation of the Decision)within the meaning of article 4, opening words under 1, 2 and 15, of the AVG, article 10 of the AVG and article 1, preamble below and b, of the Wb and49 KB (7,201 words) - 17:06, 12 December 2023
- APD/GBA (Belgium) - 138/2022 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)complaints have the same object. 2. The subject of the complaints concerns the installation of a surveillance camera by the defendant, the complainants'43 KB (6,274 words) - 08:57, 29 June 2023
- APD/GBA (Belgium) - 42/2020 (category Article 2(1) GDPR) (section English Machine Translation of the Decision)Chamber received the conclusion response of the complainant, limiting the subject of the complaint to the sharing of the picture via email. On 30 October30 KB (4,871 words) - 16:58, 12 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - TSV/35/2022 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)for the marketing of courses offered by a third party without the consent of its students. The DPA asked the controller to explain the purpose of the personal20 KB (2,859 words) - 13:11, 13 March 2024
- CNPD (Luxembourg) - Délibération n° 41FR/2021 (category Article 38(3) GDPR) (section English Machine Translation of the Decision)GDPR, the DPA noted that it had been found that the public website of the controller did not provide the direct contact details of the DPO. In case of questions56 KB (8,326 words) - 16:57, 6 December 2023
- APD/GBA (Belgium) - XX/2021 (category Article 58(2)(c) GDPR) (section English Machine Translation of the Decision)doing so, the controller acted in violation of Article 17.1 of the GDPR. 5. The Litigation Chamber is of the opinion that, on the basis of the above analysis17 KB (2,189 words) - 12:34, 3 August 2022
- APD/GBA (Belgium) - 136/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)determination, with the consent of the the complainant converted the request for mediation on 8 August 2022 into a complaint against the controller. 2. The subject19 KB (2,700 words) - 08:49, 29 June 2023
- Persónuvernd - 2020051604 (category Article 2 GDPR) (section English Machine Translation of the Decision)information within the meaning of Paragraph 3. Article 3 Act no. 90/2018. 2. Answers to questions from the Directorate of Labor 2.1. First of all, the Directorate13 KB (1,930 words) - 09:33, 13 May 2022
- throughout the organisation. In December 2020, the Norwegian DPA initiated an audit of the Directorate of Norwegian Correctional Service (DCS, the controller)16 KB (2,010 words) - 14:32, 8 November 2022
- APD/GBA (Belgium) - 157/2023 (category Article 21(2) GDPR) (section English Machine Translation of the Decision)marketing and protection of personal data on the one hand and the proposal of regulation of the European Parliament and of the Council of 18 September 2019 on17 KB (2,723 words) - 16:34, 26 January 2024
- Court of Appeal of Brussels - 2022/AR/953 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)therefore annulled the DPA decision and ordered the DPA to pay the costs of the proceedings. The court highligted several paragraphs of decision 103/20227 KB (681 words) - 10:43, 15 January 2024
- categories of personal data Article 9.2.a: Explicit consent Article 9.2.b: Execution of labor law obligations etc. Article 9.2.c: Protection of vital interests9 KB (1,168 words) - 15:30, 6 December 2023
- Datatilsynet (Denmark) - 2023-432-0016 (category Article 9(2)(a) GDPR) (section English Machine Translation of the Decision)December 2022, the DPA initiated an investigation against the Central Denmark Region (the controller). During the investigation, the DPA found that the Instagram46 KB (7,192 words) - 12:37, 19 December 2023
- AZOP (Croatia) - Decision 04-05-2023 (redirect from AZOP (Croatia) - Decision of 4 May 2023 - debt collection agency) (category Article 28(3) GDPR) (section English Machine Translation of the Decision)Paragraph 2 of the General Data Protection Regulation. By not taking appropriate measures, there was a violation of the security of the personal data of all12 KB (1,626 words) - 15:22, 30 October 2023
- sentence of the GDPR). The extension of the reporting requirement of Section 3(1) of the EpiG is also expedient for combating COVID-19, as the data material37 KB (5,745 words) - 13:53, 12 May 2023
- AEPD (Spain) - PS/00280/2022 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)framework of the provisions of article 118 of the Law 39/2015, of October 1, of the Common Administrative Procedure of the Public Administrations for the purpose30 KB (4,551 words) - 11:51, 9 February 2023
- ANSPDCP (Romania) - Fine to Dante Internațional SA (category Article 21(3) GDPR) (section English Machine Translation of the Decision)to his e-mail address of the commercial messages, within 3 working days from the communication of the minutes. At the same time, the operator was obliged4 KB (414 words) - 11:04, 6 February 2024
- APD/GBA (Belgium) - 136/2023 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal58 KB (9,184 words) - 16:49, 12 December 2023
- practically, cf. the Regulation on personal data processing § 2-7, and 3) send the DPA their internal controls documentation, cf. the Personal Data Act of 2000 §18 KB (2,525 words) - 08:44, 11 July 2022
- DSB (Austria) - 2020-0.349.984 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)disproportionate. In the light of above the DPA came to the conclusion that the legitimate interests of the respondent outweighed the fundamental rights and freedoms28 KB (4,228 words) - 14:00, 12 May 2023
- Thirdly, the controller failed to respond to the access request. The complaint was originally filed with the Berlin DPA, who referred the case to the Irish20 KB (3,069 words) - 18:48, 24 January 2023
- applicable; the identification of the person responsible for the treatment; the legitimation of data treatment; the time of conservation of the data; the possible15 KB (2,246 words) - 14:26, 13 December 2023
- act in the exercise of their judicial function; " Article 37.3 and 4 of the RGPD indicates on the designation of the DPD “When the responsible or the person14 KB (1,992 words) - 14:29, 13 December 2023
- Datatilsynet (Denmark) - 2020-32-1733 (category Article 17(3)(b) GDPR) (section English Machine Translation of the Decision)6(1)(e) of the GDPR and § 1(2) of the Act of Statistics Denmark and is not obliged to delete it in accordance with the Article 17(3)(b) of the GDPR. On16 KB (2,377 words) - 16:39, 6 December 2023
- Commissioner (Cyprus) - 11.17.001.010.007 (category Article 15(3) GDPR) (section English Machine Translation of the Decision)According to the DPC, the controller should have informed the data subjects more directly also given the nature of the breach and the categories of personal20 KB (3,082 words) - 13:42, 31 January 2024
- minutes. 2. The facts and the subject of the request 1. The defendant is a notary in Flanders. 2. The defendant, in the course of 2019, hired the plaintiff43 KB (6,670 words) - 16:58, 12 December 2023
- DVI (Latvia) - SIA “Lursoft IT” (category Article 6(3) GDPR) (section (2) Information on the "Register of Enterprises")in the legal provision. The DPA also held that Section 4 of the Law on the Register of Enterprises of the Republic of Latvia regulated the right of persons90 KB (14,351 words) - 16:10, 6 December 2023
- determines the purposes and manner of processing personal data -2-". 2. Regarding the issue of the use of video surveillance systems for the purpose of protecting13 KB (1,901 words) - 08:43, 9 November 2022
- Article 12(3) GDPR the response has to be the latest within 3 months. The DPA considered that it had no competence to decide on TDC A / S 'processing of position33 KB (5,177 words) - 16:23, 6 December 2023
- ICO (UK) - Enforcement Notice and Warning Letter - Home Office (category Article 5(2) GDPR) (section English Machine Translation of the Decision)(“UK GDPR”). 2. Unless otherwise stated, references to “Articles” are to articles of UK GDPR, and “Sections” to sections of the DPA. 3. The Home Office129 KB (17,281 words) - 14:57, 10 April 2024
- Garante per la protezione dei dati personali (Italy) - 9440075 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)The Italian DPA has fined Regione Campania for the violation of art. 5 and 6 GDPR. The DPA held that the publication of personal information of two debtors27 KB (4,339 words) - 15:50, 6 December 2023
- request. The Spanish DPA underlined that the focus of the legal proceedings was the exercise of the right of access and the right of erasure of the data subject60 KB (9,630 words) - 12:34, 13 December 2023
- Norges Høyesterett - 2021-2403-A (category Article 9(2)(a) GDPR) (section English Machine Translation of the Decision)Thyness: Questions and background of the case (2) The case concerns the validity of the Privacy Board's decision of 21 January 2019 [PVN-2018-14] 1 item46 KB (7,024 words) - 06:18, 6 March 2022
- Court of Appeal of Brussels - 2021/AR/282 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)No 05/2021 of 22 January 2021 of the Disputes Chamber of the DATA PROTECTION AUTHORITY (hereinafter "DPA"). 2. The contested decision. The initially contested24 KB (3,393 words) - 09:25, 10 September 2021
- 33 (3) of the GDPR. The DPA assessed that the Zoo did not comply with Article 34(1) of the GDPR by failing to carry out an adequate assessment of the risks33 KB (5,347 words) - 16:39, 6 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 6629/163/21 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)facilitate the exercise of the right of access and to inform the data subjects of the possibility of obtaining a copy of their personal data free of charge21 KB (3,204 words) - 13:37, 12 January 2024
- sedeagpd.gob.es 2/5 application of the provisions of article 64 of Law 39/2015, of October 1, of the Common Administrative Procedure of Public Administrations15 KB (2,245 words) - 14:22, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9445324 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)letter c) and e), par. 2 and par. 3, letter b) of the Regulation and art. 2-ter, paragraphs 1 and 3, of the Code; By note of the XX, the Comprehensive Institute19 KB (2,989 words) - 15:51, 6 December 2023
- Rules of DPA, a copy of the file may be requested by the parties. If one of the parties wishes to use of the possibility of consulting the file, the latter18 KB (2,611 words) - 12:45, 16 June 2023
- within the meaning of article 63, 1° of the LCA. For the rest, the inspection report does not include no finding of any violation of the GDPR on the part24 KB (3,525 words) - 15:29, 26 January 2024
- Tietosuojavaltuutetun toimisto (Finland) - 9885/157/19 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)according to Section 200(3) of the Finnish Act on Electronic Communication Services. The DPA emphasised that the requirement of Article 12(2) GDPR should also21 KB (3,097 words) - 13:40, 12 January 2024
- Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 4) (category Article 28(3)(a) GDPR) (section English Machine Translation of the Decision)section 41, subsection of the Data Protection Act. 2, No. 4. If the Municipality of Helsingør meets the conditions of the ban of 18 August 2022 before 525 KB (3,660 words) - 08:42, 14 September 2022
- Datatilsynet (Denmark) - 2020-31-4131 (category Article 2(2)(c) GDPR) (section English Machine Translation of the Decision)characteristics, hence the processing of personal data is not covered by the GDPR, according to Article 2(2)(c) of the GDPR. However, the DPA concluded that Orienteringsret24 KB (3,651 words) - 16:38, 6 December 2023
- CNIL (France) - SAN-2022-022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)GPDR) The DPA also determined a violation of Article 33 GDPR. The documentation provided by the controller did not allow the DPA to assess of all the measures59 KB (9,623 words) - 17:03, 6 December 2023
- Court of Appeal of Brussels - 2020/AR/813 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)stated the DPA violated the principles of proper administration. The DPA orally mentioned additional violations to the controller at the hearing. The DPA85 KB (12,340 words) - 15:30, 19 August 2022
- IMY (Sweden) - DI-2020-10561 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of Telephone: natural persons with regard to the processing of personal17 KB (1,940 words) - 15:23, 6 December 2023
- ICO - Monetary Penalty on Ticketmaster UK Limited (redirect from ICO - The ICO - Monetary Penality to Ticketmaster UK Limited) (category Article 4(2) GDPR) (section English Machine Translation of the Decision)Member State.2 2.2 The GDPR was developed and enacted in the context of challenges to the protection of personal data posed by, in particular: a. the substantial130 KB (21,195 words) - 13:52, 25 April 2021
- APD/GBA (Belgium) - 22/2020 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data35 KB (5,526 words) - 16:56, 12 December 2023
- Copy of claim before the Consumer Service of the Provincial Directorate of Ciudad Real of the Ministry of Health dated 05/10/2019. Copy of the Vodafone32 KB (4,831 words) - 14:31, 13 December 2023
- months after the day of application of the GDPR), the DPA found that the controller had violated Article 37(7) GDPR. Because the DPO of the controller was26 KB (3,862 words) - 17:41, 25 June 2022
- Ordinance. The deadline for implementing the orders is stated in section 7 of the decision. 3. Details of the facts of the case In your reply of 10 September28 KB (4,155 words) - 18:57, 5 March 2022
- VDAI (Lithuania) - VDAI vs UAB Prime Leasing (category Article 83(2)(a) GDPR) (section English Machine Translation of the Decision)loss of the DB file, since it was not even aware of the existence of this DB in the first place (!). The DPA considered the lack of organizational and technical37 KB (4,319 words) - 09:20, 17 November 2023
- part of Netcompany A / S 'development or testing of the system, nor in connection with Kombit A / S' follow-up on tests of the system. 2.2. Types of personal18 KB (2,710 words) - 16:34, 6 December 2023
- LfDI (Baden-Württemberg) - 0523.1-2/3 (category Article 5(2) GDPR) (section Violation of Article 5(2) GDPR)transactions by the Board of Management was not relevant. The LfDI assumed negligence. For the assessment of the fine, the LfDI, which applied the fine framework8 KB (1,137 words) - 10:22, 17 November 2023
- AEPD (Spain) - TD/00044/2021 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)allow for the satisfaction of the claims of the complaining party. Consequently, for the purposes provided for in article 64.2 of the LOPDGDD, the Director22 KB (3,465 words) - 13:30, 13 December 2023
- NAIH (Hungary) - NAIH-1091-10/2022 (NAIH-6936/2021) (category Article 5(2) GDPR) (section English Machine Translation of the Decision)Article 7 (1) of the GDPR and Article 5 (2) of the GDPR, as he could not to certify the processing of the personal data of the data subjects for the purpose69 KB (11,255 words) - 10:08, 17 November 2023
- end dates of the payment default; 2) the total amount of the payment default; and 3) the business sector from where the payment default arose. The Borrower22 KB (3,237 words) - 12:25, 17 June 2022
- Garante per la protezione dei dati personali (Italy) - 9788429 (section English Machine Translation of the Decision)transposition of Article 5(3) of the Directive. The violation of the Code constitutes a direct consequence of the violation of the Directive. The DPA issued a57 KB (9,084 words) - 15:11, 13 July 2022
- Tietosuojavaltuutetun toimisto (Finland) - 8979/162/21 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)personal data and where the controller reviews them. The DPA stated that the objective of the right of access is the opportunity of the data subject to stay19 KB (2,906 words) - 09:35, 4 March 2024
- APD/GBA (Belgium) - 72/2020 (category Article 7(3) GDPR) (section English Machine Translation of the Decision)information of the data protection officer of the data controller, from the highest level of the Management of the Y hospital and the highest level of the human34 KB (5,677 words) - 17:00, 12 December 2023
- information on the service contracted by the deceased. The DPA concluded that in case of doubts about the identity of the requesting party, the controller21 KB (3,290 words) - 10:50, 13 December 2023
- 6, 2020, the complained party answered the transfer of the claim, stating the following: On the one hand, it indicates that the origin of the claim is25 KB (4,016 words) - 14:27, 13 December 2023
- AP (The Netherlands) - 4.02.2021 (category AP (The Netherlands)) (section English Machine Translation of the Decision)level of security, taking into account the state of the art and the costs of implementation, the risks involved and the nature of the data. the implementation57 KB (8,053 words) - 17:07, 12 December 2023
- First-tier Tribunal - Vestani v Information Commissioner (section English Machine Translation of the Decision)progress on the complaint, or of the outcome of the complaint, before the end of the period of 3 months beginning when the Commissioner received the complaint15 KB (2,203 words) - 14:39, 21 December 2023
- Court of Appeal of Brussels - 2021/AR/163 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)The Court of Appeal of Brussels annulled a fine issued by the Belgian DPA, finding that the DPA should have considered the full range of sanctions at its72 KB (11,389 words) - 08:59, 20 August 2021
- HDPA (Greece) - 29/2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)1 of Law 4624/2019 (Government Gazette A΄ 137), in the context of the powers provided for in articles 4 par. 3 and 10 par. 4 of the Regulation of Operation21 KB (3,334 words) - 09:12, 25 October 2023
- Datatilsynet (Denmark) - 2020-442-8866 (category Article 34(3)(c) GDPR) (section English Machine Translation of the Decision)detailed review of the case and a justification for the decision. 2. The competence of the Data Inspectorate In connection with the processing of the present breach20 KB (3,045 words) - 16:40, 6 December 2023
- Court of Appeal of Brussels - 2019/AR/1234 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)line with the GPDR. In the appeal procedure, the FPS argues that: 1. the complaint has become devoid of all purpose 2. the DPA interprets the right to access5 KB (609 words) - 12:38, 10 August 2022
- Garante per la protezione dei dati personali (Italy) - 9446730 (category Article 58(2)(c) GDPR) (section English Machine Translation of the Decision)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data34 KB (5,420 words) - 15:51, 6 December 2023
- to the fact that, irrespective of the opening of the factual scope of application of the GDPR - in any event a transfer of the personal data of the responsible31 KB (5,184 words) - 17:19, 15 April 2023
- AP (The Netherlands) - 14.01.2022 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)verification. Hence, the DPA concluded that DPG Media violated Article 12(2) GDPR for not facilitating the data subject’s rights sufficiently. The DPA imposed a fine50 KB (7,656 words) - 17:05, 12 December 2023
- center that in the context of examination of the complaint is checked ex officio in relation to the fact of the lack of availability of of the complainant's11 KB (1,522 words) - 09:35, 13 September 2022
- APD/GBA (Belgium) - 55/2021 (category Article 6(3) GDPR) (section English Machine Translation of the Decision)response.2. It appears from the documents in the file that the complainant and Mrs Z (hereafter: the mother of the child)were in the process of divorce81 KB (13,211 words) - 16:59, 12 December 2023
- Persónuvernd (Island) - 2022020363 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)DPA’s assessment, the DPA published its final decision. On the basis of all the above, the DPA first of all clarified that customer data, including data142 KB (22,881 words) - 12:42, 16 January 2024
- Datatilsynet (Norway) - 20/02225 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)Tollbugt 3 22 39 69 00 22 42 23 50 974 761 467 www.datatilsynet.no 0105 OSLO 01/04/21 Page 2 3. Details of the facts of the case In your reply of 1 September45 KB (7,286 words) - 18:55, 5 March 2022
- AP (The Netherlands) - 25.11.2021 (category Article 58(2)(i) GDPR) (section English Machine Translation of the Decision)database, the DPA found that the Benefits department processed the dual nationalities of 1,400,000 Dutch nationals. The DPA acknowledged that the Benefits87 KB (11,601 words) - 17:08, 12 December 2023
- not covered by the right of access under Article 15 of the Data Protection Regulation. 3.2. It follows from the Data Protection Act [2] § 22, para. 1,16 KB (2,455 words) - 16:38, 6 December 2023
- AEPD (Spain) - TD/00129/2020 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)derived from the contractual relationship, the party The claimant requests the recordings of the calls made on the 6th and 10th of November 2019. The claimant22 KB (3,422 words) - 14:50, 13 December 2023
- ANSPDCP (Romania) - 03.08.2023 (category Article 15(3) GDPR) (section English Machine Translation of the Decision)para. (3) of the RGPD, respectively of the requested video recordings, for the time interval in which the petitioner was in the premises of the operator's5 KB (659 words) - 15:14, 13 December 2023
- Datatilsynet (Denmark) - 2019-431-0048 (category Article 28(3)(f) GDPR) (section English Machine Translation of the Decision)users in the municipalities have been able to access are: the gender of the citizen the age of the citizen citizenship case types: the type of case a citizen18 KB (2,633 words) - 16:36, 6 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 8040/163/2019 (category Article 58(2)(d) GDPR) (section English Machine Translation of the Decision)response would not change the way the matter is resolved. The matter may be resolved on the basis of the contact of the Office of the Data Protection Officer29 KB (4,610 words) - 13:07, 3 March 2024
- NAIH (Hungary) - NAIH/2020/193/8 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)objected to the processing of the requested data. At the request of the Applicant, the Authority shall take the following decisions in the data protection58 KB (9,413 words) - 10:11, 17 November 2023
- Garante per la protezione dei dati personali (Italy) - 9451734 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)paragraphs 1 and 3, of the Code; c) in violation of the prohibition of dissemination of health data (art. 9, par. 1, 2, 4, of the Regulation referred24 KB (3,697 words) - 15:52, 6 December 2023
- responsible for the data processing since it used the claimant's data for its purposes. The DPA held that the facts of the case suggest that the right to opposition16 KB (2,544 words) - 14:25, 13 December 2023
- AEPD (Spain) - EXP202202000 (category Article 17(3)(b) GDPR) (section English Machine Translation of the Decision)laid down in the rules of procedure or (2) when the competent body deems it appropriate for reasons of public interest. The DPA held that the accessibility20 KB (3,107 words) - 10:49, 13 December 2023
- considered the risks that some of the addresses could be secret/protected. In the view of the DPA, those addresses entailed a high risk for the rights of the21 KB (2,901 words) - 16:37, 6 December 2023
- UODO (Poland) - DKN.5131.7.2020 (category Article 33(3) GDPR) (section English Machine Translation of the Decision)possible risk of infringement of the rights or freedoms of the persons affected by the infringement in the present case. In the opinion of the DPA the company50 KB (8,066 words) - 10:00, 17 November 2023
- back-account. The controller didn’t reply to questions and information-requests of the DPA. The data subject filed a complaint at the Spanish DPA. The DPA held8 KB (1,143 words) - 13:02, 13 December 2023
- HDPA (Greece) - 36/2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)violation of Articles 12 para. 3 and 15 para. 1 and 3 GDPR from the non-fulfillment of the right of access and a violation of the principle of legality of processing7 KB (890 words) - 15:02, 15 January 2024
- AP (The Netherlands) - 23.09.2021 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)have been a high risk to the rights and freedoms of these data subjects. As a result of the notification of the data breach, the DPA decided to investigate66 KB (8,861 words) - 17:08, 12 December 2023
- (~€123,656). The DPA originally announced a fine of NOK 2.5 million. NIF had no objections to the description of the incident on which the DPA's notification50 KB (8,081 words) - 18:52, 5 March 2022
- (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data39 KB (6,247 words) - 09:14, 15 November 2023
- Garante per la protezione dei dati personali (Italy) - 9461168 (category Article 28(3)(a) GDPR) (section English Machine Translation of the Decision)to art. 58 of the Regulation and 157 and 158 of the Code, towards both the Company (the XXth) and the Company (the XXth, see the minutes of the operations50 KB (8,001 words) - 15:52, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9542096 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)paragraph 5, of the Code, the initiation of the procedure for the adoption of the measures referred to in art. 58, paragraph 2, of the Regulations, inviting21 KB (3,092 words) - 15:54, 6 December 2023
- for the alleged violation of Article 5.1.f) of the GDPR and Article 32 of the GDPR, typified in Article 83.5 of the GDPR. FIFTH: Notified of the aforementioned24 KB (3,512 words) - 10:43, 13 December 2023
- 58(2) GDPR for the processing of personal data without the consent of the data subject, as foreseen in Article 6 GDPR. Firstly, the DPA found out that20 KB (3,035 words) - 10:33, 13 December 2023
- complaint referred by the Berlin DPA, for offering unclear information and not giving the option of rejecting the cookies. The Spanish DPA was referred a complaint19 KB (2,841 words) - 14:02, 13 December 2023
- proposal. In the present case, the agreement of beginning of the disciplinary file determined the facts in which the imputation, the infringement of the GDPR attributed24 KB (3,749 words) - 13:19, 13 December 2023
- UODO (Poland) - DKN.5131.31.2021 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)within 3 days from the date of delivery of this decision, the persons whose data was processed on the stolen copy of the notarial deed, about the breach105 KB (17,237 words) - 09:22, 10 May 2023
- after reminding the provisions of articles 3 par. 2 and 27 of the GDPR regarding the territorial scope of GDPR and on representatives of controllers or non-processors8 KB (1,122 words) - 12:31, 20 July 2022
- accordance with the criteria that establishes article 83.2 of the RGPD, and with the provisions of article 76 of the LOPDGDD, regarding section k) of the aforementioned20 KB (2,992 words) - 13:30, 13 December 2023
- HDPA (Greece) - 20/2021 (category Article 21(2) GDPR) (section English Machine Translation of the Decision)entered on the Greek website (Kariera.gr) during the existence of the technical error. 76 applications were submitted 3deletion of e-mail visitors of the website20 KB (2,936 words) - 14:58, 22 November 2021
- appeal appears in section 6 of the decision. 2. Details of the facts of the case On 16 December 2019, the Danish Data Protection Agency received an inquiry from45 KB (6,973 words) - 05:12, 15 September 2022
- EWCA - Dawson-Damer v Taylor Wessing LLP (redirect from EWCA - A3/2015/307) (section English Machine Translation of the Decision)"disproportionate effort" for the purposes of section 8(2) DPA 1998 so that the data controller is excused from doing so; whether the exercise of the court’s discretion89 KB (14,909 words) - 08:39, 22 February 2022
- UODO (Poland) - DKE.561.13.2020 (category Article 58(2)(i) GDPR) (section English Machine Translation of the Decision)basis for the consideration of the aforementioned complaint by the DPA. The President of the DPA, considering the above explanations of the Company as27 KB (4,446 words) - 09:51, 17 November 2023
- AEPD (Spain) - EXP202202837 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)with article 65 of the LOPDGDD Law, when assessing possible rational indications of a violation of the rules in the field of the powers of the Spanish Data58 KB (8,995 words) - 13:00, 13 December 2023
- appealed the decision to the Administrative Court No. 2 of Vitoria-Gasteiz, which upheld the appeal. The DPA then appealed that court's decision to the Administrative44 KB (6,561 words) - 14:24, 24 November 2022
- APD/GBA (Belgium) - 15/2021 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)Chamber of September 14, 2020 in the presence ofMe De Ridder, counsel for the defendant in the absence of the complainant;2. The facts and subject of the complaint1285 KB (13,724 words) - 16:52, 12 December 2023
- Article 6(1)(f) of the GDPR? First of all, the DPA recalls that: - a video surveillance system falls under the provisions of the GDPR when the equipment used82 KB (12,100 words) - 17:01, 12 December 2023
- AEPD (Spain) - PS/00192/2022 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)concerned, the object of the report, the previous behavior of the interested party, the content, the form and the repercussions of the publication, the form15 KB (2,257 words) - 13:02, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9778094 (section English Machine Translation of the Decision)and disregarding the circular of the Ministry of the Interior of 26 February 1999 (123 / A183.B320), given the absence of the purposes of justice and police66 KB (10,708 words) - 11:29, 16 August 2022
- categories of personal data of Article 9 GDPR of the restaurant owner. The tweet with the picture and other tweets of the debate pointed that the restaurant31 KB (5,083 words) - 13:51, 13 December 2023
- regulated by the public access and secrecy act the breach is to be considered severe. The DPA held that the Police must: Pay a fine of SEK 2 500 000 Implement43 KB (4,945 words) - 15:22, 6 December 2023
- with in points 7.1 and 8.3 of the decision. 2. Decision on order and infringement fine 1. Pursuant to Article 58 (2) (2) of the Privacy Regulation, EAS40 KB (5,988 words) - 19:04, 5 March 2022
- AEPD (Spain) - PS/00090/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)responsibility and proceeds to the voluntary payment of the fine imposed by the DPA? The Spanish DPA imposed a fine of EUR 5 000 on the company under investigation16 KB (2,462 words) - 13:58, 13 December 2023
- HDPA (Greece) - 2/2023 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)Greek DPA. In the complaint, the data subject asked the following questions to the DPA: (i) whether the data controller had the right to retain a copy of the31 KB (5,021 words) - 16:15, 18 July 2023
- Datatilsynet (Denmark) - 2019-32-0709 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)information on the conclusion of the agreement after the ending of the contractual relationship and the withdrawal of consent? The Datatilsynet held that the controller24 KB (3,763 words) - 16:23, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9795350 (section English Machine Translation of the Decision)After the controller was notified of the complaint by the DPA, it granted the access request. The controller told the DPA that because the data subject90 KB (14,651 words) - 08:07, 5 September 2022
- Datatilsynet (Denmark) - 2019-431-0052 (category Article 13(2) GDPR) (section English Machine Translation of the Decision)to the data subjects´ expectation. The DPA investigated if the company met requirements set out in Articles 5(1)(e), 6(1)(a), 13(1) and (2) of the GDPR27 KB (4,300 words) - 16:36, 6 December 2023
- On 30 March 2021, the complaint was dismissed by the Front-line Service of the DPA, on the basis of Article 58 and 60 of the Act of 3 December 2017 establishing12 KB (1,431 words) - 16:45, 12 December 2023
- purposes of processing, the identity and contact details of the controller, and the existence of data subjects' rights under the GDPR. The DPA considered26 KB (3,881 words) - 13:35, 13 December 2023
- assessment of the legality of the posting. Therefore, the DPA decided not to carry out investigations in this case because it fell outside the scope of the their17 KB (2,399 words) - 16:20, 6 December 2023
- notification to the DPA. The DPA had to contact the processor about the breach, who consequently deleted the image files immediately and corrected the script.30 KB (4,302 words) - 18:53, 5 March 2022
- Parliament and of the Council of October 23 of 2019 on the protection of persons who report violations of the Law of the Union, which is directly applicable57 KB (9,217 words) - 10:44, 13 December 2023
- AP (The Netherlands) - z2018-02009 (category AP (The Netherlands)) (section English Machine Translation of the Decision)penalty and the subsequent by the UWV information provided at the request of the Dutch DPA 5. The General Data Protection Regulation (hereinafter: the GDPR)33 KB (5,112 words) - 17:10, 12 December 2023
- Datatilsynet (Denmark) - 2019-421-0028 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)were in effect on the date of notification of the audit, regarding the handling of access requests pursuant to Articles 15 and 12 of the Data Protection17 KB (2,639 words) - 16:27, 6 December 2023
- process. Chapter 2 describes the legal framework. Chapter 3 follows the assessment of the AP, after which In chapter 4, the height of the administration must54 KB (8,224 words) - 17:07, 12 December 2023
- Law 5/1995, of 05/22, of the Court of the Jury. In the norm, the Electoral Census Office is assigned powers in the formation of the list of candidates for21 KB (3,254 words) - 14:02, 13 December 2023
- DSB (Austria) - 2021-0.347.702 (category Article 9(2)(f) GDPR) (section English Machine Translation of the Decision)follows that the subject of the complaint is the question of whether the Respondent was entitled to submit data of the Complainant for the submission in25 KB (3,875 words) - 10:36, 11 January 2024
- sedeagpd.gob.es 2/28 copy of the resolution of the University of Granada, of May 4, 2020, against of the requirement of the second chamber for the evaluation57 KB (8,117 words) - 10:35, 13 December 2023
- AEPD (Spain) - 0098/2022 (category Article 9(2)(g) GDPR) (section English Machine Translation of the Decision)would constitute processing of special categories of data within the meaning of Article 9 GDPR. The DPA recalled the definition of ‘biometric data’ as meaning56 KB (8,102 words) - 13:57, 1 February 2023
- determination of a system of exercise of the right of opposition that conforms to the mandate of the LSSI. Situation that in the present case has not existed20 KB (3,159 words) - 13:20, 13 December 2023
- verified by the DPA due to the website's errors. Therefore, this argument was dismissed by the DPA. Similarly, the DPA held that the fact that the form is44 KB (7,162 words) - 13:53, 13 December 2023
- Article 83 GDPR, the DPA imposed a fine on the controller. The DPA took into account aggravating circumstances provided in Article 76(2)(b) of the Spanish Data26 KB (3,867 words) - 10:44, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9860461 (section English Machine Translation of the Decision)as, in paragraph 3, that in the event of dissemination of data for journalistic purposes, the limit of the "essential nature of the information regarding16 KB (2,409 words) - 15:44, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9860487 (section English Machine Translation of the Decision)as, in paragraph 3, that in the event of dissemination of data for journalistic purposes, the limit of the "essential nature of the information regarding16 KB (2,352 words) - 15:44, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9860513 (section English Machine Translation of the Decision)as, in paragraph 3, that in the event of dissemination of data for journalistic purposes, the limit of the "essential nature of the information regarding16 KB (2,324 words) - 15:45, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9445180 (section English Machine Translation of the Decision)The Italian DPA found that access of the employer to the email account of the former employee must protect the privacy of the latter and not infringe the34 KB (5,414 words) - 15:50, 6 December 2023
- APD/GBA (Belgium) - 105/2023 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)that the court had only referred to controller 1 in its order to the DPA. Therefore, according to controller 2, the DPA violated the order of the court102 KB (15,787 words) - 07:39, 6 September 2023
- Personvernnemnda (Norway) - 2021-13 (20/01874) (category Article 24(2) GDPR) (section English Machine Translation of the Decision)consideration. The PVN agreed with the DPA that the the Company had infringed Article 6(1)(f) GDPR because of the absence of a valid legal basis for the processing48 KB (7,804 words) - 18:49, 5 March 2022
- es Page 2 2/10 one of them during the month of July. 3. Complaints from the Works Council about the way of addressing the shift managers to the workers33 KB (5,347 words) - 13:55, 13 December 2023
- to, the specific website visited by the person, the metadata of the browser and operating system, the date and time of the visit to the website, the IP10 KB (1,381 words) - 10:27, 13 December 2023
- hazard assessment of the person to be tested. Within the framework of the examination of the proportionality of the encroachment, a weighing of interests had28 KB (3,418 words) - 13:49, 12 May 2023
- on the basis of Articles 58 and 60 of the law of 3 December 2017, the complainant will be informed of this on the basis of art. 61 of the law of 3 December62 KB (9,417 words) - 16:57, 12 December 2023
- initiative of the EDPS, the Authority, like the majority of the members of the EDPS, jointly undertook the examination of the topic "The definition and6 KB (767 words) - 10:55, 28 February 2024
- and 5.2 of the DGPS and Article 6 of the DGPS; 2.the defendant has not complied with the obligations imposed by sections 12.1. and 12.2. of the DGPS and24 KB (3,844 words) - 16:51, 12 December 2023
- then the Defendant reserves the right to challenge the complaint additional comments and positions in defense of its rights. 3.2. The Defendant on 3/10/201956 KB (8,913 words) - 16:52, 6 December 2023
- DSB (Austria) - 2020-0.816.655 (category Article 3 GDPR) (section English Machine Translation of the Decision)review the data protection authority within the meaning of Section 24(6) of the DPA (cf. Art. 8 of the Federal Constitution, according to which the use of28 KB (4,230 words) - 13:53, 12 May 2023
- Datatilsynet (Denmark) - 2019-32-0988 (category Article 9(2) GDPR) (section English Machine Translation of the Decision)take place on the basis of Article 9 (1) of the Data Protection Ordinance [1]. 2, letter h, cf. the Data Protection Act [2] § 7, para. 3, and Article 645 KB (7,151 words) - 16:24, 6 December 2023
- NAIH (Hungary) - NAIH/2020/2555 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)affected by the delay. In the event of non-payment of the fine and the late payment allowance, the Authority shall order the enforcement of the decision and33 KB (5,033 words) - 10:12, 17 November 2023
- CNPD (Portugal) - Deliberação 2022/140 (category Article 13(2) GDPR) (section English Machine Translation of the Decision)breach of a substantial right: Article 39.0 , n.0 3 of the LERGPD; c) The invalidity of the non-application of the provisions of Articles 37.0 , n.0 2 and75 KB (12,306 words) - 10:02, 21 December 2022
- UODO (Poland) - DKN.5130.1354.2020 (category Article 28(3)(h) GDPR) (section English Machine Translation of the Decision)series of negligence by the controller, the DPA took into account the scale of the breach and the scope of the stolen data. Share blogs or news articles here74 KB (11,513 words) - 09:58, 17 November 2023
- Garante per la protezione dei dati personali (Italy) - 9856694 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)administrative fine on the basis of Articles 58(2)(i) and 83 GDPR. The total amount of the fine took into account the long period of time in which the violation occurred49 KB (7,758 words) - 15:44, 6 December 2023
- possible. Firstly, the Spanish DPA analysed the reaction of the controller to the confidentiality data breach. It observed that the occurence of a data breach40 KB (6,014 words) - 13:21, 13 December 2023
- Personvernnemnda (Norway) - 2022-14 (20/02368) (category Article 58(2) GDPR) (section English Machine Translation of the Decision)argument of the controller that the DPA had taken the turnover from the wrong year into account. It held that the calculation of the fine based on the aggravating26 KB (4,039 words) - 09:08, 20 January 2023
- Datatilsynet (Norway) - 20/02274 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)regardless. The controller did not discontinue the former employee's email account until he received the first letter from the DPA. The DPA noted that the unlawful47 KB (7,661 words) - 18:54, 5 March 2022
- shown the coat of arms of the Ministry of the Interior. SECOND: In accordance with article 65.4 of Organic Law 3/2018, of 5 December, Protection of Personal40 KB (6,014 words) - 13:24, 13 December 2023
- AEPD (Spain) - PS/00060/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)set out in the Articles 47, 64.2 and 68.1 of the Organic Law 3/2018 of December 5, 2010, on the Protection of Personal Data and Guarantee of Digital Rights23 KB (3,695 words) - 13:53, 13 December 2023
- AEPD (Spain) - PS/00333/2019 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)infringe Article 5 of the GDPR? The DPA held that the entity who was the object of the complaint was not responsible because it had transferred the agent's number16 KB (2,625 words) - 14:29, 13 December 2023
- A82528548) of the telephone line *** TELEPHONE. 1 in which the ownership of this by part of the claimant. - Copy of the certificate of the Robinson List33 KB (5,185 words) - 13:48, 13 December 2023
- AEPD (Spain) - EXP202103746 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)at least, the existence of the treatment, the identity of the person in charge and the possibility of exercising the rights provided for in the Articles16 KB (2,041 words) - 13:34, 13 December 2023
- infringement of the rights conferred in the RGPD, there must be a treatment of the personal data of the claimants, and the publication of a photograph27 KB (4,356 words) - 12:41, 13 December 2023
- by the data subject. After the notification of the proposed fines, the controller claimed, in the first place, that the DPA would be infringing the principle38 KB (5,920 words) - 12:43, 13 December 2023
- Datatilsynet (Norway) - 20/02291 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)responsible ». The question of choice of law must therefore be assessed on the basis of what is considered the time of action. The relevant deviation arose45 KB (6,645 words) - 14:40, 28 March 2022
- APD/GBA (Belgium) - 17/2020 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)to as the DPA; Having regard to the Law of 3 December 2017 establishing the Data Protection Authority (hereinafter LCA); Having regard to the Law of 30 July52 KB (8,603 words) - 16:55, 12 December 2023
- APD/GBA (Belgium) - 75/2023 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)with regard to the “free profiles”, to process the information: the DPA proceeded to assess the balance of interests of the controller and the complainants77 KB (11,604 words) - 08:55, 29 June 2023
- by the person in charge of renting the 2nd and 3rd floors. 3. Photographs of the exterior of the property and of the 4 cameras installed inside the east28 KB (4,525 words) - 14:06, 13 December 2023
- send the e-mail. On top of that, that e-mail was then send to the lawyer of the defendant 2. The lawyer then forwarded that mail to the lawyer of the complainant72 KB (11,208 words) - 16:51, 12 December 2023
- Court of Appeal of Brussels - 2023/AR/801 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)01-00003382612- □□□ 3- □□ 18- □3- □1- L_J Court of Appeal Brussels-2023/AR/801-p. 4 111. THE CONTEXT OF THE CONTESTED DECISION AND THE PROCEDURE BEFORE THE DPA 5. On11 KB (1,467 words) - 09:40, 6 July 2023
- with article 64.3 of the Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights (LOPDGDD), the claim was admitted54 KB (8,870 words) - 10:43, 13 December 2023
- violation of Article 22(2) of the Spanish Law on services of the information society and electronic commerce (LSSI). The DPA considered that the lack of a information17 KB (2,700 words) - 14:23, 13 December 2023
- AKI (Estonia) - 2.1.-1/22/1396 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)meets the conditions set forth in Article 6(1)(f) of the IKÜM (see section 2.1 of the inspection's reasons). We emphasize that the analysis of the legitimate34 KB (5,305 words) - 08:40, 29 June 2023
- AEPD (Spain) - EXP202105669 (category Article 58(2)(d) GDPR) (section English Machine Translation of the Decision)accordance with the provisions of art. 43.2 of the LPACAP, dated January 3, 2022, as stated in the certificate that is in the file. Although the notification45 KB (6,998 words) - 12:58, 13 December 2023
- However, the controller sent a copy of the information requested once it was notified about the DPA's investigation. The DPA noted that the lawfulness of the51 KB (7,867 words) - 13:10, 13 December 2023
- gob.es 3/7 FOUNDATIONS OF LAW FIRST: The Director of the Spanish Agency for Data Protection, in accordance with the provisions of section 2 of article22 KB (3,432 words) - 12:37, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 3021/452/2017 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)Due to the factual basis of the decision, several of the points of contention regards the question of whether there was a difference between the national41 KB (6,220 words) - 09:48, 17 November 2023
- AEPD (Spain) - PS/00461/2019 (category Article 83(2)(a) GDPR) (section English Machine Translation of the Decision)affecting the rights of third parties. The Spanish DPA received a complaint about the installation of a video surveillance camera on the private property of a15 KB (2,366 words) - 14:41, 13 December 2023
- with the Data Protection Authority against the defendant. 2. The subject of the complaint concerns the installation of surveillance cameras in the six stores21 KB (3,034 words) - 15:30, 26 January 2024
- this use of Strava a breach of the GDPR? The DPA (Datatilsynet) held that the municipality had several breaches as per the GDPR: 1) For the lack of routines24 KB (3,591 words) - 18:57, 5 March 2022
- pursuant to Section 3(2) of the Data Protection Act (DPA) and Article 4(1) GDPR. Pursuant to the FOIA and the GDPR, the ICO balanced the right to information3 KB (212 words) - 16:21, 7 March 2022
- Fourth, the DPA rejected the controller's argument that the nature of the data processed (contact details) was an indicator of the prevalence of the company's84 KB (13,036 words) - 13:26, 13 December 2023
- accordance with the provisions of section 2 of article 56 in relation to section 1 f) of article 57, both of the GDPR; and in article 47 of the LOPDGDD. SECOND:14 KB (2,139 words) - 10:50, 13 December 2023
- HDPA (Greece) - 47/2022 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)who requested the granting of the of the following information: a) a complete copy of the body of electors, as it was formed at the end of the voting, b)25 KB (3,943 words) - 14:32, 28 September 2022
- way, complained to the Spanish DPA that the confidentiality of the processing had been breached. Does the distribution of the census of workers through a24 KB (3,907 words) - 14:08, 13 December 2023
- article 58.2 of the RGPD recognizes to each control authority, and as established in articles 47 and 48 of the LOPDGDD, the Director of the Spanish Data27 KB (4,108 words) - 13:32, 13 December 2023
- AEPD (Spain) - PS/00197/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)to Articles 3(2) and 3(3) of the Royal Decree 1435/2002. The contract included the identification and contact of the end consumer, the logo of Iberdrola129 KB (21,793 words) - 14:09, 13 December 2023
- DSB (Austria) - D123.921/0005-DSB/2019 (category Article 1(2) GDPR) (section English Machine Translation of the Decision)about the specific entries of the categories of personal data (such as names, tax-relevant information). The DPA obliged the respondent to provide the relevant42 KB (6,592 words) - 13:58, 12 May 2023
- DSB (Austria) - 2022-0.332.606 (category Article 2(2)(c) GDPR) (section English Machine Translation of the Decision)First, the Austrian DPA had to determine whether the GDPR was applicable. The DPA checked whether the material scope was met, in particular whether the case21 KB (3,166 words) - 13:43, 12 May 2023
- processing of health data from Article 9, paragraph 2, point e) of the GDPR. Furthermore, the reference to the legal basis regarding the execution of the contract13 KB (1,934 words) - 20:55, 1 November 2023
- Personvernnemnda (Norway) - 2022-12 (20/01589) (section English Machine Translation of the Decision)informed the DPA about the controller's alleged GDPR violations. The parent of a school pupil (the data subject) was concerned that the municipality (the controller)24 KB (3,609 words) - 09:07, 20 January 2023
- Tietosuojavaltuutetun toimisto (Finland) - 3831/161/21 (category Article 13(2)(a) GDPR) (section English Machine Translation of the Decision)informed of the storage period when collecting personal data in accordance with Article 13(2)(a) GDPR. On the basis of the information gathered, the DPA held61 KB (9,477 words) - 13:38, 12 January 2024
- removing the mention of the title of nobility from the identity card of the complainant. The complainant, a member of the nobility (countess) addressed45 KB (6,780 words) - 16:57, 12 December 2023
- in view of the circumstances of the case, the subject of the offence is not and considering that the object of the warning is the imposition of corrective18 KB (2,737 words) - 14:23, 13 December 2023
- with Article 58(2)(b) of the Regulation of the European Parliament and of the Council EU 2016/679 of 27 April 2016. on the protection of natural persons22 KB (3,364 words) - 09:52, 17 November 2023
- instructed by the DPA to do so. Thus, the DPA imposed a fine of €20,000. It is worth mentioning that the Greek DPA fined the four biggest banks of Greece (National50 KB (8,004 words) - 04:49, 14 December 2022
- original purpose of the processing. The DPA also found that the use of GPS data exceeded defined purposes. Altogether, the DPA reasoned that these processing activities43 KB (6,983 words) - 09:09, 21 August 2022
- Garante per la protezione dei dati personali (Italy) - 9524175 (category Article 28(2) GDPR)paragraphs 2 and 3 of the Regulation (formerly Article 29 of the Code, prior to the amendments set out in Leg. Decree No. 101/2018), the processing of personal20 KB (3,133 words) - 15:53, 6 December 2023
- AEPD (Spain) - TD/00034/2020 (category Article 9(2)(h) GDPR) (section English Machine Translation of the Decision)proceeding to eliminate 3 of the 4 annotations made by 3 health professionals from the San Fermin Health Center. The Responsible of the treatment has taken17 KB (2,730 words) - 14:50, 13 December 2023
- therefore only up to the Union institutions, in particular the Court of Justice, to define the limits of that concept. In the opinion of the DPA, a private law93 KB (14,040 words) - 17:00, 12 December 2023
- AEPD (Spain) - EXP202201247 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)mentioned by the data controller, the data subject is actually the co-owner of the car in dispute, not its guarantor. The DPA ruled that processing the personal17 KB (2,350 words) - 13:17, 13 December 2023
- APD/GBA (Belgium) - 33/2020 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)not negate the responsibility of the controller. Infringement of Articles 5(1)(c) and 5(1)(d): The Belgian DPA held that the continued use of the incorrect39 KB (6,551 words) - 16:56, 12 December 2023
- 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal79 KB (12,260 words) - 17:00, 12 December 2023
- Persónuvernd (Iceland) - 2020061954 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)processing of personal information. According to the website of the Office of the Medical Director of Health and the Civil Protection Department of the National88 KB (14,189 words) - 09:58, 7 December 2021
- treatment of the data of union affiliation of the claimant by two unions, within the scope of the legal dialogue established for the purposes of cooperation36 KB (5,608 words) - 13:01, 13 December 2023
- AEPD (Spain) - PS/00023/2020 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)neighborhood and the street a violation of Article 5 (1) (c) GDPR? The Spanish DPA has found that the facts of the present proceedings show that 2 of the 3 cameras21 KB (3,298 words) - 13:46, 13 December 2023
- The Litigation Chamber of the Belgian DPA dismissed the complaint made against Google on the request by the plaintiff to have the results delisted by Google20 KB (2,982 words) - 17:00, 12 December 2023
- AEPD (Spain) - PS/00036/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)40) of the mentioned Law, regarding the "Cookie Policy" in the denounced website. FIFTH: Notification of the opening of the file on 31/03/20, as of today16 KB (2,587 words) - 13:50, 13 December 2023
- accordance with of Art. 6, para. 1 of the GDPR. For the purposes of clarification of the case from a legal and factual point of view, the Bulgarian DPA requested18 KB (2,987 words) - 16:49, 6 December 2023
- Datatilsynet (Denmark) - 2019-41-0043 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)employees - before establishment of the control measures - be informed of the purpose and scope of the measures and of the use of the information collected in26 KB (3,931 words) - 16:25, 6 December 2023
- DPC (Ireland) - Meta Platforms Ireland Limited (Facebook) - IN-18-5-5 (section English Machine Translation of the Decision)this case, the GDPR" (116). Turning to the facts of the case, the EDPB outlines a number of factors which, in contradiction to the view of the DPC, support21 KB (3,005 words) - 14:16, 1 February 2023
- legal basis. Hence, the DPA concluded that the controller violated Article 6(1) GDPR. The DPA questioned the due diligence of the controller in preventing37 KB (5,914 words) - 10:42, 13 December 2023
- AEPD (Spain) - EXP202208230 (category Article 28(2) GDPR) (section English Machine Translation of the Decision)possible fine of €90,000 could be imposed for the breach of Articles 28(2) and 28(3) of the GDPR. The data processor decided to finalize the procedure by45 KB (6,904 words) - 13:12, 13 December 2023
- in Article 24 of the Privacy Regulation, which regulates the liability of the controller separately. 3.3 In particular on the imposition of infringement31 KB (4,380 words) - 06:12, 14 March 2023
- serious for the purposes of prescription in article 72.1.b) of the Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of the digital61 KB (9,700 words) - 13:21, 13 December 2023
- they go the claimant's telephone number, the object of the call, the legitimacy of the call, and information provided to the claimant about the origin of23 KB (3,590 words) - 14:45, 13 December 2023
- provisions of articles 47 and 48.1 of the Or- Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD)15 KB (2,313 words) - 10:35, 13 December 2023
- gob.es 2/12 the person in charge, within the period of availability, understood as rejected in accordance with the provisions of art. 43.2 of the LPACAP36 KB (5,485 words) - 13:19, 13 December 2023
- IMY (Sweden) - DI-2020-10538 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)in breach of Article 12 (3) of the Data Protection Regulation by not without unnecessary delay informed the complainant of the outcome of the complainant's14 KB (1,580 words) - 15:22, 6 December 2023
- virtue of the powers established in art. 58.2 of the RGPD and in articles 47, 64.2 and 68.1 of the Organic Law 3/2018 of 5 December on Protection of Personal20 KB (3,301 words) - 13:57, 13 December 2023
- communications. Did the French DPA breach the constitutional principle of non-retroactivity of the law by applying the GDPR? Was the fine of € 500,000 imposed13 KB (1,928 words) - 09:51, 10 September 2021
- CNIL (France) - 2023-097 (category Article 9(2)(j) GDPR) (section English Machine Translation of the Decision)solutions of the study. Finally, the DPA noted that in compliance with Article R. 1461-1 of the Public Health Code, which does not allow the transfer of personal18 KB (2,536 words) - 17:11, 6 December 2023
- appears, within the section of the debt, the name and surname of the complainant along with the amount of € 286.81. SECOND: On May 9, 2019, the complaint was17 KB (2,578 words) - 14:05, 13 December 2023
- 2002/58/EC of the European Parliament and of the Council of July 12, 2002 concerning the processing of personal data and the protection of privacy in the electronic48 KB (7,525 words) - 17:02, 6 December 2023
- on each of the parties by Article 58(2) of the GPRS authority, and as established in articles 47 and 48.1 of the LOPDPGDD, the The Director of the Spanish20 KB (3,097 words) - 14:22, 13 December 2023
- in the particulars of claim (which the claimant did not complied with). The reasons for allocating the claim to the Multi-Track on the part of the claimant61 KB (8,986 words) - 08:40, 22 February 2022
- improper. The DPA disagreed, stating that the legal framework at the time of the infraction applies, and compliance with GDPR was required at the time of the83 KB (12,999 words) - 15:30, 6 March 2024
- proposed the dismissal of the complaint to which the French DPA objected. However, the Spanish DPA confirmed that the data subject did not specify the personal29 KB (4,457 words) - 10:34, 13 December 2023
- Provides a copy of the complaint before the Civil Guard of *** DATE. 2 indicating that the ruling of the Social Court number *** NUMBER 1 of Oviedo of *** DATE40 KB (6,508 words) - 14:39, 13 December 2023
- ProctorExam. 2.1.2. The need for ProctorExam and the processing of personal data in connection therewith The ITU has stated that the purpose of using ProctorExam40 KB (6,369 words) - 16:39, 6 December 2023
- Datatilsynet (Norway) - 20/01896 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)non-compliance with the principle of liability in Article 5 (2) of the Privacy Ordinance. 2. Pursuant to Article 58 no. 2 letter d of the Privacy Ordinance28 KB (4,387 words) - 18:58, 5 March 2022
- (6)(1)(b) GDPR). The DPA also found no lack of diligence on part of the controller in verifying the identity of the data subject, since the General Vehicle32 KB (4,780 words) - 10:44, 13 December 2023
- authentication login attempts and the controller did not communicate the incident to the DPA. The Spanish DPA requested the controller to provide detailed63 KB (9,551 words) - 12:33, 13 December 2023
- proof of the calls with the initial contractor and the identification they provided. Therefore, the DPA argues that the lack of diligence and the impossibility30 KB (4,631 words) - 13:00, 13 December 2023
- accordance with the provisions of article 65.2 of the LOPDGDD, dated September 24, 2020, the Director of the Spanish Agency for the Protection of Data agrees16 KB (2,328 words) - 14:30, 13 December 2023
- DSB (Austria) - 2021-0.024.862 (category Article 13(2) GDPR) (section Requirements for the Information Obligation in case of occasion-related Video Documentation)operation impact detection in the case of bridges ”of the responsible persons. 2. The person responsible specified - at the request of the data protection authority38 KB (5,821 words) - 13:39, 12 May 2023
- procedure the Director of the Spanish Protection Agency of data. Likewise, article 63.2 of the LOPDGDD determines that: "The procedures processed by the Spanish17 KB (2,368 words) - 13:28, 13 December 2023
- to address the complaint raised. As of the date of the resolution of this complaint, no allegations. LEGAL GROUNDS FIRST: The Director of the Spanish Agency17 KB (2,654 words) - 14:50, 13 December 2023
- ship of the claimed party and in order to publish in his web page images of the result of the work carried out, he took images of the page website of the26 KB (3,901 words) - 13:19, 13 December 2023
- Korkein hallinto-oikeus (Finland) - KHO:2021:125 (section English Machine Translation of the Decision)Ålandic DPA for a probationary period of one year. Pursuant to section 10(2) of the Act on Public Officials in the Region of Åland, the Government of Åland46 KB (7,394 words) - 14:08, 21 March 2024
- with the rules of Chapter 5 of the Law Enforcement Act, Chapter 3 of the Data Protection Regulation and Chapter 3 of the Data Protection Act. The Directorate35 KB (5,628 words) - 16:38, 6 December 2023
- and publication on the website of the City Municipality. The Spanish DPA asked the municipality of Fuenlabrada to provide copy of the Data Protection Impact24 KB (3,690 words) - 13:39, 13 December 2023
- AEPD (Spain) - PS/00139/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)individual by Article 58(2) of the GPRS, the authority, and as established in articles 47 and 48.1 of the LOPDPGDD, the The Director of the Spanish Data Protection20 KB (3,086 words) - 14:04, 13 December 2023
- 38/2021 - 3/24 2. Facts and subject of the claim 2 1. The complainant is a shareholder of SPRL Bureau X. The complainant holds the vast majority of shares73 KB (11,604 words) - 16:57, 12 December 2023
- Additionally, the Spanish DPA found that the lack of information of provided to clients of the person responsible for the video surveillance system was a violation19 KB (2,965 words) - 13:49, 13 December 2023
- UKUT (AAC) - Leave.EU and Eldon v Information Commissioner (section English Machine Translation of the Decision)matters. whether sending the newsletters fell within the scope of regulation 22 of PECR (Grounds 2, 3 and 4); whether the criteria for issuing a MPN were11 KB (1,457 words) - 16:05, 3 December 2021
- Garante per la protezione dei dati personali (Italy) - 9509558 (section English Machine Translation of the Decision)sent to the National Council of the Order of Journalists. The decision of the DPA is based on the fact that the freedom of the press can restrict the protection24 KB (3,667 words) - 15:53, 6 December 2023
- should, before the applicant was found guilty or the penalty was imposed". 2.3 In the context of the above annulment decision of the Court and in conjunction74 KB (12,375 words) - 10:07, 4 October 2023
- CNPD (Luxembourg) - Délibération n° 18/FR/2022 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)did not recover the debts of the co-ownership. In substantial agreement with the head of the investigation, the DPA considered that the accounting obligations76 KB (11,147 words) - 16:58, 6 December 2023
- breach of Article 32 GDPR. The Luxembourg DPA issued a fine of €5,330 under Article 83(2) GDPR, ordered the Company to cease the processing of the data subject’s55 KB (9,079 words) - 16:57, 6 December 2023
- CNIL (France) - SAN-2019-010 (category Article 21(2) GDPR) (section English Machine Translation of the Decision)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data and on the free movement of such data; Having62 KB (10,001 words) - 17:09, 6 December 2023
- error at the side of the controller, it seemed that the data subject had signed the contract by SMS and had consented to the contract. The DPA determined34 KB (5,358 words) - 13:16, 13 December 2023
- resident of. kitchen and, at the time of the facts that are the subject of the claim, she was President of the Community of Owners and that is, taking advantage24 KB (3,631 words) - 13:20, 13 December 2023
- NAIH (Hungary) - NAIH-2020/2204/8 (category Article 24(2) GDPR) (section English Machine Translation of the Decision)of the law of the (c) infringed Article 12 (4) of the Regulation. 2. The Authority shall establish the 25 May and 2018 of the Debtor the illegality of60 KB (9,820 words) - 10:08, 17 November 2023
- with article 65 of the LOPDGDD, the claim filed by the claimant was admitted for processing. FIFTH: On June 2, 2022, the Director of the Spanish Agency22 KB (3,380 words) - 13:02, 13 December 2023
- purposes. The Icelandic DPA launched an investigation regarding the lawfulness of the processing. The Icelandic DPA first highlighted that the use of the blood44 KB (7,044 words) - 08:42, 13 December 2021
- CNIL (France) - SAN-2021-020 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)existence of the violation of Article 32 GDPR, contrary to what SLIMPAY claimed during the procedure. The DPA considered that, given the nature of the personal56 KB (9,069 words) - 17:02, 6 December 2023
- AEPD (Spain) - PS/00214/2022 (category Article 9(2) GDPR) (section English Machine Translation of the Decision)First, The DPA started by acknowledging that 'Thomas' was the controller for the processing regarding the second survey. The DPA stated that the company131 KB (20,916 words) - 12:38, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 310/161/23 (section English Machine Translation of the Decision)to comply with an order of the DPA, the DPA imposed an administrative fine of €440,000 on the controller pursuant to Article 58(2)(i) GDPR. Share your comments71 KB (11,552 words) - 13:40, 12 January 2024
- function; " Article 37.3 and 4 of the RGPD indicates on the designation of the DPD “When the responsible or the person in charge of the treatment is an authority13 KB (2,002 words) - 14:29, 13 December 2023
- substance of the case is undisputed to the extent that the parties unanimously described the facts of the case and the clarification of the question relevant19 KB (2,936 words) - 13:55, 12 May 2023
- Court of Appeal of Brussels - 2022/AR/560 & 2022/AR/564 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)publication of the press release. It was only competent to rule on the decisions of the DPA. Insofar that the parties invoked Article 54(2) GDPR, the Court stated206 KB (30,485 words) - 09:54, 14 December 2023
- paragraph 1 f) of article 57, both of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons23 KB (3,523 words) - 14:46, 13 December 2023
- and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and the free circulation of these17 KB (2,571 words) - 14:51, 13 December 2023
- where the personal data of the claimant, as well as, the data of the Real Estate and where the management is agreed, for part of the Real Estate of the purchase22 KB (3,385 words) - 13:35, 13 December 2023
- treatment. The IMY decides on the basis of Articles 58 (2) and 83 of the Data Protection Ordinance and Chapter 6. § 2 of the Data Protection Act that the regional43 KB (4,600 words) - 17:08, 23 March 2022