Search results

provide more detailed and specific information on an ex-post basis, compared to the often more generic ex-ante information under Articles 13 and 14 GDPR. In

Article 4(2) GDPR. In the context of Articles 13(2)(f) and 14(2)(g) GDPR, Mester comes to the same conclusion in Taeger,Gabel, DSGVO-BDSG-TTDSG, 4th edition

of the Italian Republic (see, Articles 142 and 156(3)(a) of the Codice). On 4 April 2019 the DPA adopted two different administrative regulations. The Regolamento

law; approval of processing for a substantial public interest pursuant to § 7(4) of the Data Protection Act and more. The Public Administration Act (in DK)

Finance. The funding for 2024 is €4,900,000. Historical numbers (based on the annual reports): 2022: €4,450,000 2021: €4,351,000 2020: €3,700,000 2019: €3

for public information, (3) the Sector for protection of personal data, and (4) the administrative-technical service. Opinions are signed by the Information

(like the correspondence with the controller) need to be attached. Under § 24(4) DSG complaints need to be filed one year from the time the complainant has

months period, regarding its complaint - whatever the means-. The CNIL can run ex officio procedures out of its own motion. Its powers are described under Article

12/2021 4/2020 23/2022 11/2021 3/2020 22/2022 10/2021 2/2020 21/2022 9/2021 1/2020 20/2022 8/2021 19/2022 7/2021 18/2022 6/2021 17/2022 5/2021 16/2022 4/2021

is not absolutely bound by any retained EU case law: EUWA s.6(4)(ba) and Regulations 1 and 4. It can depart from that law; but the test to be applied in

Supervision & Investigations; Technology Leadership; Prior Consultation, (4) Communications, Information & Assessment Unit and Corporate Affairs and (5)

You can help us by filling in this section! Maltese DPA can decide to open ex officio procedure but if a complaint was already filed, a right to be heard

CNPD 2021 Annual Report (in Portuguese): https://www.cnpd.pt/media/meuizrj4/relato-rio-atividades-cnpd-2021.pdf CNPD 2019/2020 Annual Report Summary https://dre

contested to the director 20 14 11 14 Decisions appealed to the court 12 9 4 6

complaint or excessive complaints from one complainant the BfDI is under § 14 (4)(2) BDSG allowed to charge a fee for complaints or can reject the complaint

Complaints can be filed in writing, electronically and via fax. LDI can run ex officio procedures out of its own motion. Cases were so far triggered by media

contains a similar ex officio duty of investigation for the European Data Protection Supervisor (EDPS). Example: A SA initiates an ex officio investigation

issues. In practice, the Board conducts consultations ex ante, by hosting workshops and ‘fablabs,’ and ex post, by providing stakeholders the opportunity to

it is argued that it appears more as an ex post obligation of a monitoring body than a criterion for the ex ante accreditation process. Article 41(5)

inconsistencies between information provided ex-ante under Article 13 and 14 GDPR and information provided ex-post under Article 15 GDPR. Article 12(1) highlights

superior, up to 4 % of the undertaking’s total worldwide annual turnover, is determined taking into account the type of violation (Article 83(4)(5) GDPR) as

decisions from third-country courts and administrative authorities in the EU. An ex-territorial judicial order to transfer or disclose personal data outside of

Regulation 2016/679’, 4 May 2020 (Version 1.1), pp. 7-8 (available here). EDPB, ‘Guidelines 05/2020 on consent under Regulation 2016/679’, 4 May 2020 (Version

'Guidelines 4/2019 on Article 25 Data Protection by Design and by Default', 20 October 2020 (Version 2.0), pp. 8-9 (available here). EDPB, 'Guidelines 4/2019

Information exchanged shall be used only for the purpose for which it was requested. 4. The requested supervisory authority shall not refuse to comply with the request

right to the protection of personal data pursuant to this Regulation. Recital 4: Balance Against Other Fundamental Rights The processing of personal data should

“including profiling based on those provisions.” Profiling is defined in Article 4(4) GDPR as a form of automated processing consisting of the use of personal

courts of the Member State where the supervisory authority is established. 4.   Where proceedings are brought against a decision of a supervisory authority

available to the data subject. Unlike other provisions such as Article 30(4) for the record of processing or Article 40(11) for the register of approved

in accordance with the examination procedure referred to in Article 93(2). 4. The Commission shall, on an ongoing basis, monitor developments in third countries

'necessity' (such as food or clothing) at any age (Ryder v Wombell [1868] LR 4 Ex Ch 32 D 165). Furthermore, minors will be deemed as bound to that contract

137), in the context of the powers provided for in articles, 4 par. 3 para. a' and 10 par. 4 of Regulation of the Authority's Operation (Government Gazette

with the Nos. Nos.C/EX/4278-6/07.11.2019 (following the C/EX/4278-4/01.11.2019 document) and C/EX/4278-7/07.11.2019 (following the W/EX/4278-5/01.11.2019

documents C/EX/1342-2/10-04-2019 (for the complaints under (b) and (c)), C/EX/2332-1/14-05-2019 (for the complaint under (b) and (c)) and C/EX/2332-1/14-05-2019

HELLENIC REPUBLIC OF DATA PROTECTION Athens, 29-06-2020 No, for example: C/EX/4512/29-06-2020 FA IN NO 18/2020 (Department) The Personal Data Protection

examination of this complaint, the Authority sent the complainant the number one.C/EX/3409-1/07-06-2019 document requesting his views on the complainants, taking

adopt the following measures. 4(c) and 8 of Law No. 4624/19 in conjunction with Art. 2 f GDPR, the power to issue 4 an ex officio interim order for immediate

version ex tunc. This implies that IAB Europe commits itself to nullity of the Inspectorate's report on the basis of the language legislation. 4. The GBA

examination of this complaint, the Authority sent the complainant the number one. C/EX/4904-1/09-08-2019 document, in which he asked for his views on the complainants

et aux libertés, so-called law "Informatique et Libertés". Directive 95/46/ex was implemented by the law n° 2004-801 du 6 août 2004 which modified the law

discharged as the title of his ex-spouse. He adds that the invoices issued by the respondent contain his details, but addressed to your ex-spouse. And, among other

the plaintiff and herself in the context of their relationship as ex-employee to ex-employee employer. 18. He also accuses it of violating the principles

AMPNI and EV HELLAS with the reference numbers C /EX / 8303 / 18-10-2018, C /EX / 8302 / 18-10-2018 and GI EX I 8301 / 18-10-2018 her documents, respectively

website controller qualifies as controller (Article 4(7) GDPR) and Google LLC as processor (Article 4(8) GDPR) for data processing in connection with Google

DPA denied a complaint regarding an e-mail sent from a businessman to his ex-wife, with a copy to the counselor of the school where their son studies,

the rights of data subjects by data subjects terminate the ex officio extended procedure for 4. The Authority finds that it has exceeded the administrative

Sections 3, 4, 6, 11, 12, 13, 16, 17, 21, 23-24. Section 4 (5), Section 5 (3) to (5), (7) and (8), Section 13 (2) § 23, § 25, 25 / G. § (3), (4) and (6),

Gazette A΄ 137), in the context of the powers provided for in articles 4 par. 3 and 10 par. 4 of the Regulation of Operation of the Authority (Government Gazette

example: As the claimant had not chosen to make her contact details ex-directory, the ex-partner could have easily searched the phone book to locate the claimant’s

therefore it cannot be considered a procedure initiated ex officio. Other offices they do not initiate ex officio proceedings upon request or based on a report

controller. Following these, the Authority with the no. prot. C/EX/ 861/05.04.22 and C/EX/860/05.04.22 calls respectively called EDOEAP and EDYTE SA. to

contacted the data subject's ex-wife regarding the matter. However, in the controller's communications to the data subject's ex-wife, the controller shared

organizational measures, since their appropriateness must be assessed ex ante and not ex post. In addition, the data retrieved through scraping - insofar as

examining the details of the file, the Authority with no. prot. C/EX/2999/23-11-2022 and C/EX/3004/23-11-2022 documents invited the aforementioned companies

Art. 4 No. 7 and 8 of the GDPR) as well as the certification body in the case of Art. 4(b) and the supervisory authority in the case of Art. 4(c) are

insured person (your ex-partner) and that, however, the loan discounts have been maintained. The claimant states that the brother of her ex-partner works in

telephone numbers… and…, respectively, the reference numbers G / EX / 5585- 1 / 18-08-2020 and G / EX / 5585-2 / 18-08-2020 documents respectively, requesting

residence addresses of the winners of the prize game on its website. Acting ex officio, the Croatian DPA requested a statement from the controller on the

resolved, without any response also. The Authority with the no. prot. G / EX / 6076-1 / 03-10-2019 document informed her CAREER for the complaint and asked

violate the law on personal data protection. The proceedings were initiated ex officio after the Ombudsman submitted a letter to the President of the UODO

respond even after the relevant reminder documents with no. prot. C/EX/276/12-01-2018 and C/EX/275/12-01-2018 respectively. Subsequently, the Authority sent

light of previous interactions with the controller, the NAIH initiated an ex officio proceeding to examine, amongst other things, the "data management

seeking a judicial remedy.’; 4. In accordance with the provisions of Article 58 (2) of the GDPR in conjunction with Article 15 (4) et seq. of Law Ν.4624/2019

subject are closely linked to data protection principles, the DPA concluded ex officio that the controller violated the principle of accuracy under Article

THE LAW 1. Because Article 2 para. 8 of Law 3051/2002 on 'Constitutionally 4 independent authorities, amendment and supplementation of the system recruitment

and the facts that are the subject of the complaint, the AEPD will proceed ex officio to open a new procedure Share your comments here! Share blogs or news

to the Covid-19 emergency. The Council of State requested, pursuant to art. 4 of Decree-Law no. 28/2020, the opinion of the DPA on a draft presidential decree

information on the action taken on his application. I. 3. Instructs the Applicant ex officio to review, within 15 days of the finalization of this decision, with

to exercise his rights,1 See point 2.1, page 14 to 15 Page 4 Decision on the merits 15/2021 - 4/32subsequent correspondence with the defendant, and the privacy

consent of the pupils' parents (legal guardians). According to Article 4(11) TYPE 4(11), 'the data subject's consent' shall mean the freely given, specific

court explains below why it comes to that conclusion. 4 The assessment of the appeal Jurisdiction 4.1 Because the request has an international character

defining the roles of the external companies involved in the processing, (4) without defining the storage times of the data collected and (5) without having

of Article 4(1) of the GDPR and additional information specifically defined in paragraph 2. Since the concept of personal data under Art 4(1) DPA is multifaceted

customer for this matters in point 4.3 and [6] can give individual consent, that X are forms r PAGE □1- □□□□ 1823325- □□□ 4-□□ 4□-□ 2- □1-� L _J,Court of Appeal

turnover of the last three financial years. These amounts: for 2017: €4,058,643,958 for 2018: €4,009,935,363 for 2019: €3,886,699,793 15. On 3 April 2020, the

without her consent, there was no reason. In response to the above document4 of DEWA X, the above Autonomous Directorate with no. prot. ... document pointed

against her ex partner as well as to having had an abortion. She was unaware that the phone call was recorded and later on forwarded to the ex partner and

ignored the decision of the supervisory authority, the DPA decided to initiate ex officio proceedings for imposing an administrative fine. The DPA found that

01-00002223628-0003-0011-01-01-� L _JCourt of appeal Brussels-2021/AR/282-p. 4 prior procedure was insufficiently informed about the exact allegations and/or

The Croatian DPA fined a car dealership approximately €4,000 for processing of personal data by a video surveillance system without prior notice. The Croatian

facts exposed. "I do not understand why the Complaint has been received at my ex-partner's house, NO I understand the reason for the Complaint, because the

Hague October 4, 2022, ECLI:NL:GHDHA:2022:2100, para. 3.1-3.13. 4 Conclusion 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 Exhibit 4 to the introductory

review and increasing the frequency of logging review. 3.4 OLVG's other views and the AP's response 3.4.1 Rights of the defence OLVG argued that the imposition

diseases, drug sensitivity or test finding (page 4). It is also recorded by the dentist study findings (page 4), records of those involved in pregnancy care

article 32 of the GDPR is typified in article 83.4.a) of the aforementioned GDPR in the following terms: "4. Violations of the following provisions will be

decisions dealing the question of whether the Article 15 activates in advance any "ex-ante right" of the data-subject to access his or her personal data and/or

in Decree-Law n.º 54/2019, of April 18, which reads, in n.º 4 of article 4.º, Following: "4- The responses to the 2021 Census questionnaires are kept by

amended) (hereinafter referred to as "Regulation 2016/679"), having conducted ex officio administrative proceedings on imposing an administrative fine on Smart

Police was responsible for a violation of Article 32 par.1(b) & (d) and par.(4) GDPR, as a result of the acts and/or omissions of the Police, whose member

empowers the board management of the DPA to issue a referral in order to open an ex officio investigation (Article 63(1) of the Law establishing the Belgian DPA)

Protection Regulation) (OJ EU L 119, 04.05.2016, p. 1, as amended), following an ex officio procedure initiated in the case of Vis Consulting Sp. z o.o. in liquidation

complained mada, by letter dated 12/11/20, made allegations to the initiation of ex- petitioner, whose content was already indicated in the resolution proposal

lawsuit for 3b (under 3b.) are already inadmissible. Claim 4 is admissible, but unfounded (under 4). Claim 5 is already inadmissible, but in any case also

initiated the disciplinary procedure ex officio (Article 63.1 LPCAP: ”The procedures of a sanctioning nature will begin always ex officio by agreement of the competent

rights. [4] The order is issued pursuant to Article 58 (2) of the Data Protection Regulation. 2nd The deadline for complying with the injunction is 4 weeks

000 HUF, ie seven hundred thousand HUF order to pay a data protection fine; 4. order the final decision of the Applicant and the Applicant's identification

2.) (hereinafter referred to as "Regulation 2016/679"), having conducted ex officio administrative proceedings concerning the imposition of an administrative

business user. Is not a kind as to barred the duty to notify the DPA office, an ex-post evaluation that drives to findings which did not constitute a breach

of article 65.4 of the LOPDGDD Law, by this Agency, said claim was transferred C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 4/60 to the claimed

processed in all its phases ex officio. II The image is a personal data The physical image of a person, according to article 4.1 of the GDPR, is data personnel

ROOM - GOYA 14 (MADRID) Phone: 914007258 Email: Team/User: MAD NIG: 28079 24 4 2022 0000131 1 JURISPRUDENCE Model: ANS105 JUDGMENT CCO COLLECTIVE CONFLICTS

compliance with the exercise of a proper local news right. It added that (4) the photograph was not a mug shot and did not show the data subject in any

as "Regulation 2016/679"), following an administrative procedure initiated ex officio to impose on Ms A. T. conducting business activity under the name

understood broadly (Hödl in Knyrim, DatKomm Art 4 DSGVO Rz 9; Eßer in Eßer/Kramer/von Lewinski, DSGVO-BDSG6 Art 4 DSGVO Rz 7). [16] 2.1 Therefore, even inner

refer to the Greek original for more details. Summary The Authority examined ex officio the compliance of the Ministry of Education and Religious Affairs

within a period of four weeks. Legal basis: Art. 4 Z 1, Z 2 and Z 11, Art. 6 Para. 1 lit. c, Art. 7 Para. 4, Art. 9, Art. 51 Para. 1, Art. 57 Para. f, Art

identification data of the parties be published directly. 3Ibid. Decision 57/2022 - 4/4 12. In accordance with its dismissal policy, the Disputes Chamber will refer

the legitimate aim pursued. 4. Where processing for a purpose other than that for which the personal data have been collected 4. Where processing for a purpose

which the personal data are intended and the legal basis of the processing; 4.5.2016 L 119/40 Official Journal of the European Union EN (d) where the processing

Article 4, introductory paragraph, and (17) of the AVG, in the EU during the period from 25 May 2018 to the present. The breach continues today. 4. Penalty

examination of the elements of the file, the Authority with no. prot.G/EX/3007/23-11-2022 and G/EX/3005/23-11-2022 documents invited the above-mentioned companies

Directive 01/2011 and Law 4624/2019, as well as the GDPR. According to Article 9(4) of Directive 01/2011, the transmission to third parties of data originating

initiative. 4. The Authority obliges the Data Controller to pay a data protection fine of HUF 1000000, ie HUF 1 million. The fine pursuant to point 4 shall be

this way across. However, on 4 February 2020, the database was no longer available in this way. The Authority's NAIH / 2020/66/4. By order no., he called for

amended) (hereinafter referred to as the "Regulation 2016/679"), after conducting ex officio administrative proceedings to impose an administrative fine on East

after consent was withdrawn. Following several compaints, the DPA launched an "ex officio" investigation. The controller (Client 1, Pitagorasz Oktatási Stúdió

Article 12(3) GDPR (the controller failed to answer within a month), Article 12(4) GDPR (The controller failed to provide a reason why it did not comply with

the context of the investigation of the complainants, sent the no. prot. G / EX / 2241 / 24.3.20 document for providing clarifications regarding the complaint

with article 4.1 of the RGPD, is data personal protection and their protection, therefore, is the object of said Regulation. In article 4.2 of the RGPD

Disputes Chamber. Decision 42/2022 - 4/5 therefore to be regarded as manifestly unfounded within the meaning of Article 57.4 of the GDPR. 12. Finally, and in

hereinafter referred to as: The Authority has taken the following decision in an ex officio data protection authority proceeding against the Notifier (hereinafter

Although it did to respond to the claims of the claimant, who did not mention ex- The name of the Mayor was expressly displayed on the B.B.B. website, and

olo_4EP_2018_2019_castellano.pdf/fe4a6b07- 50eb-12e9-88b6-ee2671d9156c, 16 pages, on file. It is included in the file with the name "EVALUATION 4 EP" You

October 30, FJ 4), such as the right to honor, expressly cited in the art. 18.4 CE, and likewise, in a very broad expression of art. 18.4 CE, al full exercise

of the text in the form and on 4 February 2020 the change of the text of the form, which was harmonized with the NIJZ on 4 February 2021 was also corrected

for that purpose. 4 1° to close a complaint; 2° to order the dismissal of a complaint; 3° to order the suspension of the judgment; 4° to propose a settlement;

Guarantor for the protection of personal data, approved with resolution no. 98 of 4/4/2019, published in the Official Gazette no. 106 of 8/5/2019 and in www.gpdp

right of access (Article 12(4) GDPR). The DPA held that data concerning the vehicle of the complainant is personal data (Article 4(1) GDPR), since the data

provided for by Union law or the law of a Member State"... 4. Furthermore, according to article 4 par. 4 of Law 3758/2009 on Information Companies Debtors "Before

REPUBLIC OF CROATIA PROTECTION AGENCY PERSONAL DATA CLASS: NUMBER: Zagreb, July 4, 2022. Personal Data Protection Agency (OIB: 28454963989) on the basis of Article

accordance with Article 133, paragraph 4, B-VG. This statement needs to be briefly justified. According to Article 133 Paragraph 4 B-VG, the appeal is not permitted

the handling the complaint. Decision 140/2022 - 3/6 II.1. Correction of data 4. The Disputes Chamber is of the opinion that the requests of the complainant

2.4.5. Even if it used [applicant]'s data for this (which, according to T-Mobile, is plausible if [applicant] used T-Mobile's 4G network with a 4G device

mentioned in Article 100 of the LCA. 5 4 Section 3, Subsection 2 of the ACL (articles 94 to 97 inclusive). 5 4 Art. 100. § 1. The litigation chamber has

end users C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es Page 4 4/5 of electronic communications services will have the following rights: (…)

statements by his ex-partner and objective observations by police officers, that it includes alleged domestic violence and that the report by the ex-partner partner

June 23, 2023 of the 4 https://www.gegevensbeschermingsautoriteit.be/publications/aanadvies-nr.-01-2020.pdf Decision 157/2023 — 4/7 defendant to the request

hospital from 1991 to 2018. 2.2. The ex-partner of [plaintiff], Mr. [name of ex-partner] (hereinafter: [name of ex-partner]), has a book under the pseudonym

original for more details. Übersetzungstypen Textübersetzung Ausgangstext 4.951 / 5.000 Übersetzungsergebnisse 1 REPUBLIC OF CROATIA PROTECTION AGENCY

authority, the company provided additional explanations, after which the DPA ex officio initiated administrative proceedings. The DPA found that the controller

2016/679 (General Data Protection Regulation, hereinafter: GDPR), OJ No. L 119 of 4 May 2016 p. 1 as amended, in conjunction with Section 2b Z 12, Section 2d para

information obligation towards natural persons who were not informed by email? 4) Is the information obligation impossible or disproportionate pursuant to Art

art. 58 sec. 2 lit. i) in connection with Art. 83 sec. 1 and 2, art. 83 sec. 4 lit. a) and art. 83 sec. 5 lit. e) Regulation of the European Parliament and

opportunity until May 7, 2021 at the latest to to make the right decision. 4 The request 4.1. The [applicant] requests the court to order by provisionally enforceable

jurisdiction in this case. The court will therefore decide accordingly. 4. The decision The court 4.1. declares that the Dutch court has no jurisdiction to take cognizance

to process these data. Article 29 of the Croatian Labour Act and Article 5(4) of the Labour Law Rulebook (Official Gazette, no. 73/17) refer, among others

12(1) GDPR. The Dutch DPA (Autoriteit Persoonsgegevens, 'AP'), launched an ex officio investigation into the processing of personal data by TikTok Inc (TikTok)

einlaufstelle@bvwg.gv.at www.bvwg.gv.at DECISIONS D A T U M 2 9 . 0 4 . 2 0 2 2 BUSINESS NUMBER W 2 5 8 2 2 4 7 0 2 8 - 1 / 1 1 E I M N A M E N D E R E P U B L I K 

Constitutional Court (STC 292/2000, November 30) BOE no. 4 of January 4, 2001) has declared that art. 18.4 CE contains, in the terms of the STC 254/1993, an institute

on Protection data within 8 days from the date of receipt of this decision. 4. A deadline of 8 days from the day of receipt of this is set for company X

of the complainant's ex-husband - especially considering the testimonies in question were given by members of the complainant's ex-husband's family. The

on a first link, which took him to a second, to a third and finally to a 4th (4-step procedure). Once clicked on the last “Registration” link, the candidate

that his ex-wife received work call records containing personal data about him. Is the dissemination of personal data to the data subject's ex-wife, without

that his ex-wife received work call records containing personal data about him. Is the dissemination of personal data to the data subject's ex-wife, without

used a form provided by the relevant authority for this purpose. Under point 4.4. of the form and the heading "I consider this response to be defective and

of the name belongs to this personal data. 5.4.4. The GBA rightly states that in accordance with Article 4.1) of the GDPR "personal data" "all information

Protection of C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 4/18 Data, for the purpose that said faculties become part, total or partially

PS/00618/2021(EXP202103039) RESOLUTION OF PUNISHMENT PROCEDURE Of the actions carried out ex officio by the Spanish Agency for the Protection of Data before the entity

Section 4 (1) GDPR declares that the GDPR is applicable in addition to the GDPR, without referring to the exceptions in Article 2 (2), (3) and (4) of the

corridors on the balconies of the three floors, the exterior courtyard area of the 4ου floor, and the school auditorium. Access 1 https://edpb.europa.eu/our-wo

with reality. Then the Authority with the no. prot. G / EX / 567 / 4.2.21 and G / EX / 568 / 4.2.21 respectively called G. Lampadakis, his attorney complainant

appeared in the FIJ. Year 2016: 4,624,312; year 2017: 4,879,391; year 2018: 4,940,225; year 2019: 4,657,196; year 2020: 4,183,445; year 2021: 3,826,436.

13, 23 and 26 of Legislative Decree no. 186 of 2003 and 7.4 of Regulation (EU) 2016/679 of 4European Parliament and of the Council, in terms of modalities

process. xi.- In addition, and in accordance with the provisions of article 4, no. 3 of Decree-Law no. 207/2005, of 29 November, the data obtained through

Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 4/8 The image of a person, in accordance with article 4.1 of the RGPD, is personal data. make it identifiable

Local of the Fuenlabrada City Council, since according to Organic Law 4/1997, of 4 of August, which regulates the use of video cameras by the Forces and

RKG ex officio if the change to the entry was due to the reconciliation of data with the records of entities or other data collections ex officio.4 See

personal data without his consent. The employer stated that according Section 6(4) Act I of 2012 on the Labor Code the complainant had a duty to inform the employer

Kühling/Buchner, DS-GVO/BDSG, 2nd ed., Art. 4 DS-GVO marginal 8; Ernst, in: Paal/Pauly, DS-GVO/BDSG, 2nd ed., Art. 4 marginal 14). 39 b) However, it is not

Subject: Complaint relating to the sending of an email by the ex-employer of the complainants to the ex-colleagues of these, specifying the nature of their dismissal

initiated by the Complainant's complaint, the President of UODO initiated ex officio against the Entrepreneur - based on Article 83(5)(e) of Regulation

(hereinafter the "Law") and the newspaper was summoned, as it submits, no later than 4 weeks from the date of the letter, its positions / opinions, as far as concerns

personal data within the meaning of Art 4 Z 1 DSGVO. 3.2.4 The complainant's arguments cannot alter this assessment: 3.2.4.1 The complainant's argument according

sharing unredacted copies of their assessment report to a mother and her two ex-partners, each the father of one of the two children mentioned in the report

right of access under Article 15(4) of the GDPR or section 22 of the DDPA can be invoked. It follows from Article 15 (4), that the right to obtain a copy

12(3) and (4) GDPR. Therefore, the Belgian DPA found the controller to have breached Article 15 GDPR in conjunction with Article 12(3) and (4) GDPR, and

alternatively of article i), both of Law O.4/2010, punished with the sanction of suspension of functions of one day 4 days, ex article 10.3 of the aforementioned

Garante for the protection of personal data, approved by resolution No. 98 of 4/4/2019, published in G.U. No. 106 of 8/5/2019 and at www.gpdp.it, web doc. No

Protection Regulation. 4. Importer's data management practices related to customer satisfaction measurement In this regard, the Authority ex officio examined

period of time. 3.4. In so far as relevant, the arguments of the parties will be discussed in more detail below. 4 The assessment 4.1. The urgent interest

der elektronischen Medien, 4th ed. 2019, marginal no. 11; Plath/Becker, DSGVO/BDSG, 3rd ed. 2018, Art. 82 DS-GVO marginal no. 4; Wybutil, NJW 2019, 3265

from the data protection authority by telephone in order to ask whether the ex lege guaranteed data protection in Austria would only apply once a breach

2 of 04/01/2018, with identical data 3.- *** INVOICE. 4, from 01/05/2018, with identical data 4.- *** INVOICE. 3, from 06/01/2018, with identical data

an invoice to be paid to plaintiff’s name by his ex-employer (V), for a supplementary pension that the ex- employer paid for the plaintiff when the latter

following FACTS FIRST: Mr. A.A.A. (* hereinafter, the claimant) dated October 4, 2019 filed a claim with the Spanish Data Protection Agency. The The claim

Chamber of Pharmacists or to pharmacists is covered by Paragraph 80(3)(4) or (4)(1) of the AMG. Since the complainant had, however, only expressed an assumption

costs of the proceedings and the follow-up costs. 4 The grounds of the decision on appeal Core of the case 4.1 Briefly summarised, the case at hand is as follows

decided to initiate the ex officio official procedure. Despite this, the Company's statements in the official procedure initiated ex officio were incomplete

defined in this Act, in particular at the request of the data subject and ex officio data protection conduct an official procedure. Infotv. Pursuant to

Authority from 16 December 2021 in case no. 2020010635. According to number 4. Paragraph 4 Article 17 Act no. 90/2018, it is thus permitted to limit the educational

Swedish Administrative law. This also applies if the DPA opened a parallel ex officio investigation into a similar matter and the same company. An Austrian

pursuant to Article 4(2) of the GDPR, and the applicant operating and managing the Facebook page is a controller pursuant to Article 4(7) of the GDPR, given

decision. II.1.) In its decision, the Authority ex officio states that a) the Respondent from paragraphs (3) and (4) of Article 12 of the General Data Protection

processing of the claims that are made before the AEPD, provided for in article 65.4 of the Law Organic 3/2018, of December 5, Protection of Personal Data and guarantee

structure of 7 faculties, 2 schools, 4 research institutes, 27 departments, 33 services and administrative Units, and 4 management centres, and the data subject

view no longer relevant. They concerned information on data subject 1, her ex-partner and the children they have together. They argued that this was separate

arguments of the parties are discussed in more detail below. 4 The assessment Assessment framework 4.1. Personal data of [claimant] were processed during the

Service. 4.6. According to paragraph 26 of Directive 5/2020, "Article 7 of the General Data Protection Regulation paragraph (4) of Article 4 states, among

case no. 2.1.-4/20/1662 Challenge submitted by MustamäeApteek OÜ e-mail address: jyrgen.janese@apotheker.ee I RESOLUTION Pursuant to clause 85 4) of the Administrative

applied for a new job, the recruitment agency contacted the ex-employer to ask for references. The ex-employer provided negative references. This resulted in

number C / EX / 1806 / 09-03-2020 its document for 18-03-2020 and after the postponement of the meeting, for 15- 07-2020, with its document no. G / EX / 4486

accordance with Article 133, Paragraph 4, B-VG.The revision is permitted in accordance with Article 133, Paragraph 4, B-VG. text Reasons for the decision:

more details. decision date 06/12/2023 standard B-VG Art133 Para.4 DSG §24 paragraph 4 GDPR Art58 GDPR Art77 B-VG Art. 133 today B-VG Art. 133 valid from

repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.05.2016, p. 1 and OJ L 127, 23.05.2018, p. 2), following an administrative

taken into account with increased weight - Requested ex officio in a warning favors I.4. The Authority ex officio orders this decision with the Applicant's

Camera system No. 1 (consisting of 4 analogue cameras only providing live image) and Camera system No. 2 (consisting of 4 IP cameras recording image and audio)

data subject’s request, stating that its role is limited to ex-post control. The DPA held that ex-ante control would lead to the DPA taking the place of the

data and signs it. § 10. Apart from the provisions of paragraphs (2)-(4) of § 4, the responsible person: a) informs the pregnant woman against the other

data and e-mail address rejects. III. The Authority shall issue the Debtor ex officio due to its unlawful data processing HUF 300,000, ie a three hundred

without legal basis personal information in your online directory. 4. The Authority will ex officio condemn the Applicant for failing to facilitate a Deletion

last one is decisive.” Article 4, paragraphs 21 to 23 of the GDPR read:Article 4, paragraphs 21 to 23 of the GDPR read: “Art. 4 GDPR Definitions 21. “supervisory

replacement (cf. VwGH December 14, 2021, Ro 2020/04/0032). 7 4.4. Re points 2 and 3 of the decision: 4.4.1. In accordance with Art. 78 Para. 1 and 3 GDPR in conjunction

is reasonably permitted expect processing to take place for that purpose ”.4 4 Recital 47 GDPR. Decision on the merits 03/2021 - 9/11 25. This is also emphasized

[applicant] are discussed in more detail below, insofar as relevant. 4 The assessment 4.1. In this case, in the first place - briefly - it concerns the question

PS/00030/2022 (EXP202104460) RESOLUTION SANCTION PROCEDURE Of the actions carried out ex officio by the Spanish Agency for the Protection of Data before the entity

tini, in: Paal / Pauly, DS-GVO BDSG, 3rd edition 2021, Art. 32 DSGVO Rn. 4a-4d. 7 Hornung, ZD 2011, 51, 52. - 3 - The Hamburg representative for Data protection

00. Ex officio judgement 6. The District Court did not acknowledge that with the introduction of Title 8.4 in the Awb on the basis of Article 8:4, paragraph

process. 4. The actual and established facts of the commission of an administrative violation during the case review statement of circumstances: 4.1. The

protectionArticle 5 (1) (a), Article 5 (2), Article 12 (1) and (4) ofArticle 14, Article 15 and Article 21 (4).1.3. The Authority condemns the Applicant for unlawful

Municipal Personal Records Database. to ask. 4 . The assessment in the incident Name and address details 4.1. [defendant01] has formulated two claims in

temporary staff, at the Single Resolution Board (SRB) on 1 November 2017. On 4 September 2019, he resigned with effect from 30 September 2019. The applicant’s

its observations, which, in accordance with Article 54(1)(b), (3) and (4), (4) and (4), (5) and (5), (5) and (5), (5) and (5), (5) and (6). 2 of the Rules

court rejected the application against Rabobank. 4 4 The assessment of the dispute Introductory remarks 4.1 [petitioners] et al. Have eight grounds of appeal

of the entity - infringes Article 32. 2 and 32.4 of the RGPD, an infringement punishable under Article 83.4.a of the GDPR. Assessing the circumstances modifying

https://bp18.hu "ADATKEZELESI_TAJEKOZTATO_BP18_v4_RF_20201125.pdf" can be downloaded A screenshot of the state of document 4 on May 7, 2021. page (points 2.3 and

Article 4 WOG. 17. First, it is clear that the content of the disputed e-mail messages constitute personal data within the meaning of Article 4.1. AVG.

accordance with article 45.2, 4. b), c) and d) and 45.4 j) of the same Law. - a fine of 50,000 euros for an infraction of article 4.1, classified as serious

numbers 2 to 4 of the previous paragraph 2.2; 3) Articles 5, par. 2, for the reasons described in numbers 2 to 4 of the previous paragraph 2.2; 4) Art. 5,

commercial register number: *4*8*2r, represented by A*** , B*** & Partner Rechtsanwälte, **** Vienna, ****platz 4*/3, carried out ex officio examination proceedings

be considered infringing. 1.4. Based on the above, the Authority considered it justified to initiate an official inspection ex officio in order to verify

systems adaptation works - Lot 4 - Excerpt 4" and "Adjustment works building fire prevention and structures - Lot 4 - Excerpt 4". Therefore, since it is a

about their rights under Article 13 GDPR. The DPA started an investigation ex officio into the processing of health data and whether the controller was

or connection, restriction, deletion or destruction. Based on Article 4, point 4 of the General Data Protection Regulation, "profiling" is personal data

in the interest, which is certainly considered legitimate, not to interrupt ex abruptly the contacts with customers that the [complainant] had contacted

Paragraph 4 of the Administrative Disputes Act, Official Gazette, No. 20/10, 143/12., 152/14., 94/16., 29/17. and 110/21.; hereinafter ZUS). 4. The claim

National Statistical System", Annex A.4 to the Code (hereinafter "Ethical rules") and in particular, Articles 4-bis and 6, paragraph 2, of the same Deontological

complaining company was informed about the complaint with the no. prot.C / EX / 4863-1 / 09-08-2019 document of the Authority with which it was requested

admitted toC / Jorge Juan, 6www.aepd.es28001 - Madridsedeagpd.gob.es Page 4 4/30processing the claim and before the adoption of the initiation agreement

from the AEPD) C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 4/16 - BBVA affects this issue in the second allegation of the information brief

Protection Regulation) Article 6 (1) (d), Article 6 (1), Article 12 (2), (3) and (4), Article 17 (1) and violates the general practice of the Applicant in relation

reason for exclusion applies (4.2) and how a weighing of interests required in the reason for exclusion results (4.2.3). (4.1) Classification problem 143

inter alia, the criteria referred to in Article 6(4)(a) to (e) of the DPO (Article 6(4) DPO). Article 6 (4) of the DPA therefore permits further processing

Guarantor for the protection of personal data, approved by resolution no. 98 of 4/4/2019, published in OJ no. 106 of 8/5/2019, web doc. no. 9107633 (hereinafter

Italian Worker’s Statute, Article 3 of the Italian Worker’s Statute and Article 4 of the Italian Worker’s Statute and Article 113 of the Italian Privacy Code

32(1)(b), Article 32(1)(c) and Article 32(1)(d). d, 32(2), 58(2)(i) and 83(3), 83(4)(a), 83(5)(a) of Regulation 2016/679 of the European Parliament and of the

5(1), first sentence VIG § 1, § 2, § 3, § 4 para. 4, § 5 para. 1, para. 4 p. 1, § 6 para. 1, para. 3, para. 4 Regulation (EU) 2017/625 Art. 8, Art. 11(2)

within the meaning of Section 4f Paragraph 3 Sentence 4 BDSG old version or Section 38 Paragraph 2, Section 6 Paragraph 4 Sentence 1 BDSG in conjunction

provided DFW with any data regarding the IP addresses. 4. The dispute and the decision in first instance 4.1 In the first instance, DFW filed a similar claim

sanction are considered complete, pursuant to art. 58, par. 2, lit. the). 4.4 On the retention times of personal data As described above (see point 6 of

was not given the opportunity to comment. 4. The complainant's mother was a party to the proceedings on the GZ: *4 C *32/22f, at the BG D***. As part of these

L 74 of March 4, 2021, p. 35), hereinafter referred to as "Regulation 2016/679", after conducting administrative proceedings initiated ex officio to impose

authority has ex officio launched an inspection procedure, which it conducts under the op. no. 06110-418/2022, and against the violator, ex officio, he initiated

inspection of the frames taken from the system's viewing monitor, which through 4 cameras facing the outside, it was verified that the entire width of the street

regulations on the protection of of data) (OJ L 119 of 4.05.2016, p. 1, OJ L 127 of 23.05.2018, p. 2 and OJ L 74 of 4.03.2021, p. 35 ), hereinafter referred to as

disputed this and argued that the Civil Code. 6:23. § (4) limitation may not be taken into account ex officio in judicial or administrative proceedings. In

to in Article 22 (1) and (4) and, the importance and the intended consequences of such processing for the data subject '. 4. Because the processing of

measures. In 2019, the Austrian Data Protection Authority (DSB) initiated an ex officio investigation against the controller, following media reports about

January 28, 2021 (EUR 1 = PLN 4.5479) - an administrative fine in the amount of PLN 18,192 ( which is the equivalent of EUR 4,000), according to the average

All contents In all fields Search for a word, an expression, a reference… Ex.: L. 121-1, CGI, 10-15056, fraud, protected adults to research advanced search

15. In vaststellingen 3 en 4 neemt de Inspectiedienst de kwalificatie als verwerkingsverantwoordelijke, in de zin van art. 4, 7) AVG, van de verweerder

LOPD), typified in the Article 44.4.b) of the LOPD (LES). C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 4/14 FIFTH: On May 6, 2019, proceedings

Court of November 24, 2008, reference number II FPS 4 /08, published by ONSAiWSA from 2009, No. 4, item 62). Suspension of the proceedings should also

Protection Regulation. In addition, the General Data Protection Regulation4. Article 4 (4) profiling will also take place as the data generated by the system

consented to receiving such marketing communication. The DPA therefore launched an ex officio investigation on 1 January 2020. The controller claimed that letter

has also been the case here. The applicant has access to legal remedies for ex-post supervision, which, according to Sanoma, have been consistently considered

these databases to convey promotional messages on behalf of its clients. 4.4 Methods of acquiring consent to treatment With regard to the formula for expressing

with NIF B39764691 (hereinafter, the reclaimed). The claimant states that his ex-wife, administrator of the company CEYLLE SOLUTIONS & DEVELOPMENT S.L. of

other authorities according to the above-mentioned § 22b (4) PassG or according to § 22b (4a) PassG, which also provides for such a check, would no longer

terms of content by the MB. 4. From this it follows legally: 4.1. The relevant legal provisions are excerpted as follows: 4.1.1. According to Section 1

proves these allegations, she placed reliance upon Recitals 1, 4 and 7 together of Article 4(11) of GDPR. Whelan J., has stated the evidence indicates that

has violated by Process health data of 25 employees. 4.4 Violation of security of processing 4.4.1 Introduction To ensure security and prevent the processing

the provision of Article 25h(4) of the PDPA according to which "The exercise of the powers of the Commission under Article 58(4) of Regulation (EU) 2016/679

explained that video surveillance is the processing of personal data (Article 4(2) GDPR) and the operator of video surveillance is responsible for complying

affected and the level of damage the elves suffered (article 83.2.4 of the GDPR) 4.1.4. The Data Protection Authority should have taken into account the

complainant also states that after the departure of an ex-colleague, emails were still sent in the name of this ex-employee. 3. On October 16, 2023, the defendant

General Regulation against the taxpayer… (Hereinafter: the liable party), ex officio the following CONCLUSION 1.The procedure of inspection control over

of professional ethics - insofar as there is any processing under Article 4 No. 2 GDPR - is in any case permissible under Article 6(1)(e) GDPR. The parties

her name: 1. … 2 .… 3. … 4. … 5. … 6.… In view of the above, the Authority with the under no. prot. C/EX/608/08-03-2023 and C/EX/604/08-03-2023 documents

not subject to the receipt of a complaint, the DPA can initiate proceedings ex officio on the basis of its own findings. On the alleged violation of the

(alleged) change of controllership under Article 4(7) from Google LLC to Google Ireland Limited does not have an ex tunc effect - Google LLC qualifies as controller

condition of the contract employment, nor even for the special categories. 4.4.3. Page 4 of the Declaration clearly lists the cases concerning the conditions

Juan 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es Page 4 4/124 by D. DDD (hereinafter claimant 4), against BBVA, noting that, under the pretext If you have

Guarantor for the protection of personal data, approved by resolution no. 98 of 4/4/2019, published in the Official Gazette n. 106 of 8/5/2019 and in www.gpdp

amended in OJ L 127 of 23/05/2018, p. 2, and in OJ L 74 of March 4, 2021, page 35), after ex officio administrative proceedings initiated to impose an administrative

defendant 2, 4 Draft law creating the Data Protection Authority, explanatory memorandum, Doc., Ch., 2016-2017, n°2648/001, 5. 13. 6Art. 4 §4 1° of the organic

official data protection proceedings ex officio. The Akr. On the basis of § 103, paragraph (1) of this law in ex officio proceedings its provisions on

L 119 of 4/05/2016, p. 1, as amended), hereinafter referred to as Regulation 2016/679, after conducting administrative proceedings initiated ex officio

shooting range. 3.4. The parties' contentions are discussed in more detail below, to the extent necessary. 4 The assessment Key points. 4.1. In these proceedings

interests or the fundamental rights and freedoms of the data subject. – 4 – 5 Article 4 of the GDPR, headed “Definitions”, reads, in extract: ... (1) ‘personal

to the Hungarian original for more details. Case number: NAIH-1855-4/2022 Subject: ex officio decision History: NAIH-8855/2021 data protection authority

outweigh those interests, in particular when the person concerned is a child”. 1.4. Inclusion in the EVR takes place when the following conditions are met (for

informative to the claimed party, in accordance with the provisions of article 65.4 of Organic Law 3/2018, of December 5, on the protection of personal and legal

23/05/2018, p. 2 and OJ EU L 74 of 4/03/2021, p. 35), following conducting administrative proceedings initiated ex officio regarding the processing of

of Laws UE L 119 of May 4, 2016, p. 1, Journal of Laws UE L 127 of May 23, 2018, p. 2 and EU Official Journal L 74 of March 4, 2021, p. 35), hereinafter

were enough to be considered as processing of personal data under Article 4(2) GDPR, hence making the GDPR applicable. In third place, the DPA recalled

(transparency), 14 (information obligation) and 35 (impact analysis) of GDPR. 4 More specifically, it asserts that the transfer of personal data to the US

78(1) GDPR, Article 25 of the Norwegian Data Protection Act and Article 4-4(4) of the Norwegian Dispute Act (in Norwegian: tvisteloven). 69 10. Right to

Chamber. 4Cf. decisions 64/2020 and 133/2021. 5Cf. decision 46/2020, legal basis. 29 et seq. and decision 133/2021 para. 56 et seq. Decision 135/2023 — 4/9 of

the controller’s appeal. Pursuant to Article 4(11) GDPR, consent must be freely given. In light of Article 7(4) GDPR, this is clearly not the case when the

data. According to point 4.4.5., The legal basis for processing is the consent according to Article 6 (1) (a) GDPR Point 4.4.6. Consent is voluntary and

and Data Protection Commissioner CDP/COMP/583/2022 vs COMPLAINT 1. On the 22"4 December 2022, es brough her legal counsel (the “complainant” or the “data

.................15 4 Review of individual complaints - Reasons for decisions............................................. ..20 4.1 Complaint 1 (from the

invited to "send a communication" by e-mail. 1.4.4. With reference to the disputes referred to in points 4) and 5), in the initiation of the procedure it

Schrems I and II judgements (C-362/14 and C-311/18), the Irish DPA started an ex office procedure into the issue of Meta Platforms Ireland Ltd. (Meta Ireland)

of the joke.C / Jorge Juan, 6www.aepd.es28001 - Madridsedeagpd.gob.es Page 4 4/615. Regarding the issue of spreading the joke, which is present in theclaims

according to Art. 83 Para. 4 GDPRArticle 83, Paragraph 4, GDPR). Pursuant to Article 83 Paragraph 4Article 83, Paragraph 4, GDPR, in the case of the violations

respect the transparency requirement set out in Articles 5(1)(a), 12, 14 and 21(4) GDPR in the future. Regarding the direct marketing messages by the controller

Guarantor for the protection of personal data, approved by resolution no. 98 of 4/4/2019, published in the Official Gazette n. 106 of 8/5/2019 and in www.gpdp

the liable party… (hereinafter referred to as the taxpayer) represented by…, ex officio the following DECISION The taxpayer… must, due to irregularities found

.....4 A. Previous EDPS decisions..............................................................................................................4 B. Facts

no. 1, § 5 (4) p. 1, § 6 (1) p. 1, p. 3, (3) p. 2, (4) p. 2 LFGB § 40 (1a) VwGO § 80a (3), § 146 (4) p. 3, § 152 (1GG) Art. 5 (1) GPDR Art. 4 No. 1, No.

decision-making' pursuant to Article 22 GDPR, but only 'light profiling' under Article 4(4) GDPR. Therefore, the controller claimed that Article 15(1)(h) GDPR did not

the complainant and herself in the context of their relationship as ex-employee to ex-employer. 18. He also accuses it of violating the principles of minimization

S***strasse 2-4/35 2***L*** The leave compartment is to be set up at: N***stelle 2*** F***gasse 7 2***L*** The incoming shipments are ex Picked up 08/20/2018

(General Data Protection Regulation) (Journal Official Journal L 119 of May 4, 2016, p. 1 and Official Journal L 127 of May 23, 2018, p. 2). In the justification

item 1781), as well as Art. 58 sec. 2 lit. i), art. 83 sec. 1-3, art. 83 sec. 4 lit. a) and art. 83 sec. 5 lit. e) in connection with Art. 31 and art. 58 section

the 3Article 6.2 GDPR 4 CJEU, Heinz Huber v. Bundesrepublik Deutschland, 16 December 2008, C 524/06, para. 52 Decision 14/2023 – 4/10 processingofperso

purposes without establishing an appropriate legal basis for the processing. An ex-employee of the controller filed a complaint with the Spanish Data Protection

with Article 83 of the GDPR), came into force only on 25 May 2018 with effect ex nunc , which means that it could be relevant in the present case only if it

ACCORDING TO THE LAW 1. According to article 1 of KYA 4000/4/32-la/2012, as amended valid with the no. 4000/4/32-n/2017 similar, "in the National Catalog of Undesirable

admission procedure with regard to the requirement of presentation (§ 124a (4) sentence 4 and (5) sentence 2 VwGO), do not justify the assumption that the appeal

legal consideration 4.5. in more detail. The insurance dispute between [applicant] and ASR. 4.4. The (amended) requests five and six. 4.4.1. These requests

from the improper or erroneous treatment thereof (Art 4.3). Therefore, the aforementioned article 4.4 of the Regulation for the exercise of the sanctioning

from the improper or erroneous treatment thereof (Art 4.3) .Therefore, the aforementioned article 4.4 of the Regulation for the exercise of the sanctioning

notified by the IT company C-Planet (the controller), the Maltese DPA opened an ex officio investigation into the a personal data breach of approximately 335

December 2019, page 17. 4See File 11, report of 5 December 2019, page 4. 4See File 25, Transavia's answers, date 26 May 2020. 4See File 38, Replies from

subject: "Leakage of data on the tourism4all.gov.gr platform" was communicated to the e-mail address tourism4all@mintour.gr which was created exclusively

and section 2, art. 83 section 4 lit. a) in connection with Art. 33 section 1 and section 3 and art. 34 section 1, 2 and 4 of Regulation 2016/679 of the

agreement in principle between the IP and the taxpayer (e-mail dated 8/4/2021 and 9/4/2021 - doc. no. 0612-23/2019/18) that the taxpayer's relationship to

the limited operating and recording times of camera 2. 4. the orders relating to cameras 3 and 4 to realign them (point 6 of the decision of 23 November

inspection was carried out at the Company between 4 and 6 April 2023. The latter then sent a note on the following 4 May, dissolving the reservations contained

claims 4. and 5. is dismissed in its entirety. 3. The plaintiff has to bear the costs of the appeal and revision proceedings. The plaintiff bears 4/9 and

to Regulation 2016/679 - WP248rev.01, adopted on 4 April 2017, as last amended and adopted on October 4, 2017). 3. The Authority's assessments 3.1. The

discuss whether the termination of the ex officio examination procedure has the quality of a decision at all. [36] 1.4. It was not alleged that the plaintiff

The data processing in question was profiling within the meaning of Article 4(4) of the GDPR. It is understandable for the average person subject to the law

originally collected, subject to Article 6(4) of the GDPR. The definition of these criteria in Article 6(4) of the GDPR is illustrative and the existence

be admissible under the provision of Article 4(4) of ZOIzk-1, thereby violating the provision of Article 4(4) of ZOIzk-1 on eight occasions (i.e. by accessing

The CJEU clarified that a controller, as defined by Article 4(7) GDPR, can be implicitly determined by national law. Implied controllership under national

subject involved the processing of his personal data, as defined in Articles 4(1) and (2) GDPR. Additionally, the DPA stated that the controller transmitted

3.4. Pursuant to Section 24 (1) VwGVG, the administrative court must hold a public oral hearing upon application or, if it deems it necessary, ex officio

(geoporatl.gov.pl), and even with Art. 36 4 sec. 16 of the Land and Mortgage Register Act and Art. 5a sec. 4 of the Geodetic and Cartographic Law Act,

the specific case it did not aim to damage the rights and interests of its ex-client, on the contrary, the message sent is completely harmless and as a

obtained; 3) description of possible consequences of personal data breach; 4) description of measures taken or proposed by the administrator to remedy the

000, ie five hundred thousand forints order to pay a data protection fine; 4. order the disclosure of the final decision by masking (anonymising) the personal

DPA requested the controller to submit its observations on the matter. On 4 February 2022, the controller provided that because the complainant’s request

data processed there. You must also comply with your justification obligation ex art. 5 para. 2 GDPR.’ After the claimant has given the body default, he appealed

submit specific documents, data and information. More specifically in paragraph 4 of the attached file, it was requested as, until the above date, the Statute

partial rejection having taken place. 4. In view of the involvement of the opposing party, the decision will be served ex officio. This does not affect the

IP then explained what constitutes personal data in accordance with Article 4(1) GDPR. In light of the definition contained therein, photographs may be considered

the administrative procedure should be resume. 4 Judgment of the Marktenhof dated 2 September 2020, 9.4. 5 The judgment of the Marktenhof dated September

allocated in the manner stated in the decision. 4 The decision The preliminary relief judge 4.1. rejects the claims, 4.2. orders [claimant] to pay the costs of

personal data as per Article 4(1) GDPR. Equally so, that processing of such information constitutes profiling under Article 4(4) GDPR. Further, the BVwG considered

The Belgian DPA determined that a controller breached Articles 12(3), 12(4) and 17(1) GDPR by not responding an erasure request. The DPA ordered the controller

Chamber, preferably via the address litigationchamber@apd-gba.be. II. Motivation 4. The complaint concerning the lack of response from the defendant following

leads to the C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 4/24 "Cookie policy", verifying that a series of cookies are installed without

Article 62, § 1 WOG transferred to the Disputes Chamber. II. Justification 4. On the basis of the elements in the file that are known to the Disputes Chamber

in particular the necessary and parallel references to specific provisions 4. Article 172.1 of the Telecommunications Law (Journal of Laws of 2014, item

forwarded to the Litigation Chamber pursuant to Article 62, § 1 of the LCA. 4. Pursuant to article 95 § 2, 3° of the LCA as well as article 47 of the rules

to the identified 4 data controllers. After all, the Disputes Chamber has decided to to notify the defendants of dismissal decisions ex officio. See the

personal data, nor did it correlate with the notion of personal data from Art. (4)(1) GDPR on the protection of individuals with regard to the processing of

delivered by regular mail. 4 1° to dismiss a complaint; 2° to order the exclusion of prosecution; 3° order the suspension of the judgment; 4° propose a settlement;

the measures stated in Article 100 of the WOG. 4 3Section 3, Subsection 2 of the WOG (Articles 94 to 97). 4 Article 100. § 1. The Disputes Chamber has the

definition of the concept of personal data Article 4, 1) of the GDPR, as explained in Recital 26 of the GDPR, Opinion 4/2007 of the Decision on the merits 71/2020

the Company has taken note for possible modifications (see minutes of 4 May). 1.4. The use of the so-called “soft spam”. With regard to what is indicated

personal data in accordance with Article 4, number one, GDPR. 3.2.4. The GDPR defines the term processing in Art. 4 Z 2 GDPR by listing a number of possible

trees orientation towards public space (Annex I frames 1-4). SECOND: In accordance with article 65.4 of Organic Law 3/2018, of 5 December, of Protection of

119 of 4.05.2016, p. 1, OJ L 127 of 23.05.2018, p. 2 and OJ L 74 of 4.03.2021, p. 35 ), after carrying out administrative proceedings initiated ex officio

originally concerned a complaint filed by a (soon-to-be-ex) husband, the data subject, against his (soon-to-be-ex) wife. During divorce proceedings the wife had

litigationchamber@apd-gba.be; and 4. in the absence of the timely implementation of the above by the defendant, the case to be dealt with on the merits ex officio in accordance

signatures by providing test data https://alairasgyujtes.online page. I.4. Facts revealed I.4.1. According to the statement of […] Kft., The registration of the

two-month extended deadline, which he said It began on January 4, 2021 and expired on April 4, not exceeded. In this statement, the Applicant further stated

opinions of 335,000 voters has been exposed. The Maltese DPA (IDPC) opened an ex officio investigation, and noyb filed a complaint on behalf of several Maltese

GmbH send an e-mail to: [redacted] mailbox@privacy.de Am Hamburger Bahnhof 4 Fingerprint of our 10557 Berlin PGP-Key: D3C9 AEEA B403 7F96 7EF6 C77F B607

a request for access to his personal data to the minister, the claimant's ex-employer. 2. On February 5, 2019, the claimant filed a complaint with the

September 2022, October 25, 2022, November 4, 2022, November 9, 2022 and January 10, 2023. Decision 109/2023 – 4/6 14. It is the responsibility of the Respondent

Art. 83 sec. 1 and sec. 2, art. 83 sec. 4 lit. a) in connection with Art. 33 paragraph 1 and art. 34 sec. 1, 2 and 4 of Regulation 2016/679 of the European

the controller, to handle the case on the merits ex officio in accordance with Articles 98 et seq. WOG. 4Due to the extraordinary circumstances due to COVID-19

officer (hereinafter: the misdemeanor authority) issues an authorized official ex officio on the basis of the second paragraph of Article 51 and Article 46

It was among the selected municipalities that the Danish DPA had chosen (ex officio) to assess its compliance with the GDPR. The DPA focused on access

date 05/25/2022 standard AVG §38 B-VG Art133 Para.4 DSG §30 GDPR Art83 VwGVG §17 saying W176 2249328-1/4Z DECISION The Federal Administrative Court, through

transmitted to the Litigation Chamber in pursuant to Article 62, § 1 of the LCA. 4. Pursuant to article 95 § 2, 3° of the LCA as well as article 47 of the rules

Central Contentious-Administrative Court No. 4, of 07/22/19 (sent. No. 81/2019, issued in ordinary procedure No. 4/2019). It was confirmed in essential because

responding to the erasure request, the controller breached Articles 12(3), 12(4) and 17(1) GDPR. The DPA added that the controller should have appointed a

information concerning him appearing in the decree of July 8, 2015. 2. Under Article 4 of Regulation (EU) 2016/679 of 27 April 2016, "1)" personal data "means any

data related to traffic accidents. In February 2022, the Polish DPA initiated ex officio proceedings in order to investigate the controller's data processing

the claimant also requests compensation pursuant to Article 82 of the AVG. 4. In the contested Decision II, the defendant indicated that the claimant must

€30. Article 96(1)(1) ZVOP 2 (infringements of the provisions of Article 83(4) GDPR) (1) A fine of between EUR 100 and EUR 5 000 shall be imposed on the

2004, ECLI:NL:HR: 2004:AP0424, ow.3.4.2 and the judgment of the HR of 4 November 2016, ECLI:NL:HR:2016:2495,ow.2.4.1. 2For a comprehensive legal framework

pursuant to art. 62, 1 WOG submitted to the Disputes Chamber. II. Justification 4. On the basis of the elements in the file known to the Disputes Chamber, and

Journal EU L 119 of 4/05/2016, p. 1, Official Journal of the EU L 127 of 23/05/2018, p. 2 and Official Journal of the EU L 74 of 4/03/2021, p. 35. ), after

(SSTC 89/1986, of 1 July, FJ 2; 50/1988, of 22 March, FJ 3; 110/1995, of 4 July, FJ 4; 189/1996, of 25 November, FJ 3; and 221/1998, of 24 November, FJ 3)

registered included payment details and the data subject's power of attorney. On 4 July 2023, the data subject submitted a complaint to the Belgian DPA. The Belgian

the social media activities of the controller, the Estonian DPA started an ex officio investigation. During the proceedings, the controller explained that

by means of an inter partes petition 4 must contain statements listed in Article 1034ter of the Judicial Code. It 4The petition states, under penalty of

assessment (hereinafter: GEB) took place around practice and what the results were. 4. In the answer on behalf of the defendant dated July 14, 2023, the Z replied

due to the correct display of the image (image 1) corrected ex officio according to § 62 para. 4 AVG. The present appeal by the complainant is directed against

of EUR 4 170,00,  for the offence of unlawful processing of personal data ... under point II.2.) of this judgment: GLOBA in the amount of EUR 4 170,00

00; iv. by Article 37(1) and (7) of the GDPR, in conjunction with Article 83(4) (a), both of the GDPR, sanctioned with a fine of up to EUR 10,000,000.00;

Article 12 paragraph 1, paragraph 2, paragraph 3 and paragraph 4 and Article 15 GDPR; and 4. Article 12(1) and (2), Article 13(1) and (2), Article 5(2);

provide, until 4 August 2021, information about the processing, and a violation of Articles 5(1)(a) and 12(1) GDPR, for having rendered, after 4 August 2021

of the Data Protection Act is also relevant. Article 4(1), (2) and (7) of the GDPR read: "Article 4 Definitions For the purposes of this Regulation: (1)

Speedy AD on 5.09.2019, despite a timely phone call from the addressee on 4.09.2019 that they not live at the address. It was delivered to an unknown person

the access request (Article 12(3) GDPR) nor any extension under Article 12(4) GDPR had ever been communicated. The DPA deemed the controllers answer to

of a different nature. 4.4. The official finds that the case materials contain the letter of SIA dated February 2, 2023 [..] 4 (hereinafter - Explanations)

request protection from this body”. SECOND: In accordance with article 65.4 of Organic Law 3/2018, of 5 December, Protection of Personal Data and guarantee

present case. 2 of 4 December 21, 2023, 4:48 p.m. Your reference: C044, (partial) final notice LDA-1085.1-10821/21-F - A closer examination ex officio as to

March 2020, a data protection decision of March 2020010738 was decided on (ex 2018020224): I) Proceedings 1. Complaint and facts On 24 January 2018, the

sees no ex officio reason to assume that the plaintiff was unable to sufficiently argue his case at the hearing. The generality of the overview 4.1. The

requirements have been met for this […]” was a violation of his “privacy”. 4. On January 3, 2024, the complaint will be declared admissible by the First

representative [authorized representative] ; - mr. Van Lith on behalf of [the bank] . 2.4. The Court has also taken cognizance of the contents of: - the documents of

in the manual files. Since the counterclaim was served to the controller on 4 February 2021 and thus before the expiry of a standard limitation period of

controller for violations of Article 76(4) ZVOP-2, Article 78(1) ZVOP-2 and Article 80(3) ZVOP-2. Article 76(4) ZVOP-2 'The notification referred to in

did not pay for them - the plaintiff objected to the debit from his account. 4The plaintiff called in a debt collection company to enforce the claim without

request protection from this body”. SECOND: In accordance with article 65.4 of Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee

par. 8.4), public administrations can legitimately process data suitable for revealing the state of health of their employees, to ascertain, also ex officio

based on art. 62, §1 WOG transferred to the Litigation room. II. Motivation 4. The Disputes Chamber determines on the basis of the documents that support

Art. 83 sec. 1 and sec. 2, art. 83 sec. 4 lit. a) in connection with art. 33 sec. 1 and art. 34 sec. 1, 2 and 4 of Regulation (EU) 2016/679 of the European

was going to comply with the request (Article 12(3) GDPR) or not (Article 12(4) GDPR). Without addressing a potential breach of the GDPR, the DPA ordered

in under Articles 12.3 and 12.4 of the GDPR. Furthermore, it is relevant to note that the grievances 4According to Article 4, 2) of the GDPR, a "processing"

online publications falls under the definition of "personal data" in Article 4(1) GDPR. The DPA reminded the controller that, as defined in Recital 26 GDPR

data, and repealing Directive 95/46/EC (Official Journal of the EU L 119 of 4 May 2016, p. 1 and Dz. Urz. UE L 127 of 23 May 2018, p. 2), hereinafter: the

consent was given contrary to Article 9(2)(a), read in the lights of Articles 4 and 7 GDPR. Secondly, the purposes of the processing mentioned in the disputed

The Spanish DPA fined a landlord €4,000 for installing, a camera that affects the tenant's private area, without sufficient legal basis under Article 6

providing access to documents. Further, the payment in the present case is charged ex post facto, and according to § 29(2) of the Finnish Data Protection Act, a

were subject to professional secrecy obligations. The Danish DPA started an ex officio investigation. The DPA clarified that the Region of Zealand was the

3.4. Pursuant to Section 24 (1) VwGVG, the administrative court must hold a public oral hearing upon application or, if it deems it necessary, ex officio

the site requests mechanism. [2.4.] In the letter dated March 31, 2022 (hereinafter – Request No. 1), the Inspectorate 4 invited LocateFamily administration

2013 DSG Art. 2 § 4 today DSG Art. 2 § 4 valid from January 1st, 2020 last changed by Federal Law Gazette I No. 14/2019 DSG Art. 2 § 4 valid from May 25th

of Article 4.1. (second part) of the GDPR. 8. These data were also subject to automated processing by the defendant at the meaning of Article 4.2. of the

received repeated requests for portability of the claimant's line, which are all ex officio shutdowns in systems due to fraud. This is possible because the operator

i), Art. 83 sec. 1-3 and art. 83 sec. 4 it. a) in connection with Art. 33 paragraph 1 and art. 34 sec. 1, 2 and 4 of Regulation 2016/679 of the European

was repeatedly given the opportunity to comply with Articles 12(3) and 12(4) GDPR because they received several requests from the data subject and an order

counter-application will be dealt with separately. 4.3. The District Court will consider the applications as follows. 4.4. 4.4. [name of defendant] rightly argues that

employee was not able to answer the questions regarding this processing. On 4 February 2022, the data subject also filed an access request, to which the

hearing upon application or, if it considers it necessary, ex officio. Pursuant to Section 24(4) of the VwGVG, the Administrative Court may - unless otherwise

p. 2 and EU Official Journal L 74 of 4.03.2021, p. 35) ), after conducting administrative proceedings initiated ex officio on the processing of personal

and Mixpanel) who carry out processing outside the Union European (point 5.4 of the provision); HAVING REGARD, moreover, to provision no. 232 of 26 November

Administrative Court. In addition, Article 4 of the Basic Data Protection Regulation (DSGVO), OJ No. L 119 of 4 May 2016, Article 3(10) to (12) and (19)

retargeting cookies (report of operations carried out on 5 November 2019, pp. 4 and 5); b) with regard to the blackcard.sisley.com site, while presenting a

balanced with other fundamental rights recognized in the Charter (Recital 4). In particular, the Division followed, Article 47 of the Charter, which included

but not biometric data as they do not fulfil the requirements of Article 4(14) GDPR. Secondly, the AZOP ascertained whether the controller had rightfully

considered personal data under Article 4(1) GDPR and the publishing of such data is considered to be processing under Article 4(2) GDPR. Secondly, the APD noted

However, he 4 1° dismiss the complaint without follow-up; 2° order the dismissal; 3° pronouncing the suspension of the pronouncement; 4° to propose a

oral hearing upon application or, if it deems it necessary, ex officio. According to § 24 para. 4 VwGVG - unless otherwise provided by federal or state law

guarantee the confidentiality and integrity of the complainant's personnel file. 4. On October 5, 2022, a colleague of the complainant stated in writing that

processes the data on the basis of, among other things, Article 4:32 paragraph 1 Wft and 4:34 Wft. In addition, the processing of personal data must be assessed

controller also filed a report with the police for fraud and computer hacking. On 4 May 2021, the data subject sent a subject access request to the controller

retention of a driving licence under Article 102(1)(4) of the Act on Driving Drivers may not invoke, either ex officio or at the request of a party, evidence

art. 58 sec. 2 lit. i) in connection with Art. 83 sec. 1-3 and art. 83 sec. 4 lit. a) and art. 83 sec. 5 lit. e) Regulation of the European Parliament and

of the plaintiff within the meaning of Art. 4 No. 1 DSGVO, whereby the processing within the meaning of Art. 4 No. 2 DSGVO takes place in the form of the

DOCUMENT 5.3.4. and among the documentation a list was delivered- of suppliers contracted by ROBOTICS with access to data (it appears in DOCU- MENT 5.1.4.) C/

of the parties are discussed in more detail below, where necessary. 4The assessment 4.1. The request pertains to access to the client file on the basis of

oral hearing upon application or, if it deems it necessary, ex officio. According to § 24 para. 4 VwGVG - unless otherwise provided by federal or state law

the appeal registered under no. 24739/2021 RG proposed by: L.M., domiciled ex lege in Rome, piazza Cavour at Chancellery of the Court of Cassation, represented

adopted child - information protected as such by the law (Law of 4 May 1983, no. 184 of 4 May 1983)- as well as the sexual orientation of the parents; this

The Telecommunications Telemedia Privacy Act, NJW 2021, 2238, paragraph 4). 4. The complaint is admissible in accordance with Section 21 Paragraph 3 Clause

argument did not relieve them of their liability as a controller under Article 4(7) GDPR. The DPA highlighted that the most important characteristic of a controller

already at least was no longer available since 14 January 2019 (see document 4-0 (4) in the file of applicant). 3. The legal framework of the jurisdiction of

in article 83.4.a) of the aforementioned RGPD in the following terms: C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 6/16 "4. Violations of

decree on the same issue on July 4, 2023 (Decree of the Government of the Russian Federation N. 1101, issued on July 4, 2023. The decree can be read on

from publishing the portrait in question (order of 29 December 2015, Annex K4, p. 14 et seq., as well as supplements from the Regional Court of Cologne to

visitation cases will thus receive detailed information about all cases where the ex-spouse has come to the attention of the police decades back. There is a risk

there in full and exhaustively. 4. The application for the reinstatement of the contribution (plaintiff's application number 4) is justified. After the plaintiff

meaning of Art. 4 nos. 1 and 2 GDPR if the video recordings allow the identification of the person concerned (Ehmann/Selmayr, loc.cit., Art. 4 marginal 7)

October 28, 2019 and the ex officio search of December 12, 2022 on the websites with the URL https://who.is/whois and www.world4you.com/de. 2. Every user

biometric data within the meaning of art. 4 point 14 of the GDPR. It should be pointed out that pursuant to Art. 4 (14) of the GDPR, "biometric data" means

operative part of this decision and in what manner they have implemented them. 4. No special costs have been incurred by the Authority in this procedure, and

Act in the name of the data subject under in the proceedings held upon GDPR (ex. filing in a complaint at the national DPA), but in procedures which are regulated

banner that appeared on the website of the controller during your own visit. 4. However, the control authority must provide an effective response to the individual

 8 A and I (omissis) 4 L (omissis) 5     6 U 4 Q (omissis) who represents and defends him 9 M 4 I there 

and household sphere are not covered because of § 4(1) DSG in conjunction with Article 2(2)(c) GDPR. § 4(1) DSG provides that the GDPR applies in addition

This is because the controller's duty to "keep electronic records" under § 13(4)(c) of the Law on Data Protection 2000 is nowhere to be found in Article 32

that even pseudonymised data (Art. 4 Para. 5 GDPR) from the term personal data are recorded in accordance with Art. 4 Para. 1 GDPR. It is undeniable that

ical program falls under the definition of "profiling" according to Art. 4(4) GDPR in accordance with the case law of the CJEU in C-634/21. The automatied

Government Decree 2020. from the 4th of November in the declared emergency, as a special legal order, § 46 of the Cat. (4) defined the rules for the exercise

accept about the configure, combined with the color style of the buttons. 4. Withdrawing consent is not as easy as giving it. The complaining party was

of 23/05/2018, p. 2), in connection with Art. 105 paragraph. 4 and art. 105a paragraph. 4 and 5 of the Act of August 29, 1997 Banking Law (Journal of Laws

admissible according to Art. 133 Para. 4 B-VG. The statement must be briefly justified. According to Art. 133 Para. 4 B-VG, the revision is not permissible

personal data of third parties, including those relating to health (Article 4(10)). The DPA held that this constitutes a violation of Article 6(1)(e) and

transferred to the defendant, from in accordance with the provisions of article 65.4 of Organic Law 3/2018, of 5 December, Protection of Personal Data and guarantee

Provinces or by the undersecretary in matters of sport (Article 5, paragraph 4). The guidelines adopted pursuant to art. 1, paragraph 14, d.l. n. 33/2020

effective, proportionate and dissuasive. 4.5. Based on what was assessed in the previous paragraphs. 4.1, 4.2, 4.3 and 4.4 of this provision, it is deemed necessary

of how it plans to bring the processing activities into compliances within 4 weeks. Is consent considered in this case as freely given? Data subjects are

not acknowledge that with the introduction of Title 8.4 in the Awb on the grounds of Article 8:4(1)(f) of the Awb, the possibility to appeal against a

remove the image of the complainant from its databases; GIVEN the note dated 4 August 2022 with which the complainant responded to the observations of R.T

contrary to regulation 21 of PECR. 1 • ICO. InformationCommissioner's ffice 4. Regulation 21 applies to the making of unsolicited calls for direct marketing

§ 3, 4., 6., 11., 12., 13., 16., 17., 21., 23-24. point, paragraph (5) of § 4, § 5 (3)-(5), (7) and (8), § 13, § 2, § 23, § 25, § 25/G. § (3), (4) and

the telecommunications and entertainment sectors. The Latvian DPA started an ex officio investigation into the controller's data processing practices. Specifically

data concerning him are being processed” (art. 4, par. 1, n. 11) of the Regulation). Pursuant to art. 7, par. 4, of the Regulation, "in assessing whether consent

meaning of Article 15 (4) of the General Data Protection Regulation (DS-GVO) by creating the black box mentioned under point 4a)?Are (also) in this case

rejected (paragraph 4). 1.9. The complainant lodged a timely complaint with the Federal Administrative Court against points 3 and 4 of this decision. 1

Guarantor for the protection of personal data, approved with resolution no. 98 of 4/4/2019, published in the Official Gazette. n. 106 of 8/5/2019 and in www.gpdp

protection of personal data, approved with resolution of the Guarantor no. 98 of 4/4/2019, published in the Official Gazette. n. 106 of 8/5/2019 and in www.gpdp

in a certain order using search terms. 2.4. By decisions of 28 October 2014, 22 May 2015, 14 August 2015 and 4 November 2016, the Regional Health Care Disciplinary

of the plaintiff's participation in the test in May 2022 in § 4 and in the appendix to § 4 of the statutes of the defendant university for admissions to

decision of 4 July 2019 - 7 C 31.17 - NVwZ-RR 2019, 1015 marginal number 13). For the modified according to § 32e AO information access claim from § 4 Abs. 1

appeal can be found in the appendix to this ruling. What is this case about? 4. The claimant has requested access to data registered about him in the Tax

revamped website and to provide job search assistance. Jigler stated that ex-employees who had been out of service for some time were also emailed due

form of making available, the 4 reconciliation or interconnection, limitation, erasure or destruction”. 5 19. GDPR Article 4(7) defines “controller” as “the

contact [aimed] at providing commercial information" of Comparafacile (see p. 2.4. of the Private agreement between Comparafacile and XX). For the licensing