Search results
From GDPRhub
- sentence of the GDPR). The extension of the reporting requirement of Section 3(1) of the EpiG is also expedient for combating COVID-19, as the data material37 KB (5,745 words) - 13:53, 12 May 2023
- AZOP (Croatia) - Decision 04-05-2023 (redirect from AZOP (Croatia) - Decision of 4 May 2023 - debt collection agency) (category Article 28(3) GDPR) (section English Machine Translation of the Decision)Paragraph 2 of the General Data Protection Regulation. By not taking appropriate measures, there was a violation of the security of the personal data of all12 KB (1,626 words) - 15:22, 30 October 2023
- AEPD (Spain) - PS/00280/2022 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)framework of the provisions of article 118 of the Law 39/2015, of October 1, of the Common Administrative Procedure of the Public Administrations for the purpose30 KB (4,551 words) - 11:51, 9 February 2023
- APD/GBA (Belgium) - 136/2023 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal58 KB (9,184 words) - 16:49, 12 December 2023
- ANSPDCP (Romania) - Fine to Dante Internațional SA (category Article 21(3) GDPR) (section English Machine Translation of the Decision)to his e-mail address of the commercial messages, within 3 working days from the communication of the minutes. At the same time, the operator was obliged4 KB (414 words) - 11:04, 6 February 2024
- practically, cf. the Regulation on personal data processing § 2-7, and 3) send the DPA their internal controls documentation, cf. the Personal Data Act of 2000 §18 KB (2,525 words) - 08:44, 11 July 2022
- DSB (Austria) - 2020-0.349.984 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)disproportionate. In the light of above the DPA came to the conclusion that the legitimate interests of the respondent outweighed the fundamental rights and freedoms28 KB (4,228 words) - 14:00, 12 May 2023
- Thirdly, the controller failed to respond to the access request. The complaint was originally filed with the Berlin DPA, who referred the case to the Irish20 KB (3,069 words) - 18:48, 24 January 2023
- applicable; the identification of the person responsible for the treatment; the legitimation of data treatment; the time of conservation of the data; the possible15 KB (2,246 words) - 14:26, 13 December 2023
- act in the exercise of their judicial function; " Article 37.3 and 4 of the RGPD indicates on the designation of the DPD “When the responsible or the person14 KB (1,992 words) - 14:29, 13 December 2023
- Datatilsynet (Denmark) - 2020-32-1733 (category Article 17(3)(b) GDPR) (section English Machine Translation of the Decision)6(1)(e) of the GDPR and § 1(2) of the Act of Statistics Denmark and is not obliged to delete it in accordance with the Article 17(3)(b) of the GDPR. On16 KB (2,377 words) - 16:39, 6 December 2023
- Commissioner (Cyprus) - 11.17.001.010.007 (category Article 15(3) GDPR) (section English Machine Translation of the Decision)According to the DPC, the controller should have informed the data subjects more directly also given the nature of the breach and the categories of personal20 KB (3,082 words) - 13:42, 31 January 2024
- minutes. 2. The facts and the subject of the request 1. The defendant is a notary in Flanders. 2. The defendant, in the course of 2019, hired the plaintiff43 KB (6,670 words) - 16:58, 12 December 2023
- DVI (Latvia) - SIA “Lursoft IT” (category Article 6(3) GDPR) (section (2) Information on the "Register of Enterprises")in the legal provision. The DPA also held that Section 4 of the Law on the Register of Enterprises of the Republic of Latvia regulated the right of persons90 KB (14,351 words) - 16:10, 6 December 2023
- determines the purposes and manner of processing personal data -2-". 2. Regarding the issue of the use of video surveillance systems for the purpose of protecting13 KB (1,901 words) - 08:43, 9 November 2022
- Article 12(3) GDPR the response has to be the latest within 3 months. The DPA considered that it had no competence to decide on TDC A / S 'processing of position33 KB (5,177 words) - 16:23, 6 December 2023
- ICO (UK) - Enforcement Notice and Warning Letter - Home Office (category Article 5(2) GDPR) (section English Machine Translation of the Decision)(“UK GDPR”). 2. Unless otherwise stated, references to “Articles” are to articles of UK GDPR, and “Sections” to sections of the DPA. 3. The Home Office129 KB (17,281 words) - 14:57, 10 April 2024
- Norges Høyesterett - 2021-2403-A (category Article 9(2)(a) GDPR) (section English Machine Translation of the Decision)Thyness: Questions and background of the case (2) The case concerns the validity of the Privacy Board's decision of 21 January 2019 [PVN-2018-14] 1 item46 KB (7,024 words) - 06:18, 6 March 2022
- ICO (UK) - Chief Constable West Midlands Police (category Article 34(3) GDPR) (section English Machine Translation of the Decision)with Schedule 13(2)(c) of the Data Protection Act 2018 (DPA 2018) in respect of certain infringements of the DPA 2018. The reprimand 1.2 The Commissioner has18 KB (2,476 words) - 09:10, 14 May 2024
- Garante per la protezione dei dati personali (Italy) - 9440075 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)The Italian DPA has fined Regione Campania for the violation of art. 5 and 6 GDPR. The DPA held that the publication of personal information of two debtors27 KB (4,339 words) - 15:50, 6 December 2023
- request. The Spanish DPA underlined that the focus of the legal proceedings was the exercise of the right of access and the right of erasure of the data subject60 KB (9,630 words) - 12:34, 13 December 2023
- 33 (3) of the GDPR. The DPA assessed that the Zoo did not comply with Article 34(1) of the GDPR by failing to carry out an adequate assessment of the risks33 KB (5,347 words) - 16:39, 6 December 2023
- Court of Appeal of Brussels - 2021/AR/282 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)No 05/2021 of 22 January 2021 of the Disputes Chamber of the DATA PROTECTION AUTHORITY (hereinafter "DPA"). 2. The contested decision. The initially contested24 KB (3,393 words) - 09:25, 10 September 2021
- Tietosuojavaltuutetun toimisto (Finland) - 6629/163/21 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)facilitate the exercise of the right of access and to inform the data subjects of the possibility of obtaining a copy of their personal data free of charge21 KB (3,204 words) - 13:37, 12 January 2024
- sedeagpd.gob.es 2/5 application of the provisions of article 64 of Law 39/2015, of October 1, of the Common Administrative Procedure of Public Administrations15 KB (2,245 words) - 14:22, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9445324 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)letter c) and e), par. 2 and par. 3, letter b) of the Regulation and art. 2-ter, paragraphs 1 and 3, of the Code; By note of the XX, the Comprehensive Institute19 KB (2,989 words) - 15:51, 6 December 2023
- Rules of DPA, a copy of the file may be requested by the parties. If one of the parties wishes to use of the possibility of consulting the file, the latter18 KB (2,611 words) - 12:45, 16 June 2023
- Tietosuojavaltuutetun toimisto (Finland) - 9885/157/19 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)according to Section 200(3) of the Finnish Act on Electronic Communication Services. The DPA emphasised that the requirement of Article 12(2) GDPR should also21 KB (3,097 words) - 13:40, 12 January 2024
- within the meaning of article 63, 1° of the LCA. For the rest, the inspection report does not include no finding of any violation of the GDPR on the part24 KB (3,525 words) - 15:29, 26 January 2024
- Datatilsynet (Denmark) - 2020-431-0061 (Helsingor decision no. 4) (category Article 28(3)(a) GDPR) (section English Machine Translation of the Decision)section 41, subsection of the Data Protection Act. 2, No. 4. If the Municipality of Helsingør meets the conditions of the ban of 18 August 2022 before 525 KB (3,660 words) - 08:42, 14 September 2022
- Datatilsynet (Denmark) - 2020-31-4131 (category Article 2(2)(c) GDPR) (section English Machine Translation of the Decision)characteristics, hence the processing of personal data is not covered by the GDPR, according to Article 2(2)(c) of the GDPR. However, the DPA concluded that Orienteringsret24 KB (3,651 words) - 16:38, 6 December 2023
- Court of Appeal of Brussels - 2020/AR/813 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)stated the DPA violated the principles of proper administration. The DPA orally mentioned additional violations to the controller at the hearing. The DPA85 KB (12,340 words) - 15:30, 19 August 2022
- CNIL (France) - SAN-2022-022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)GPDR) The DPA also determined a violation of Article 33 GDPR. The documentation provided by the controller did not allow the DPA to assess of all the measures59 KB (9,623 words) - 17:03, 6 December 2023
- ICO - Monetary Penalty on Ticketmaster UK Limited (redirect from ICO - The ICO - Monetary Penality to Ticketmaster UK Limited) (category Article 4(2) GDPR) (section English Machine Translation of the Decision)Member State.2 2.2 The GDPR was developed and enacted in the context of challenges to the protection of personal data posed by, in particular: a. the substantial130 KB (21,195 words) - 13:52, 25 April 2021
- IMY (Sweden) - DI-2020-10561 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of Telephone: natural persons with regard to the processing of personal17 KB (1,940 words) - 15:23, 6 December 2023
- APD/GBA (Belgium) - 22/2020 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data35 KB (5,526 words) - 16:56, 12 December 2023
- Copy of claim before the Consumer Service of the Provincial Directorate of Ciudad Real of the Ministry of Health dated 05/10/2019. Copy of the Vodafone32 KB (4,831 words) - 14:31, 13 December 2023
- months after the day of application of the GDPR), the DPA found that the controller had violated Article 37(7) GDPR. Because the DPO of the controller was26 KB (3,862 words) - 17:41, 25 June 2022
- Ordinance. The deadline for implementing the orders is stated in section 7 of the decision. 3. Details of the facts of the case In your reply of 10 September28 KB (4,155 words) - 18:57, 5 March 2022
- VDAI (Lithuania) - VDAI vs UAB Prime Leasing (category Article 83(2)(a) GDPR) (section English Machine Translation of the Decision)loss of the DB file, since it was not even aware of the existence of this DB in the first place (!). The DPA considered the lack of organizational and technical37 KB (4,319 words) - 09:20, 17 November 2023
- part of Netcompany A / S 'development or testing of the system, nor in connection with Kombit A / S' follow-up on tests of the system. 2.2. Types of personal18 KB (2,710 words) - 16:34, 6 December 2023
- LfDI (Baden-Württemberg) - 0523.1-2/3 (category Article 5(2) GDPR) (section Violation of Article 5(2) GDPR)transactions by the Board of Management was not relevant. The LfDI assumed negligence. For the assessment of the fine, the LfDI, which applied the fine framework8 KB (1,137 words) - 10:22, 17 November 2023
- AEPD (Spain) - TD/00044/2021 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)allow for the satisfaction of the claims of the complaining party. Consequently, for the purposes provided for in article 64.2 of the LOPDGDD, the Director22 KB (3,465 words) - 13:30, 13 December 2023
- NAIH (Hungary) - NAIH-1091-10/2022 (NAIH-6936/2021) (category Article 5(2) GDPR) (section English Machine Translation of the Decision)Article 7 (1) of the GDPR and Article 5 (2) of the GDPR, as he could not to certify the processing of the personal data of the data subjects for the purpose69 KB (11,255 words) - 10:08, 17 November 2023
- end dates of the payment default; 2) the total amount of the payment default; and 3) the business sector from where the payment default arose. The Borrower22 KB (3,237 words) - 12:25, 17 June 2022
- Garante per la protezione dei dati personali (Italy) - 9788429 (section English Machine Translation of the Decision)transposition of Article 5(3) of the Directive. The violation of the Code constitutes a direct consequence of the violation of the Directive. The DPA issued a57 KB (9,084 words) - 15:11, 13 July 2022
- Tietosuojavaltuutetun toimisto (Finland) - 8979/162/21 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)personal data and where the controller reviews them. The DPA stated that the objective of the right of access is the opportunity of the data subject to stay19 KB (2,906 words) - 09:35, 4 March 2024
- APD/GBA (Belgium) - 72/2020 (category Article 7(3) GDPR) (section English Machine Translation of the Decision)information of the data protection officer of the data controller, from the highest level of the Management of the Y hospital and the highest level of the human34 KB (5,677 words) - 17:00, 12 December 2023
- information on the service contracted by the deceased. The DPA concluded that in case of doubts about the identity of the requesting party, the controller21 KB (3,290 words) - 10:50, 13 December 2023
- 6, 2020, the complained party answered the transfer of the claim, stating the following: On the one hand, it indicates that the origin of the claim is25 KB (4,016 words) - 14:27, 13 December 2023
- AP (The Netherlands) - 4.02.2021 (category AP (The Netherlands)) (section English Machine Translation of the Decision)level of security, taking into account the state of the art and the costs of implementation, the risks involved and the nature of the data. the implementation57 KB (8,053 words) - 17:07, 12 December 2023
- First-tier Tribunal - Vestani v Information Commissioner (section English Machine Translation of the Decision)progress on the complaint, or of the outcome of the complaint, before the end of the period of 3 months beginning when the Commissioner received the complaint15 KB (2,203 words) - 14:39, 21 December 2023
- Court of Appeal of Brussels - 2021/AR/163 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)The Court of Appeal of Brussels annulled a fine issued by the Belgian DPA, finding that the DPA should have considered the full range of sanctions at its72 KB (11,389 words) - 08:59, 20 August 2021
- HDPA (Greece) - 29/2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)1 of Law 4624/2019 (Government Gazette A΄ 137), in the context of the powers provided for in articles 4 par. 3 and 10 par. 4 of the Regulation of Operation21 KB (3,334 words) - 09:12, 25 October 2023
- Datatilsynet (Denmark) - 2020-442-8866 (category Article 34(3)(c) GDPR) (section English Machine Translation of the Decision)detailed review of the case and a justification for the decision. 2. The competence of the Data Inspectorate In connection with the processing of the present breach20 KB (3,045 words) - 16:40, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9446730 (category Article 58(2)(c) GDPR) (section English Machine Translation of the Decision)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data34 KB (5,420 words) - 15:51, 6 December 2023
- to the fact that, irrespective of the opening of the factual scope of application of the GDPR - in any event a transfer of the personal data of the responsible31 KB (5,184 words) - 17:19, 15 April 2023
- Court of Appeal of Brussels - 2019/AR/1234 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)line with the GPDR. In the appeal procedure, the FPS argues that: 1. the complaint has become devoid of all purpose 2. the DPA interprets the right to access5 KB (609 words) - 12:38, 10 August 2022
- AP (The Netherlands) - 14.01.2022 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)verification. Hence, the DPA concluded that DPG Media violated Article 12(2) GDPR for not facilitating the data subject’s rights sufficiently. The DPA imposed a fine50 KB (7,656 words) - 17:05, 12 December 2023
- APD/GBA (Belgium) - 55/2021 (category Article 6(3) GDPR) (section English Machine Translation of the Decision)response.2. It appears from the documents in the file that the complainant and Mrs Z (hereafter: the mother of the child)were in the process of divorce81 KB (13,211 words) - 16:59, 12 December 2023
- center that in the context of examination of the complaint is checked ex officio in relation to the fact of the lack of availability of of the complainant's11 KB (1,522 words) - 09:35, 13 September 2022
- Persónuvernd (Island) - 2022020363 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)DPA’s assessment, the DPA published its final decision. On the basis of all the above, the DPA first of all clarified that customer data, including data142 KB (22,881 words) - 12:42, 16 January 2024
- Datatilsynet (Norway) - 20/02225 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)Tollbugt 3 22 39 69 00 22 42 23 50 974 761 467 www.datatilsynet.no 0105 OSLO 01/04/21 Page 2 3. Details of the facts of the case In your reply of 1 September45 KB (7,286 words) - 18:55, 5 March 2022
- AP (The Netherlands) - 25.11.2021 (category Article 58(2)(i) GDPR) (section English Machine Translation of the Decision)database, the DPA found that the Benefits department processed the dual nationalities of 1,400,000 Dutch nationals. The DPA acknowledged that the Benefits87 KB (11,601 words) - 17:08, 12 December 2023
- not covered by the right of access under Article 15 of the Data Protection Regulation. 3.2. It follows from the Data Protection Act [2] § 22, para. 1,16 KB (2,455 words) - 16:38, 6 December 2023
- AEPD (Spain) - TD/00129/2020 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)derived from the contractual relationship, the party The claimant requests the recordings of the calls made on the 6th and 10th of November 2019. The claimant22 KB (3,422 words) - 14:50, 13 December 2023
- Datatilsynet (Denmark) - 2019-431-0048 (category Article 28(3)(f) GDPR) (section English Machine Translation of the Decision)users in the municipalities have been able to access are: the gender of the citizen the age of the citizen citizenship case types: the type of case a citizen18 KB (2,633 words) - 16:36, 6 December 2023
- NAIH (Hungary) - NAIH/2020/193/8 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)objected to the processing of the requested data. At the request of the Applicant, the Authority shall take the following decisions in the data protection58 KB (9,413 words) - 10:11, 17 November 2023
- Garante per la protezione dei dati personali (Italy) - 9451734 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)paragraphs 1 and 3, of the Code; c) in violation of the prohibition of dissemination of health data (art. 9, par. 1, 2, 4, of the Regulation referred24 KB (3,697 words) - 15:52, 6 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 8040/163/2019 (category Article 58(2)(d) GDPR) (section English Machine Translation of the Decision)response would not change the way the matter is resolved. The matter may be resolved on the basis of the contact of the Office of the Data Protection Officer29 KB (4,610 words) - 13:07, 3 March 2024
- ANSPDCP (Romania) - 03.08.2023 (category Article 15(3) GDPR) (section English Machine Translation of the Decision)para. (3) of the RGPD, respectively of the requested video recordings, for the time interval in which the petitioner was in the premises of the operator's5 KB (659 words) - 15:14, 13 December 2023
- considered the risks that some of the addresses could be secret/protected. In the view of the DPA, those addresses entailed a high risk for the rights of the21 KB (2,901 words) - 16:37, 6 December 2023
- responsible for the data processing since it used the claimant's data for its purposes. The DPA held that the facts of the case suggest that the right to opposition16 KB (2,544 words) - 14:25, 13 December 2023
- AEPD (Spain) - EXP202202000 (category Article 17(3)(b) GDPR) (section English Machine Translation of the Decision)laid down in the rules of procedure or (2) when the competent body deems it appropriate for reasons of public interest. The DPA held that the accessibility20 KB (3,107 words) - 10:49, 13 December 2023
- UODO (Poland) - DKN.5131.7.2020 (category Article 33(3) GDPR) (section English Machine Translation of the Decision)possible risk of infringement of the rights or freedoms of the persons affected by the infringement in the present case. In the opinion of the DPA the company50 KB (8,066 words) - 10:00, 17 November 2023
- back-account. The controller didn’t reply to questions and information-requests of the DPA. The data subject filed a complaint at the Spanish DPA. The DPA held8 KB (1,143 words) - 13:02, 13 December 2023
- HDPA (Greece) - 36/2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)violation of Articles 12 para. 3 and 15 para. 1 and 3 GDPR from the non-fulfillment of the right of access and a violation of the principle of legality of processing7 KB (890 words) - 15:02, 15 January 2024
- AP (The Netherlands) - 23.09.2021 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)have been a high risk to the rights and freedoms of these data subjects. As a result of the notification of the data breach, the DPA decided to investigate66 KB (8,861 words) - 17:08, 12 December 2023
- (~€123,656). The DPA originally announced a fine of NOK 2.5 million. NIF had no objections to the description of the incident on which the DPA's notification50 KB (8,081 words) - 18:52, 5 March 2022
- Garante per la protezione dei dati personali (Italy) - 9461168 (category Article 28(3)(a) GDPR) (section English Machine Translation of the Decision)to art. 58 of the Regulation and 157 and 158 of the Code, towards both the Company (the XXth) and the Company (the XXth, see the minutes of the operations50 KB (8,001 words) - 15:52, 6 December 2023
- (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data39 KB (6,247 words) - 09:14, 15 November 2023
- Garante per la protezione dei dati personali (Italy) - 9542096 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)paragraph 5, of the Code, the initiation of the procedure for the adoption of the measures referred to in art. 58, paragraph 2, of the Regulations, inviting21 KB (3,092 words) - 15:54, 6 December 2023
- for the alleged violation of Article 5.1.f) of the GDPR and Article 32 of the GDPR, typified in Article 83.5 of the GDPR. FIFTH: Notified of the aforementioned24 KB (3,512 words) - 10:43, 13 December 2023
- 58(2) GDPR for the processing of personal data without the consent of the data subject, as foreseen in Article 6 GDPR. Firstly, the DPA found out that20 KB (3,035 words) - 10:33, 13 December 2023
- complaint referred by the Berlin DPA, for offering unclear information and not giving the option of rejecting the cookies. The Spanish DPA was referred a complaint19 KB (2,841 words) - 14:02, 13 December 2023
- proposal. In the present case, the agreement of beginning of the disciplinary file determined the facts in which the imputation, the infringement of the GDPR attributed24 KB (3,749 words) - 13:19, 13 December 2023
- UODO (Poland) - DKN.5131.31.2021 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)within 3 days from the date of delivery of this decision, the persons whose data was processed on the stolen copy of the notarial deed, about the breach105 KB (17,237 words) - 09:22, 10 May 2023
- accordance with the criteria that establishes article 83.2 of the RGPD, and with the provisions of article 76 of the LOPDGDD, regarding section k) of the aforementioned20 KB (2,992 words) - 13:30, 13 December 2023
- HDPA (Greece) - 20/2021 (category Article 21(2) GDPR) (section English Machine Translation of the Decision)entered on the Greek website (Kariera.gr) during the existence of the technical error. 76 applications were submitted 3deletion of e-mail visitors of the website20 KB (2,936 words) - 14:58, 22 November 2021
- appeal appears in section 6 of the decision. 2. Details of the facts of the case On 16 December 2019, the Danish Data Protection Agency received an inquiry from45 KB (6,973 words) - 05:12, 15 September 2022
- after reminding the provisions of articles 3 par. 2 and 27 of the GDPR regarding the territorial scope of GDPR and on representatives of controllers or non-processors8 KB (1,122 words) - 12:31, 20 July 2022
- EWCA - Dawson-Damer v Taylor Wessing LLP (redirect from EWCA - A3/2015/307) (section English Machine Translation of the Decision)"disproportionate effort" for the purposes of section 8(2) DPA 1998 so that the data controller is excused from doing so; whether the exercise of the court’s discretion89 KB (14,909 words) - 08:39, 22 February 2022
- UODO (Poland) - DKE.561.13.2020 (category Article 58(2)(i) GDPR) (section English Machine Translation of the Decision)basis for the consideration of the aforementioned complaint by the DPA. The President of the DPA, considering the above explanations of the Company as27 KB (4,446 words) - 09:51, 17 November 2023
- AEPD (Spain) - EXP202202837 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)with article 65 of the LOPDGDD Law, when assessing possible rational indications of a violation of the rules in the field of the powers of the Spanish Data58 KB (8,995 words) - 13:00, 13 December 2023
- appealed the decision to the Administrative Court No. 2 of Vitoria-Gasteiz, which upheld the appeal. The DPA then appealed that court's decision to the Administrative44 KB (6,561 words) - 14:24, 24 November 2022
- APD/GBA (Belgium) - 15/2021 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)Chamber of September 14, 2020 in the presence ofMe De Ridder, counsel for the defendant in the absence of the complainant;2. The facts and subject of the complaint1285 KB (13,724 words) - 16:52, 12 December 2023
- Article 6(1)(f) of the GDPR? First of all, the DPA recalls that: - a video surveillance system falls under the provisions of the GDPR when the equipment used82 KB (12,100 words) - 17:01, 12 December 2023
- Garante per la protezione dei dati personali (Italy) - 9778094 (section English Machine Translation of the Decision)and disregarding the circular of the Ministry of the Interior of 26 February 1999 (123 / A183.B320), given the absence of the purposes of justice and police66 KB (10,708 words) - 11:29, 16 August 2022
- AEPD (Spain) - PS/00192/2022 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)concerned, the object of the report, the previous behavior of the interested party, the content, the form and the repercussions of the publication, the form15 KB (2,257 words) - 13:02, 13 December 2023
- categories of personal data of Article 9 GDPR of the restaurant owner. The tweet with the picture and other tweets of the debate pointed that the restaurant31 KB (5,083 words) - 13:51, 13 December 2023
- regulated by the public access and secrecy act the breach is to be considered severe. The DPA held that the Police must: Pay a fine of SEK 2 500 000 Implement43 KB (4,945 words) - 15:22, 6 December 2023
- with in points 7.1 and 8.3 of the decision. 2. Decision on order and infringement fine 1. Pursuant to Article 58 (2) (2) of the Privacy Regulation, EAS40 KB (5,988 words) - 19:04, 5 March 2022
- HDPA (Greece) - 2/2023 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)Greek DPA. In the complaint, the data subject asked the following questions to the DPA: (i) whether the data controller had the right to retain a copy of the31 KB (5,021 words) - 16:15, 18 July 2023
- AEPD (Spain) - PS/00090/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)responsibility and proceeds to the voluntary payment of the fine imposed by the DPA? The Spanish DPA imposed a fine of EUR 5 000 on the company under investigation16 KB (2,462 words) - 13:58, 13 December 2023
- Datatilsynet (Denmark) - 2019-32-0709 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)information on the conclusion of the agreement after the ending of the contractual relationship and the withdrawal of consent? The Datatilsynet held that the controller24 KB (3,763 words) - 16:23, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9795350 (section English Machine Translation of the Decision)After the controller was notified of the complaint by the DPA, it granted the access request. The controller told the DPA that because the data subject90 KB (14,651 words) - 08:07, 5 September 2022
- Datatilsynet (Denmark) - 2019-431-0052 (category Article 13(2) GDPR) (section English Machine Translation of the Decision)to the data subjects´ expectation. The DPA investigated if the company met requirements set out in Articles 5(1)(e), 6(1)(a), 13(1) and (2) of the GDPR27 KB (4,300 words) - 16:36, 6 December 2023
- purposes of processing, the identity and contact details of the controller, and the existence of data subjects' rights under the GDPR. The DPA considered26 KB (3,881 words) - 13:35, 13 December 2023
- On 30 March 2021, the complaint was dismissed by the Front-line Service of the DPA, on the basis of Article 58 and 60 of the Act of 3 December 2017 establishing12 KB (1,431 words) - 16:45, 12 December 2023
- Parliament and of the Council of October 23 of 2019 on the protection of persons who report violations of the Law of the Union, which is directly applicable57 KB (9,217 words) - 10:44, 13 December 2023
- notification to the DPA. The DPA had to contact the processor about the breach, who consequently deleted the image files immediately and corrected the script.30 KB (4,302 words) - 18:53, 5 March 2022
- assessment of the legality of the posting. Therefore, the DPA decided not to carry out investigations in this case because it fell outside the scope of the their17 KB (2,399 words) - 16:20, 6 December 2023
- AP (The Netherlands) - z2018-02009 (category AP (The Netherlands)) (section English Machine Translation of the Decision)penalty and the subsequent by the UWV information provided at the request of the Dutch DPA 5. The General Data Protection Regulation (hereinafter: the GDPR)33 KB (5,112 words) - 17:10, 12 December 2023
- Datatilsynet (Denmark) - 2019-421-0028 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)were in effect on the date of notification of the audit, regarding the handling of access requests pursuant to Articles 15 and 12 of the Data Protection17 KB (2,639 words) - 16:27, 6 December 2023
- process. Chapter 2 describes the legal framework. Chapter 3 follows the assessment of the AP, after which In chapter 4, the height of the administration must54 KB (8,224 words) - 17:07, 12 December 2023
- Law 5/1995, of 05/22, of the Court of the Jury. In the norm, the Electoral Census Office is assigned powers in the formation of the list of candidates for21 KB (3,254 words) - 14:02, 13 December 2023
- DSB (Austria) - 2021-0.347.702 (category Article 9(2)(f) GDPR) (section English Machine Translation of the Decision)follows that the subject of the complaint is the question of whether the Respondent was entitled to submit data of the Complainant for the submission in25 KB (3,875 words) - 10:36, 11 January 2024
- sedeagpd.gob.es 2/28 copy of the resolution of the University of Granada, of May 4, 2020, against of the requirement of the second chamber for the evaluation57 KB (8,117 words) - 10:35, 13 December 2023
- AEPD (Spain) - 0098/2022 (category Article 9(2)(g) GDPR) (section English Machine Translation of the Decision)would constitute processing of special categories of data within the meaning of Article 9 GDPR. The DPA recalled the definition of ‘biometric data’ as meaning56 KB (8,102 words) - 13:57, 1 February 2023
- determination of a system of exercise of the right of opposition that conforms to the mandate of the LSSI. Situation that in the present case has not existed20 KB (3,159 words) - 13:20, 13 December 2023
- verified by the DPA due to the website's errors. Therefore, this argument was dismissed by the DPA. Similarly, the DPA held that the fact that the form is44 KB (7,162 words) - 13:53, 13 December 2023
- Article 83 GDPR, the DPA imposed a fine on the controller. The DPA took into account aggravating circumstances provided in Article 76(2)(b) of the Spanish Data26 KB (3,867 words) - 10:44, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9860461 (section English Machine Translation of the Decision)as, in paragraph 3, that in the event of dissemination of data for journalistic purposes, the limit of the "essential nature of the information regarding16 KB (2,409 words) - 15:44, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9860487 (section English Machine Translation of the Decision)as, in paragraph 3, that in the event of dissemination of data for journalistic purposes, the limit of the "essential nature of the information regarding16 KB (2,352 words) - 15:44, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9860513 (section English Machine Translation of the Decision)as, in paragraph 3, that in the event of dissemination of data for journalistic purposes, the limit of the "essential nature of the information regarding16 KB (2,324 words) - 15:45, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9445180 (section English Machine Translation of the Decision)The Italian DPA found that access of the employer to the email account of the former employee must protect the privacy of the latter and not infringe the34 KB (5,414 words) - 15:50, 6 December 2023
- APD/GBA (Belgium) - 105/2023 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)that the court had only referred to controller 1 in its order to the DPA. Therefore, according to controller 2, the DPA violated the order of the court102 KB (15,787 words) - 07:39, 6 September 2023
- Personvernnemnda (Norway) - 2021-13 (20/01874) (category Article 24(2) GDPR) (section English Machine Translation of the Decision)consideration. The PVN agreed with the DPA that the the Company had infringed Article 6(1)(f) GDPR because of the absence of a valid legal basis for the processing48 KB (7,804 words) - 18:49, 5 March 2022
- es Page 2 2/10 one of them during the month of July. 3. Complaints from the Works Council about the way of addressing the shift managers to the workers33 KB (5,347 words) - 13:55, 13 December 2023
- hazard assessment of the person to be tested. Within the framework of the examination of the proportionality of the encroachment, a weighing of interests had28 KB (3,418 words) - 13:49, 12 May 2023
- to, the specific website visited by the person, the metadata of the browser and operating system, the date and time of the visit to the website, the IP10 KB (1,381 words) - 10:27, 13 December 2023
- on the basis of Articles 58 and 60 of the law of 3 December 2017, the complainant will be informed of this on the basis of art. 61 of the law of 3 December62 KB (9,417 words) - 16:57, 12 December 2023
- then the Defendant reserves the right to challenge the complaint additional comments and positions in defense of its rights. 3.2. The Defendant on 3/10/201956 KB (8,913 words) - 16:52, 6 December 2023
- and 5.2 of the DGPS and Article 6 of the DGPS; 2.the defendant has not complied with the obligations imposed by sections 12.1. and 12.2. of the DGPS and24 KB (3,844 words) - 16:51, 12 December 2023
- initiative of the EDPS, the Authority, like the majority of the members of the EDPS, jointly undertook the examination of the topic "The definition and6 KB (767 words) - 10:55, 28 February 2024
- DSB (Austria) - 2020-0.816.655 (category Article 3 GDPR) (section English Machine Translation of the Decision)review the data protection authority within the meaning of Section 24(6) of the DPA (cf. Art. 8 of the Federal Constitution, according to which the use of28 KB (4,230 words) - 13:53, 12 May 2023
- Datatilsynet (Denmark) - 2019-32-0988 (category Article 9(2) GDPR) (section English Machine Translation of the Decision)take place on the basis of Article 9 (1) of the Data Protection Ordinance [1]. 2, letter h, cf. the Data Protection Act [2] § 7, para. 3, and Article 645 KB (7,151 words) - 16:24, 6 December 2023
- NAIH (Hungary) - NAIH/2020/2555 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)affected by the delay. In the event of non-payment of the fine and the late payment allowance, the Authority shall order the enforcement of the decision and33 KB (5,033 words) - 10:12, 17 November 2023
- CNPD (Portugal) - Deliberação 2022/140 (category Article 13(2) GDPR) (section English Machine Translation of the Decision)breach of a substantial right: Article 39.0 , n.0 3 of the LERGPD; c) The invalidity of the non-application of the provisions of Articles 37.0 , n.0 2 and75 KB (12,306 words) - 10:02, 21 December 2022
- UODO (Poland) - DKN.5130.1354.2020 (category Article 28(3)(h) GDPR) (section English Machine Translation of the Decision)series of negligence by the controller, the DPA took into account the scale of the breach and the scope of the stolen data. Share blogs or news articles here74 KB (11,513 words) - 09:58, 17 November 2023
- Garante per la protezione dei dati personali (Italy) - 9856694 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)administrative fine on the basis of Articles 58(2)(i) and 83 GDPR. The total amount of the fine took into account the long period of time in which the violation occurred49 KB (7,758 words) - 15:44, 6 December 2023
- possible. Firstly, the Spanish DPA analysed the reaction of the controller to the confidentiality data breach. It observed that the occurence of a data breach40 KB (6,014 words) - 13:21, 13 December 2023
- Personvernnemnda (Norway) - 2022-14 (20/02368) (category Article 58(2) GDPR) (section English Machine Translation of the Decision)argument of the controller that the DPA had taken the turnover from the wrong year into account. It held that the calculation of the fine based on the aggravating26 KB (4,039 words) - 09:08, 20 January 2023
- Datatilsynet (Norway) - 20/02274 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)regardless. The controller did not discontinue the former employee's email account until he received the first letter from the DPA. The DPA noted that the unlawful47 KB (7,661 words) - 18:54, 5 March 2022
- shown the coat of arms of the Ministry of the Interior. SECOND: In accordance with article 65.4 of Organic Law 3/2018, of 5 December, Protection of Personal40 KB (6,014 words) - 13:24, 13 December 2023
- AEPD (Spain) - PS/00060/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)set out in the Articles 47, 64.2 and 68.1 of the Organic Law 3/2018 of December 5, 2010, on the Protection of Personal Data and Guarantee of Digital Rights23 KB (3,695 words) - 13:53, 13 December 2023
- AEPD (Spain) - PS/00333/2019 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)infringe Article 5 of the GDPR? The DPA held that the entity who was the object of the complaint was not responsible because it had transferred the agent's number16 KB (2,625 words) - 14:29, 13 December 2023
- A82528548) of the telephone line *** TELEPHONE. 1 in which the ownership of this by part of the claimant. - Copy of the certificate of the Robinson List33 KB (5,185 words) - 13:48, 13 December 2023
- AEPD (Spain) - EXP202103746 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)at least, the existence of the treatment, the identity of the person in charge and the possibility of exercising the rights provided for in the Articles16 KB (2,041 words) - 13:34, 13 December 2023
- by the data subject. After the notification of the proposed fines, the controller claimed, in the first place, that the DPA would be infringing the principle38 KB (5,920 words) - 12:43, 13 December 2023
- infringement of the rights conferred in the RGPD, there must be a treatment of the personal data of the claimants, and the publication of a photograph27 KB (4,356 words) - 12:41, 13 December 2023
- Datatilsynet (Norway) - 20/02291 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)responsible ». The question of choice of law must therefore be assessed on the basis of what is considered the time of action. The relevant deviation arose45 KB (6,645 words) - 14:40, 28 March 2022
- APD/GBA (Belgium) - 17/2020 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)to as the DPA; Having regard to the Law of 3 December 2017 establishing the Data Protection Authority (hereinafter LCA); Having regard to the Law of 30 July52 KB (8,603 words) - 16:55, 12 December 2023
- APD/GBA (Belgium) - 75/2023 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)with regard to the “free profiles”, to process the information: the DPA proceeded to assess the balance of interests of the controller and the complainants77 KB (11,604 words) - 08:55, 29 June 2023
- by the person in charge of renting the 2nd and 3rd floors. 3. Photographs of the exterior of the property and of the 4 cameras installed inside the east28 KB (4,525 words) - 14:06, 13 December 2023
- send the e-mail. On top of that, that e-mail was then send to the lawyer of the defendant 2. The lawyer then forwarded that mail to the lawyer of the complainant72 KB (11,208 words) - 16:51, 12 December 2023
- with article 64.3 of the Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights (LOPDGDD), the claim was admitted54 KB (8,870 words) - 10:43, 13 December 2023
- Court of Appeal of Brussels - 2023/AR/801 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)01-00003382612- □□□ 3- □□ 18- □3- □1- L_J Court of Appeal Brussels-2023/AR/801-p. 4 111. THE CONTEXT OF THE CONTESTED DECISION AND THE PROCEDURE BEFORE THE DPA 5. On11 KB (1,467 words) - 09:40, 6 July 2023
- violation of Article 22(2) of the Spanish Law on services of the information society and electronic commerce (LSSI). The DPA considered that the lack of a information17 KB (2,700 words) - 14:23, 13 December 2023
- AKI (Estonia) - 2.1.-1/22/1396 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)meets the conditions set forth in Article 6(1)(f) of the IKÜM (see section 2.1 of the inspection's reasons). We emphasize that the analysis of the legitimate34 KB (5,305 words) - 08:40, 29 June 2023
- AEPD (Spain) - EXP202105669 (category Article 58(2)(d) GDPR) (section English Machine Translation of the Decision)accordance with the provisions of art. 43.2 of the LPACAP, dated January 3, 2022, as stated in the certificate that is in the file. Although the notification45 KB (6,998 words) - 12:58, 13 December 2023
- However, the controller sent a copy of the information requested once it was notified about the DPA's investigation. The DPA noted that the lawfulness of the51 KB (7,867 words) - 13:10, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 3021/452/2017 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)Due to the factual basis of the decision, several of the points of contention regards the question of whether there was a difference between the national41 KB (6,220 words) - 09:48, 17 November 2023
- AEPD (Spain) - PS/00461/2019 (category Article 83(2)(a) GDPR) (section English Machine Translation of the Decision)affecting the rights of third parties. The Spanish DPA received a complaint about the installation of a video surveillance camera on the private property of a15 KB (2,366 words) - 14:41, 13 December 2023
- gob.es 3/7 FOUNDATIONS OF LAW FIRST: The Director of the Spanish Agency for Data Protection, in accordance with the provisions of section 2 of article22 KB (3,432 words) - 12:37, 13 December 2023
- with the Data Protection Authority against the defendant. 2. The subject of the complaint concerns the installation of surveillance cameras in the six stores21 KB (3,034 words) - 15:30, 26 January 2024
- this use of Strava a breach of the GDPR? The DPA (Datatilsynet) held that the municipality had several breaches as per the GDPR: 1) For the lack of routines24 KB (3,591 words) - 18:57, 5 March 2022
- Fourth, the DPA rejected the controller's argument that the nature of the data processed (contact details) was an indicator of the prevalence of the company's84 KB (13,036 words) - 13:26, 13 December 2023
- pursuant to Section 3(2) of the Data Protection Act (DPA) and Article 4(1) GDPR. Pursuant to the FOIA and the GDPR, the ICO balanced the right to information3 KB (212 words) - 16:21, 7 March 2022
- accordance with the provisions of section 2 of article 56 in relation to section 1 f) of article 57, both of the GDPR; and in article 47 of the LOPDGDD. SECOND:14 KB (2,139 words) - 10:50, 13 December 2023
- way, complained to the Spanish DPA that the confidentiality of the processing had been breached. Does the distribution of the census of workers through a24 KB (3,907 words) - 14:08, 13 December 2023
- article 58.2 of the RGPD recognizes to each control authority, and as established in articles 47 and 48 of the LOPDGDD, the Director of the Spanish Data27 KB (4,108 words) - 13:32, 13 December 2023
- AEPD (Spain) - PS/00197/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)to Articles 3(2) and 3(3) of the Royal Decree 1435/2002. The contract included the identification and contact of the end consumer, the logo of Iberdrola129 KB (21,793 words) - 14:09, 13 December 2023
- HDPA (Greece) - 47/2022 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)who requested the granting of the of the following information: a) a complete copy of the body of electors, as it was formed at the end of the voting, b)25 KB (3,943 words) - 14:32, 28 September 2022
- DSB (Austria) - D123.921/0005-DSB/2019 (category Article 1(2) GDPR) (section English Machine Translation of the Decision)about the specific entries of the categories of personal data (such as names, tax-relevant information). The DPA obliged the respondent to provide the relevant42 KB (6,592 words) - 13:58, 12 May 2023
- DSB (Austria) - 2022-0.332.606 (category Article 2(2)(c) GDPR) (section English Machine Translation of the Decision)First, the Austrian DPA had to determine whether the GDPR was applicable. The DPA checked whether the material scope was met, in particular whether the case21 KB (3,166 words) - 13:43, 12 May 2023
- processing of health data from Article 9, paragraph 2, point e) of the GDPR. Furthermore, the reference to the legal basis regarding the execution of the contract13 KB (1,934 words) - 20:55, 1 November 2023
- Tietosuojavaltuutetun toimisto (Finland) - 3831/161/21 (category Article 13(2)(a) GDPR) (section English Machine Translation of the Decision)informed of the storage period when collecting personal data in accordance with Article 13(2)(a) GDPR. On the basis of the information gathered, the DPA held61 KB (9,477 words) - 13:38, 12 January 2024
- removing the mention of the title of nobility from the identity card of the complainant. The complainant, a member of the nobility (countess) addressed45 KB (6,780 words) - 16:57, 12 December 2023
- Personvernnemnda (Norway) - 2022-12 (20/01589) (section English Machine Translation of the Decision)informed the DPA about the controller's alleged GDPR violations. The parent of a school pupil (the data subject) was concerned that the municipality (the controller)24 KB (3,609 words) - 09:07, 20 January 2023
- in view of the circumstances of the case, the subject of the offence is not and considering that the object of the warning is the imposition of corrective18 KB (2,737 words) - 14:23, 13 December 2023
- with Article 58(2)(b) of the Regulation of the European Parliament and of the Council EU 2016/679 of 27 April 2016. on the protection of natural persons22 KB (3,364 words) - 09:52, 17 November 2023
- instructed by the DPA to do so. Thus, the DPA imposed a fine of €20,000. It is worth mentioning that the Greek DPA fined the four biggest banks of Greece (National50 KB (8,004 words) - 04:49, 14 December 2022
- Garante per la protezione dei dati personali (Italy) - 9524175 (category Article 28(2) GDPR)paragraphs 2 and 3 of the Regulation (formerly Article 29 of the Code, prior to the amendments set out in Leg. Decree No. 101/2018), the processing of personal20 KB (3,133 words) - 15:53, 6 December 2023
- original purpose of the processing. The DPA also found that the use of GPS data exceeded defined purposes. Altogether, the DPA reasoned that these processing activities43 KB (6,983 words) - 09:09, 21 August 2022
- AEPD (Spain) - TD/00034/2020 (category Article 9(2)(h) GDPR) (section English Machine Translation of the Decision)proceeding to eliminate 3 of the 4 annotations made by 3 health professionals from the San Fermin Health Center. The Responsible of the treatment has taken17 KB (2,730 words) - 14:50, 13 December 2023
- therefore only up to the Union institutions, in particular the Court of Justice, to define the limits of that concept. In the opinion of the DPA, a private law93 KB (14,040 words) - 17:00, 12 December 2023
- AEPD (Spain) - EXP202201247 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)mentioned by the data controller, the data subject is actually the co-owner of the car in dispute, not its guarantor. The DPA ruled that processing the personal17 KB (2,350 words) - 13:17, 13 December 2023
- 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal79 KB (12,260 words) - 17:00, 12 December 2023
- APD/GBA (Belgium) - 33/2020 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)not negate the responsibility of the controller. Infringement of Articles 5(1)(c) and 5(1)(d): The Belgian DPA held that the continued use of the incorrect39 KB (6,551 words) - 16:56, 12 December 2023
- Persónuvernd (Iceland) - 2020061954 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)processing of personal information. According to the website of the Office of the Medical Director of Health and the Civil Protection Department of the National88 KB (14,189 words) - 09:58, 7 December 2021
- treatment of the data of union affiliation of the claimant by two unions, within the scope of the legal dialogue established for the purposes of cooperation36 KB (5,608 words) - 13:01, 13 December 2023
- AEPD (Spain) - PS/00023/2020 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)neighborhood and the street a violation of Article 5 (1) (c) GDPR? The Spanish DPA has found that the facts of the present proceedings show that 2 of the 3 cameras21 KB (3,298 words) - 13:46, 13 December 2023
- The Litigation Chamber of the Belgian DPA dismissed the complaint made against Google on the request by the plaintiff to have the results delisted by Google20 KB (2,982 words) - 17:00, 12 December 2023
- AEPD (Spain) - PS/00036/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)40) of the mentioned Law, regarding the "Cookie Policy" in the denounced website. FIFTH: Notification of the opening of the file on 31/03/20, as of today16 KB (2,587 words) - 13:50, 13 December 2023
- accordance with of Art. 6, para. 1 of the GDPR. For the purposes of clarification of the case from a legal and factual point of view, the Bulgarian DPA requested18 KB (2,987 words) - 16:49, 6 December 2023
- Datatilsynet (Denmark) - 2019-41-0043 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)employees - before establishment of the control measures - be informed of the purpose and scope of the measures and of the use of the information collected in26 KB (3,931 words) - 16:25, 6 December 2023
- DPC (Ireland) - Meta Platforms Ireland Limited (Facebook) - IN-18-5-5 (section English Machine Translation of the Decision)this case, the GDPR" (116). Turning to the facts of the case, the EDPB outlines a number of factors which, in contradiction to the view of the DPC, support21 KB (3,005 words) - 14:16, 1 February 2023
- AEPD (Spain) - EXP202208230 (category Article 28(2) GDPR) (section English Machine Translation of the Decision)possible fine of €90,000 could be imposed for the breach of Articles 28(2) and 28(3) of the GDPR. The data processor decided to finalize the procedure by45 KB (6,904 words) - 13:12, 13 December 2023
- legal basis. Hence, the DPA concluded that the controller violated Article 6(1) GDPR. The DPA questioned the due diligence of the controller in preventing37 KB (5,914 words) - 10:42, 13 December 2023
- in Article 24 of the Privacy Regulation, which regulates the liability of the controller separately. 3.3 In particular on the imposition of infringement31 KB (4,380 words) - 06:12, 14 March 2023
- serious for the purposes of prescription in article 72.1.b) of the Organic Law 3/2018, of December 5, Protection of Personal Data and guarantee of the digital61 KB (9,700 words) - 13:21, 13 December 2023
- they go the claimant's telephone number, the object of the call, the legitimacy of the call, and information provided to the claimant about the origin of23 KB (3,590 words) - 14:45, 13 December 2023
- gob.es 2/12 the person in charge, within the period of availability, understood as rejected in accordance with the provisions of art. 43.2 of the LPACAP36 KB (5,485 words) - 13:19, 13 December 2023
- provisions of articles 47 and 48.1 of the Or- Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights (hereinafter LOPDGDD)15 KB (2,313 words) - 10:35, 13 December 2023
- virtue of the powers established in art. 58.2 of the RGPD and in articles 47, 64.2 and 68.1 of the Organic Law 3/2018 of 5 December on Protection of Personal20 KB (3,301 words) - 13:57, 13 December 2023
- IMY (Sweden) - DI-2020-10538 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)in breach of Article 12 (3) of the Data Protection Regulation by not without unnecessary delay informed the complainant of the outcome of the complainant's14 KB (1,580 words) - 15:22, 6 December 2023
- communications. Did the French DPA breach the constitutional principle of non-retroactivity of the law by applying the GDPR? Was the fine of € 500,000 imposed13 KB (1,928 words) - 09:51, 10 September 2021
- CNIL (France) - 2023-097 (category Article 9(2)(j) GDPR) (section English Machine Translation of the Decision)solutions of the study. Finally, the DPA noted that in compliance with Article R. 1461-1 of the Public Health Code, which does not allow the transfer of personal18 KB (2,536 words) - 17:11, 6 December 2023
- 2002/58/EC of the European Parliament and of the Council of July 12, 2002 concerning the processing of personal data and the protection of privacy in the electronic48 KB (7,525 words) - 17:02, 6 December 2023
- appears, within the section of the debt, the name and surname of the complainant along with the amount of € 286.81. SECOND: On May 9, 2019, the complaint was17 KB (2,578 words) - 14:05, 13 December 2023
- on each of the parties by Article 58(2) of the GPRS authority, and as established in articles 47 and 48.1 of the LOPDPGDD, the The Director of the Spanish20 KB (3,097 words) - 14:22, 13 December 2023
- in the particulars of claim (which the claimant did not complied with). The reasons for allocating the claim to the Multi-Track on the part of the claimant61 KB (8,986 words) - 08:40, 22 February 2022
- improper. The DPA disagreed, stating that the legal framework at the time of the infraction applies, and compliance with GDPR was required at the time of the83 KB (12,999 words) - 15:30, 6 March 2024
- Provides a copy of the complaint before the Civil Guard of *** DATE. 2 indicating that the ruling of the Social Court number *** NUMBER 1 of Oviedo of *** DATE40 KB (6,508 words) - 14:39, 13 December 2023
- ProctorExam. 2.1.2. The need for ProctorExam and the processing of personal data in connection therewith The ITU has stated that the purpose of using ProctorExam40 KB (6,369 words) - 16:39, 6 December 2023
- proposed the dismissal of the complaint to which the French DPA objected. However, the Spanish DPA confirmed that the data subject did not specify the personal29 KB (4,457 words) - 10:34, 13 December 2023
- Datatilsynet (Norway) - 20/01896 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)non-compliance with the principle of liability in Article 5 (2) of the Privacy Ordinance. 2. Pursuant to Article 58 no. 2 letter d of the Privacy Ordinance28 KB (4,387 words) - 18:58, 5 March 2022
- authentication login attempts and the controller did not communicate the incident to the DPA. The Spanish DPA requested the controller to provide detailed63 KB (9,551 words) - 12:33, 13 December 2023
- (6)(1)(b) GDPR). The DPA also found no lack of diligence on part of the controller in verifying the identity of the data subject, since the General Vehicle32 KB (4,780 words) - 10:44, 13 December 2023
- proof of the calls with the initial contractor and the identification they provided. Therefore, the DPA argues that the lack of diligence and the impossibility30 KB (4,631 words) - 13:00, 13 December 2023
- DSB (Austria) - 2021-0.024.862 (category Article 13(2) GDPR) (section Requirements for the Information Obligation in case of occasion-related Video Documentation)operation impact detection in the case of bridges ”of the responsible persons. 2. The person responsible specified - at the request of the data protection authority38 KB (5,821 words) - 13:39, 12 May 2023
- accordance with the provisions of article 65.2 of the LOPDGDD, dated September 24, 2020, the Director of the Spanish Agency for the Protection of Data agrees16 KB (2,328 words) - 14:30, 13 December 2023
- to address the complaint raised. As of the date of the resolution of this complaint, no allegations. LEGAL GROUNDS FIRST: The Director of the Spanish Agency17 KB (2,654 words) - 14:50, 13 December 2023
- procedure the Director of the Spanish Protection Agency of data. Likewise, article 63.2 of the LOPDGDD determines that: "The procedures processed by the Spanish17 KB (2,368 words) - 13:28, 13 December 2023
- Korkein hallinto-oikeus (Finland) - KHO:2021:125 (section English Machine Translation of the Decision)Ålandic DPA for a probationary period of one year. Pursuant to section 10(2) of the Act on Public Officials in the Region of Åland, the Government of Åland46 KB (7,394 words) - 14:08, 21 March 2024
- ship of the claimed party and in order to publish in his web page images of the result of the work carried out, he took images of the page website of the26 KB (3,901 words) - 13:19, 13 December 2023
- with the rules of Chapter 5 of the Law Enforcement Act, Chapter 3 of the Data Protection Regulation and Chapter 3 of the Data Protection Act. The Directorate35 KB (5,628 words) - 16:38, 6 December 2023
- and publication on the website of the City Municipality. The Spanish DPA asked the municipality of Fuenlabrada to provide copy of the Data Protection Impact24 KB (3,690 words) - 13:39, 13 December 2023
- AEPD (Spain) - PS/00139/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)individual by Article 58(2) of the GPRS, the authority, and as established in articles 47 and 48.1 of the LOPDPGDD, the The Director of the Spanish Data Protection20 KB (3,086 words) - 14:04, 13 December 2023
- 38/2021 - 3/24 2. Facts and subject of the claim 2 1. The complainant is a shareholder of SPRL Bureau X. The complainant holds the vast majority of shares73 KB (11,604 words) - 16:57, 12 December 2023
- Additionally, the Spanish DPA found that the lack of information of provided to clients of the person responsible for the video surveillance system was a violation19 KB (2,965 words) - 13:49, 13 December 2023
- UKUT (AAC) - Leave.EU and Eldon v Information Commissioner (section English Machine Translation of the Decision)matters. whether sending the newsletters fell within the scope of regulation 22 of PECR (Grounds 2, 3 and 4); whether the criteria for issuing a MPN were11 KB (1,457 words) - 16:05, 3 December 2021
- should, before the applicant was found guilty or the penalty was imposed". 2.3 In the context of the above annulment decision of the Court and in conjunction74 KB (12,375 words) - 10:07, 4 October 2023
- Garante per la protezione dei dati personali (Italy) - 9509558 (section English Machine Translation of the Decision)sent to the National Council of the Order of Journalists. The decision of the DPA is based on the fact that the freedom of the press can restrict the protection24 KB (3,667 words) - 15:53, 6 December 2023
- CNPD (Luxembourg) - Délibération n° 18/FR/2022 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)did not recover the debts of the co-ownership. In substantial agreement with the head of the investigation, the DPA considered that the accounting obligations76 KB (11,147 words) - 16:58, 6 December 2023
- CNIL (France) - SAN-2019-010 (category Article 21(2) GDPR) (section English Machine Translation of the Decision)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data and on the free movement of such data; Having62 KB (10,001 words) - 17:09, 6 December 2023
- breach of Article 32 GDPR. The Luxembourg DPA issued a fine of €5,330 under Article 83(2) GDPR, ordered the Company to cease the processing of the data subject’s55 KB (9,079 words) - 16:57, 6 December 2023
- error at the side of the controller, it seemed that the data subject had signed the contract by SMS and had consented to the contract. The DPA determined34 KB (5,358 words) - 13:16, 13 December 2023
- NAIH (Hungary) - NAIH-2020/2204/8 (category Article 24(2) GDPR) (section English Machine Translation of the Decision)of the law of the (c) infringed Article 12 (4) of the Regulation. 2. The Authority shall establish the 25 May and 2018 of the Debtor the illegality of60 KB (9,820 words) - 10:08, 17 November 2023
- resident of. kitchen and, at the time of the facts that are the subject of the claim, she was President of the Community of Owners and that is, taking advantage24 KB (3,631 words) - 13:20, 13 December 2023
- purposes. The Icelandic DPA launched an investigation regarding the lawfulness of the processing. The Icelandic DPA first highlighted that the use of the blood44 KB (7,044 words) - 08:42, 13 December 2021
- with article 65 of the LOPDGDD, the claim filed by the claimant was admitted for processing. FIFTH: On June 2, 2022, the Director of the Spanish Agency22 KB (3,380 words) - 13:02, 13 December 2023
- AEPD (Spain) - PS/00214/2022 (category Article 9(2) GDPR) (section English Machine Translation of the Decision)First, The DPA started by acknowledging that 'Thomas' was the controller for the processing regarding the second survey. The DPA stated that the company131 KB (20,916 words) - 12:38, 13 December 2023
- CNIL (France) - SAN-2021-020 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)existence of the violation of Article 32 GDPR, contrary to what SLIMPAY claimed during the procedure. The DPA considered that, given the nature of the personal56 KB (9,069 words) - 17:02, 6 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 310/161/23 (section English Machine Translation of the Decision)to comply with an order of the DPA, the DPA imposed an administrative fine of €440,000 on the controller pursuant to Article 58(2)(i) GDPR. Share your comments71 KB (11,552 words) - 13:40, 12 January 2024
- function; " Article 37.3 and 4 of the RGPD indicates on the designation of the DPD “When the responsible or the person in charge of the treatment is an authority13 KB (2,002 words) - 14:29, 13 December 2023
- substance of the case is undisputed to the extent that the parties unanimously described the facts of the case and the clarification of the question relevant19 KB (2,936 words) - 13:55, 12 May 2023
- Court of Appeal of Brussels - 2022/AR/560 & 2022/AR/564 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)publication of the press release. It was only competent to rule on the decisions of the DPA. Insofar that the parties invoked Article 54(2) GDPR, the Court stated206 KB (30,485 words) - 09:54, 14 December 2023
- paragraph 1 f) of article 57, both of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons23 KB (3,523 words) - 14:46, 13 December 2023
- and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and the free circulation of these17 KB (2,571 words) - 14:51, 13 December 2023
- where the personal data of the claimant, as well as, the data of the Real Estate and where the management is agreed, for part of the Real Estate of the purchase22 KB (3,385 words) - 13:35, 13 December 2023
- treatment. The IMY decides on the basis of Articles 58 (2) and 83 of the Data Protection Ordinance and Chapter 6. § 2 of the Data Protection Act that the regional43 KB (4,600 words) - 17:08, 23 March 2022
- these reasons, the processing of data in question needs to benefit from one of the exceptions of art. 9.2 GDPR. concludes that the transfer of data from special58 KB (8,665 words) - 16:10, 1 February 2022
- Commissioner (Cyprus) - 11.17.001.008.001 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)reported to the DPA, according to article 33 of the GDPR as it is likely to cause risk to the rights and freedoms of the data subject. The DPA also held61 KB (9,412 words) - 16:52, 6 December 2023
- informing him of this fact. On June 2, 2020, the claimed status of solution is requested of the errors detected after the claims of claimants 1 and 2. With date28 KB (4,350 words) - 13:57, 13 December 2023
- es Page 2 2/9Along with the claim, it provides documentary evidence (Annex I) that proves thepresence of the camera (s) on the exterior of the facade oriented18 KB (2,721 words) - 14:11, 13 December 2023
- person/manager for the eight insurance policies where the employer was the policyholder. The data subject was the person of contact of the controller regarding52 KB (8,323 words) - 13:17, 13 December 2023
- undermines the clarity of the message. The Spanish DPA also established that the cookie policy (in the second layer of the banner or on the Privacy Policy15 KB (2,200 words) - 14:23, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9361186 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)made by the Secretary General under Article. 15 of the Regulation of the Guarantor No 1/2000 on the organization and operation of the office of the Guarantor31 KB (5,041 words) - 15:49, 6 December 2023
- APD/GBA (Belgium) - 64/2020 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)without the knowledge of the person concerned. but also of the correspondent. The Litigation Chamber also states that the legal ground for use of the e-mail7 KB (937 words) - 17:00, 12 December 2023
- VG Mainz - 1 K 584/19.MZ (category Article 58(2) GDPR) (section English Machine Translation of the Decision)street. The DPA was allowed to issue a reprimand, Art. 58(2)(b) GDPR. On the basis of Art. 58(2)(f) GDPR, the DPA was not entitled to order the removal58 KB (9,665 words) - 08:51, 25 November 2020
- FOUNDATIONS OF LAW Yo By virtue of the powers that article 58.2 of the RGPD recognizes to each authority of control, and according to the provisions of articles26 KB (3,846 words) - 12:42, 13 December 2023
- gob.es 3/8 FOUNDATIONS OF LAW I In accordance with the provisions of article 84.3) of Law 9/2014, of 9 May, General of Telecommunications (LGT), the competition21 KB (3,137 words) - 14:33, 13 December 2023
- AEPD (Spain) - PS/00069/2020 (category Article 83(2)(k) GDPR) (section English Machine Translation of the Decision)entity. 2.- The personal data of the users of the prepaid cards that are registered in the Lycamobile register do not correspond to the data of the person20 KB (3,066 words) - 13:55, 13 December 2023
- APD/GBA (Belgium) - 28/2020 (category Article 21(2) GDPR) (section English Machine Translation of the Decision)information. 3. Reason 3.1. As regards the infringement of Articles 17(1)(c), 21(2) and 21(3) AVG 11. It appears from the documents in the file that, following27 KB (4,363 words) - 16:56, 12 December 2023
- includes the data of all the other citizens of the municipality who requested the intervention of Mr. Y in his capacity as Mayor. During the hearing of 5 November32 KB (5,190 words) - 16:51, 12 December 2023
- AEPD (Spain) - PS/00436/2021 (category Article 13(2) GDPR) (section English Machine Translation of the Decision)proposed to sanction the defendant with a fine of €1,500, for the infraction of the article 13 of the RGPD, since at the time of the claim it did not have20 KB (3,085 words) - 12:24, 13 December 2023
- publish the forthcoming decision of the Council of State in the same form as the contested deliberation; 3°) to charge the CNIL with the sum of 5,000 euros18 KB (2,677 words) - 09:50, 10 September 2021
- identify the error in the procedure. In the meantime, with the intervention of the Office of the Minister of Tourism and the necessary explanations, the operation65 KB (10,533 words) - 10:28, 27 January 2022
- accordance with the provisions of section 2 of article 56 in relation to section 1 f) of article 57, both of the GDPR; and in article 47 of the LOPDGDD. SECOND:20 KB (3,077 words) - 10:46, 13 December 2023
- imposed by §§ 5.2 and 6.1 of the Austrian Financial Markets Money Laundering Act (FM-GwG). The DPA pointed out that § 5.2 FM-GwG (Application of due diligence)33 KB (5,254 words) - 13:33, 12 May 2023
- ANSPDCP (Romania) - 12.01.2023 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)data. Hence, the controller violated Articles 32(1)(b) and 32(2) GDPR. Pursuant to its Article 58(2) GDPR statutory powers, the DPA ordered the controller5 KB (613 words) - 15:13, 13 December 2023
- dated September 3, 2021, for the purposes provided in its Article 64.2 of the LOPDGDD, the Director of the Spanish Agency for the Protection of Data agreed20 KB (3,142 words) - 13:31, 13 December 2023
- AEPD (Spain) - PS/00315/2020 (category Article 28(3)(g) GDPR) (section English Machine Translation of the Decision)document 3, written by the complainant addressed to the complainant, of *** DATE.3, entitled "Notice of non-payment for the provision of the service contracted62 KB (10,401 words) - 14:35, 21 November 2023
- violation of the fundamental rights of the defendant. Regarding the violation of the right of rectification of Article 16 GDPR and Article 14 of LOPDGDD63 KB (10,203 words) - 13:01, 13 December 2023
- particular, the amount of the individual claims, the age, the number and the time that had elapsed since the payment of the claim, as well as the origin of the32 KB (5,232 words) - 09:40, 10 September 2021
- APD/GBA (Belgium) - 03/2021 (category Article 24(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal32 KB (4,880 words) - 16:50, 12 December 2023
- APD/GBA (Belgium) - 54/2021 (section The notion of processing of personal data within the meaning of Article 4 GDPR)with the principle of clarity and predictability of the law, as derived from the jurisprudence of the Court of Justice of the European Union and the European73 KB (11,238 words) - 16:59, 12 December 2023
- result, the DPA fined the controller €70,000 for a violation of Article 6(1) GDPR. To determine the amount of the fine, the DPA rejected almost all the mitigating55 KB (9,017 words) - 10:46, 13 December 2023
- AEPD (Spain) - EXP202207084 (category Article 2(2)(c) GDPR) (section English Machine Translation of the Decision)copy to the concierge of the school where the minor son of both is studying, to the address ***EMAIL.1. Thus, the aforementioned email reports the existence15 KB (2,384 words) - 10:46, 13 December 2023
- ANSPDCP (Romania) - Fine against Estee Lauder Romania (section English Machine Translation of the Decision)a fine of EUR 3.000. Share blogs or news articles here! The decision below is a machine translation of the Romanian original. Please refer to the Romanian3 KB (290 words) - 15:17, 13 December 2023
- AEPD (Spain) - PS/00117/2022 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)with the provisions of Title VII, Chapter I, Second Section, of the LOPDGDD, having knowledge of the following points: The list of members of the personnel30 KB (4,623 words) - 12:58, 13 December 2023
- infringement lead to the DPA imposing a fine of € 5000 on JAVA. In relation to the cookie policy, the Spanish DPA held that the wording of the cookie banner "This26 KB (4,150 words) - 14:05, 13 December 2023
- discrimination. With the same complaint, he requested the revision of article 44 of the Regulation on the Organization and Operation of the Units of the Joint Legal14 KB (2,093 words) - 17:06, 10 February 2022
- AEPD (Spain) - EXP202105693 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)a fine of €40,000 which was reduced to €24,000 with the application of two reductions: the acceptance of guilt, and the voluntary payment of the fine. Share49 KB (7,579 words) - 13:15, 13 December 2023
- is informed of the breach. The DPA also reminded the data controller of this obligation in the e-mail they sent informing them of said data breach. Therefore29 KB (4,374 words) - 16:03, 19 January 2024
- address the complaint raised. As of the date of resolution of this complaint, no allegations. LEGAL GROUNDS FIRST: The Director of the Spanish Agency of Data19 KB (3,100 words) - 14:50, 13 December 2023
- Page 3 3/6b) the treatment is necessary for the performance of a contract in which theinterested is part or for the application at the request of this14 KB (2,075 words) - 13:48, 13 December 2023
- subject of the complaint and the edition and re-publication of the same editing the image and removing the reference to the names of the people whose information21 KB (3,099 words) - 13:59, 13 December 2023
- Commissioner (Cyprus) - 11.17.001.008.042 (category Article 7(3) GDPR) (section English Machine Translation of the Decision)necessary for the discharge of obligations laid down by law or by the collective agreements for the purposes of the recruitment, the performance of the contract4 KB (472 words) - 16:52, 6 December 2023
- data subject. The City hall facilitated the access to his data by the data subject in the course of the investigation process of the Spanish DPA and therefore38 KB (6,303 words) - 13:50, 13 December 2023
- plaintiff for annulment of the decision of the defendant of the Agency for the Protection of Personal Data of the Republic of Croatia, CLASS: UP/I-041-02/20-08/4315 KB (2,261 words) - 15:55, 30 October 2023
- sign to the social center. Copy of the poster of the rules of use and enjoyment of said premises. Copy of the regulatory contract for the cafeteria service28 KB (4,619 words) - 13:53, 13 December 2023
- responsible for the treatment of the services of the claimed, and consequently, the responsibility of the Contact with the claimed was from the aforementioned29 KB (4,386 words) - 14:20, 13 December 2023
- in the evidence of the different writings filed with this Agency, rectify the data and access the account to exercise the right of deletion of the claimant…”20 KB (3,052 words) - 08:17, 16 April 2024
- receipt of the request, of the reasons for the failure to act and of the possibility of lodging a complaint with a supervisory authority and of taking legal18 KB (2,922 words) - 14:51, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 4431/161/21 (category Article 25(2) GDPR) (section English Machine Translation of the Decision)purposes of the processing. The DPA found that the processing of all information about the patients' healthcare appointments also failed to meet the fairness54 KB (8,279 words) - 13:53, 21 March 2024
- the RGPD grants to each authority of control and in accordance with the provisions of articles 47, 48.1, 64.2 and 68.1 of the LOPDGDD, The Director of31 KB (4,864 words) - 13:27, 13 December 2023
- order to promote the services of the claimed and based on the contract of the person in charge of the treatment on behalf of VDF states the following: Calls38 KB (5,945 words) - 12:14, 9 June 2021
- and according to the provisions of article 47 of the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights11 KB (1,490 words) - 13:58, 13 December 2023
- provided the claimant with the proper response, in the event of exercise of the rights regulated in articles 15 to 22 of the GDPR. The result of said transfer18 KB (2,693 words) - 13:31, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9556625 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)pursuant to art. 15 of the Guarantor Regulation n. 1/2000 on the organization and operation of the office of the Guarantor for the protection of personal data57 KB (9,144 words) - 15:55, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9468523 (section English Machine Translation of the Decision)[…] »(Article 6, par. 2, of the RGPD), with the consequence that the provisions contained in art. 2-ter, paragraphs 1 and 3, of the Code, where it is established22 KB (3,488 words) - 15:52, 6 December 2023
- AP (The Netherlands) - 24.03.2020 (category AP (The Netherlands)) (section English Machine Translation of the Decision)paragraph, of the AVG. […] b) the processing is necessary for the performance of obligations and the exercise of specific rights of the controller or the data48 KB (7,461 words) - 17:04, 12 December 2023
- article 58.2 of the RGPD recognizes to each authority of control, and as established in articles 47 and 48 of the LOPDGDD, the Director of the Spanish Data28 KB (4,592 words) - 14:25, 13 December 2023
- (hereinafter, the accused party), for the use of the image of B.B.B., minor son of C.C.C.. The reported facts are the following: “The Civil Guard of ***LOCALIDAD28 KB (4,608 words) - 13:27, 13 December 2023
- interest (from the controller and the third parties to be recipients of the data) linked to the assessment of the financial solvency of the data subjects602 KB (102,229 words) - 14:21, 13 December 2023
- CNIL (France) - SAN-2021-003 (category Article 4(2) GDPR) (section On the processing of personal data)lockdown measures. The French DPA questionned the Ministry of the Interior on the subject. In absence of reply, the DPA initated an inquiry. The Ministry was39 KB (6,015 words) - 17:11, 6 December 2023
- ANSPDCP (Romania) - BNP Paribas Personal Finance SA (section English Machine Translation of the Decision)Bucharest Branch. The Romanian DPA investigated the case and found that the operator did not prove the existence of the prior consent of the person concerned5 KB (673 words) - 15:16, 13 December 2023
- and 2) of the GLT: -The cessation of the offending activity, before or during the processing of the former offending party (section g). After the evidence15 KB (2,411 words) - 13:49, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9446659 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)constitute a violation of the aforementioned art. 19, paragraph 3, of the Code [n.d.r. now reproduced in art. 2-ter, paragraphs 1 and 3, of the Code], where there25 KB (3,911 words) - 15:51, 6 December 2023
- AEPD (Spain) - PS/00262/2020 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)for the clarification of the facts in question, by virtue of the powers of investigation granted to the control authorities in article 57.1 of the Regulation22 KB (3,293 words) - 14:23, 13 December 2023
- CNPD (Portugal) - Deliberação 2021/1569 (category Article 83(3) GDPR) (section English Machine Translation of the Decision)vast set of third parties in the past, including the offices of the Portuguese Prime Minister, the Minister of Internal Administration (MAI) and the Public11 KB (1,491 words) - 16:54, 6 December 2023
- AZOP (Croatia) - Decision 04-07-2022 (redirect from AZOP (Croatia) - Decision of 04-07-2022) (section English Machine Translation of the Decision)investigation, the DPA determined that the cameras indeed partially monitored the public space of the city of Zagreb. The Croatian DPA noted that video surveillance14 KB (2,038 words) - 15:20, 30 October 2023
- Object of complaint: The subject matter of the complaint is the question of whether the respondent was right to make the execution of the deletion of his23 KB (3,622 words) - 13:57, 12 May 2023
- AEPD (Spain) - PS/00389/2019 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)virtue of the powers conferred on each individual by Article 58(2) of the GPRS, the authority, and in accordance with Article 47 of Organic Law 3/2018,31 KB (4,819 words) - 14:34, 13 December 2023
- HDPA (Greece) - 25/2022 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)Consequently, the data subject lodged a complaint with the DPA regarding the processing of their data. The controller stated before the DPA that the data processing48 KB (7,803 words) - 13:29, 11 October 2022
- provided at the request of the data subject, provided otherwise the identity of the data subject has been verified. 2. The controller shall facilitate the processing27 KB (4,159 words) - 10:13, 17 November 2023
- FIRST: DISMISS the delivery of the physical copy of the recording of the review of the END of Degree Project (TFG) made on 07/20/2021 through the Microsoft18 KB (2,786 words) - 12:38, 13 December 2023
- IMY (Sweden) - DI-2021-4355 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)subject of the complaint and was therefore not part of the DPA’s investigation. As a result, the DPA concluded that the controller had not protected the data28 KB (3,101 words) - 09:49, 7 June 2023
- AEPD (Spain) - E/03884/2020 (category Article 2(1) GDPR) (section English Machine Translation of the Decision)manages the underground service of Bilbao, one of the main Spanish cities. In the context of the covid-19 pandemic, the company was using thermal cameras to verify56 KB (8,737 words) - 09:35, 26 May 2021
- relating to the other account; the absence of fraud and guilt in the action of the defendant; the non-existence of infringement of article 32.1 of the GDPR to54 KB (8,451 words) - 13:35, 13 December 2023
- From the perspective of the website operator, the consent was obtained before the commencement of the proceedings, and the privacy policy on the website20 KB (3,151 words) - 16:38, 6 December 2023
- HDPA (Greece) - 20/2020 (category Article 2(2)(a) GDPR) (section English Machine Translation of the Decision)thecasementioned in the history of the present.Attended by the President of the Authority, Konstantinos Menoudakos and the regular members of the Authority Spyridon29 KB (4,578 words) - 15:35, 6 December 2023
- paragraph second, of the LSSI. II The joint assessment of the documentary evidence in the procedure brings to knowledge of the AEPD, a vision of the denounced14 KB (2,070 words) - 13:43, 13 December 2023
- than if the partial faces that appear in it appear pixelated. cen. - Examining the profile of the owner of the origin of the video on the social network28 KB (4,527 words) - 12:35, 13 December 2023
- AZOP (Croatia) - Decision 29-06-2022 (Center for Social Welfare) (section English Machine Translation of the Decision)doubted the lawfulness of the publication and therefore filed a complaint at the Croatian DPA. The DPA held that the controller did not prove the existence17 KB (2,660 words) - 15:35, 30 October 2023
- article 22.2 of the LSSI regarding the irregularities detected in the cookie policy of the website it owns. In the opening agreement determined that the sanction52 KB (7,564 words) - 12:41, 13 December 2023
- persons the municipality's website. The personal information covered by the breach is the birth number and title of the document. The title of the document26 KB (3,885 words) - 08:43, 7 May 2022
- Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data25 KB (4,037 words) - 14:55, 13 December 2023
- Is the processing of electricity supply data, without the consent of the data subject, a breach of Article 6 (1) GDPR? The Spanish DPA held that the processing24 KB (3,939 words) - 14:03, 13 December 2023
- (i.e. the protection of the privacy rights of every citizen to be informed about the use of the camera images when making use of the services of a carwash)35 KB (5,303 words) - 17:01, 12 December 2023
- breach of Article 5.2 of the GDPR, Article 24.1 of the GDPR and Article 33 of the GDPR can be established. - As regards the involvement of the Data Protection55 KB (8,810 words) - 16:55, 12 December 2023
- sedeagpd.gob.es 2/6 2. In the event of exercising the rights regulated in articles 15 to 22 of the RGPD, accreditation of the response provided to the claimant15 KB (2,292 words) - 13:56, 13 December 2023
- incidents, the DPA only became aware of a data breach 2-3 months after it had occurred. In conclusion, the DPA imposed a €150,000 fine on the controller9 KB (974 words) - 15:54, 20 December 2022
- AEPD (Spain) - PS/00273/2019 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)58.2 of the RGPD grants to each supervisory authority, and in accordance with the provisions of Articles 47 and 48 of the LOPDGDD, the Director of the16 KB (2,359 words) - 14:24, 13 December 2023
- Persónuvernd (Iceland) - 2022030544 (category Article 2(2)(c) GDPR) (section English Machine Translation of the Decision)Generally, this type of processing would fall within the scope of the GDPR. However, in the present case the Icelandic DPA recalled that the GDPR includes an9 KB (1,242 words) - 08:18, 28 June 2023
- DVI (Latvia) - SIA "TET" (redirect from DVI (Latvia) - Decision of 9 September 2022) (section English Machine Translation of the Decision)re-assessing the final amount of the administrative fine, the DPA briefly recalled the material violations. The Latvian DPA noted that the controller had114 KB (17,942 words) - 15:46, 2 November 2022
- Datatilsynet (Denmark) - 2020-432-0037 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)held that the Family Court was in serious violation of Article 32(1) GDPR due to the scope of the data mishandling and the sensitivity of the subject. Moreover46 KB (7,343 words) - 16:39, 6 December 2023
- Court of Appeal of Brussels - 2021/AR/205 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)entitled to use the name and image of the music artist of the musical works which are the subject matter of those agreements, for the duration of the copyright92 KB (14,873 words) - 09:03, 20 August 2021
- AEPD (Spain) - EXP202100897 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)accordance with the provisions of article 65.5 of the LOPDGDD, the processing of the claim continues. FOURTH: On 01/13/2022, the Director of the AEPD agreed:72 KB (11,671 words) - 13:34, 13 December 2023
- Copy of the Didactic Schedules of the Physics and Chemistry area of 3 C, corresponding to the academic year 2019-2020. Statistical data of the academic25 KB (3,972 words) - 14:47, 13 December 2023
- 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons in the regarding the processing of personal21 KB (3,123 words) - 14:25, 13 December 2023
- AZOP (Croatia) - Decision 31-05-2022 (redirect from AZOP (Croatia) - Decision of 31 May 2022) (section English Machine Translation of the Decision)year - the copy is identical to the original" and the seal of the School with the signature of the secretary, which is in replacement until of the secretary's17 KB (2,433 words) - 15:45, 30 October 2023
- before the Court of First Instance nº3 of Pontevedra. 2. Order to enforce the Award dated March 25, 2019 of the Court of First Instance nº3 of Pontevedra26 KB (3,848 words) - 14:31, 13 December 2023
- logic of the case; The holding of the DPA/court. Ideally, the summary follows the structure of the original decision and expresses the DPA's position on each8 KB (1,355 words) - 13:38, 1 February 2024
- on the webpage. The Bulgarian Parliament adopted Law on Measures and Actions during the the state of emergency. One of the measures requires the establishment25 KB (3,096 words) - 17:48, 25 November 2021
- HDPA (Greece) - 24/2022 (category Article 2 GDPR) (section English Machine Translation of the Decision)satisfy the right of access. The first complaint concerned a breach of the provisions concerning the control of the computer during the data subject's work8 KB (1,087 words) - 16:32, 15 November 2022
- Sanctioner, the Director of the Spanish Data Protection Agency. II In the present case, the claimant accredits by attaching a copy of this, the receipt of an SMS12 KB (1,685 words) - 12:41, 13 December 2023
- HDPA (Greece) - 12/2022 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)6475628, contact@dpa.gr / www.dpa.gr, - employee, the The latter finds the existence of a problem in the continuous attendance of her course by the complainant46 KB (7,390 words) - 08:07, 1 April 2022
- Tietosuojavaltuutetun toimisto (Finland) - 3846/157/2019 (section English Machine Translation of the Decision)the DPA ordered the controller to delete the data subject’s data in accordance with Article 17 GDPR. Pursuant to Article 58(2)(d) GDPR, the DPA ordered the4 KB (424 words) - 13:05, 3 March 2024
- data. The claim of the claimant refers to the elimination, in the motor index of search the following urls: 1. *** URL.1 2. *** URL.2 3. *** URL.3 SECOND:40 KB (6,518 words) - 13:29, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 1198/161/2022 (category Article 9(2)(a) GDPR) (section English Machine Translation of the Decision)accepted the decision of the Data Protection Commissioner and the Sanctions College, and the decision is also binding on them. The sanction panel of the Office13 KB (1,847 words) - 15:52, 11 December 2023
- Article 58.2 of the RGPD, the Spanish Agency of As a supervisory authority, it has a range of powers corrective measures in the event of a breach of the RGPD14 KB (2,017 words) - 13:57, 13 December 2023
- article 58.2.b) of the RGPD, for an infringement of article 13 of the RGPD, typified in article 83.5 of the RGPD, a warning sanction. In view of all the actions20 KB (3,075 words) - 14:32, 13 December 2023
- IMY decides on the basis of Articles 58 (2) and 83 of the Data Protection Ordinance and Chapter 6. § 2 of the Data Protection Act that the hospital board47 KB (5,207 words) - 18:51, 21 March 2022
- Court of Appeal of Brussels - 2020/AR/329 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)resources at the disposal of the DPA was not judged conclusive neither as it was not supported by any data. Morover, "[the DPA] is at the service of the citizen48 KB (7,560 words) - 09:03, 20 August 2021
- means.2. In the cases referred to in Article 11(2), the controller shall not refuse to act at the request of the data subject for the purpose of exercising16 KB (2,571 words) - 14:49, 13 December 2023
- Inspection of Data proceeded, on June 3, 2020, to transfer the claim, of in accordance with the provisions of article 65.4 of Organic Law 3/2018, of 5 December34 KB (5,427 words) - 14:30, 13 December 2023
- article 58.2 of the RGPD recognizes to each authority of control, and as established in arts. 47 and 48.1 of the LOPDGDD, the Director of The Spanish Data14 KB (2,143 words) - 14:09, 13 December 2023
- OLG Linz - 6R49/19x (category Article 2(1) GDPR) (section English Machine Translation of the Decision)affected by the operation. At the end of the trial, the plaintiff is satisfied with the result of the transplantation of his own hair. The treatment was33 KB (5,113 words) - 09:50, 14 December 2023
- ANSPDCP (Romania) - Fine against Banca Transilvania SA (category Article 32(2) GDPR) (section English Machine Translation of the Decision)them at the request of the controller. Finally, the DPA also took into account that the disclosure of personal data in the public space (on the internet)7 KB (845 words) - 15:17, 13 December 2023
- DPC (Ireland) - Meta Platforms Ireland Limited (Instagram) - IN-18-5-7 (section English Machine Translation of the Decision)case, the GDPR" (EDPB - 119). Turning to the facts of the case, the EDPB outlined a number of factors which, in contradiction to the view of the DPC, support21 KB (3,069 words) - 14:17, 1 February 2023
- UODO (Poland) - DKN.5101.25.2020 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)resulting from the GDPR. The DPA also considered that the confidentiality of the processed data was breached in the course of the performance of the employee63 KB (10,088 words) - 09:52, 17 November 2023
- control and in accordance with the provisions of articles 47, 48.1, 64.2 and 68.1 of the LOPDGDD, The Director of the Agency is competent to initiate and resolve17 KB (2,461 words) - 13:22, 13 December 2023
- with article 65 of the LPDGDD Law, when assessing possible rational indications of a violation of the rules in the field of competences of the Spanish Data20 KB (3,014 words) - 13:16, 13 December 2023
- theSection 3 of Chapter VIl of the GDPR, must, under the terms of paragraph 3 of article 68 of theregulation, be “composed of the director of a supervisory40 KB (5,935 words) - 16:55, 6 December 2023
- BKP. 3.2 More about the requirements of the Personal Data Act The Personal Data Act implements the European Privacy Regulation in Norwegian law. The rules19 KB (2,942 words) - 09:03, 14 September 2023
- provided the claimant with the proper response, in the event of exercise of the rights regulated in articles 15 to 22 of the RGPD. The result of said transfer18 KB (2,721 words) - 14:51, 13 December 2023
- No. 2.We also understand that it is necessary to bear in mind that the ship wherefound the cameras that were the subject of the complaint (1.2 of plot18 KB (2,749 words) - 13:57, 13 December 2023
- AEPD (Spain) - PS/00433/2020 (category Article 58(2)(c) GDPR) (section English Machine Translation of the Decision)virtue of the powers that article 58.2 of Regulation (EU) 2016/679, of theEuropean Parliament and of the Council, of April 27, 2016, regarding the Protection23 KB (3,592 words) - 14:40, 13 December 2023
- infringement, by the defendant to the provisions of article 21 of the current Law 34/2002, of July 11, on Services of the Society of the Information and15 KB (2,337 words) - 14:24, 13 December 2023
- AZOP (Croatia) - Decision 29-06-2022 (bank) (redirect from AZOP (Croatia) - Decision of 29 June 2022 - unknown Bank) (section English Machine Translation of the Decision)that the names of the winners will be published on the website within seven days from the day of the draw. The name of the winner refers to all the data20 KB (3,166 words) - 15:36, 30 October 2023
- case for the offer or sale of products or services. FIFTH: On February 2, 2021, the instructor of the procedure agreed to the opening of a period of practical22 KB (3,321 words) - 14:37, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9269629 (section English Machine Translation of the Decision)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data38 KB (5,724 words) - 15:47, 6 December 2023
- to the Act of 1 August 2018 on the organisation of the National Commission for Having regard to the Act of 1 August 2018 on the organisation of the National69 KB (11,315 words) - 13:30, 19 January 2022
- with the court and with the other counterparties in the proceedings. The decision from the Spanish DPA does not analyze in detail the articles of the GDPR17 KB (2,544 words) - 13:39, 13 December 2023
- within the meaning of Article 5(1)(c) of the GDPR. The FPS Finance therefore does not comply with the data minimization principle. Moreover, the DPA ruled124 KB (18,772 words) - 17:01, 12 December 2023
- HDPA (Greece) - 7/2024 (category Article 58(2)(c) GDPR) (section English Machine Translation of the Decision)certified pursuant to both Article 58(2) GDPR. and Article 21 of N. 2472/1997. Notably, the DPA focused only on the portion of the data subject's compliant concerning7 KB (795 words) - 12:05, 5 April 2024
- AEPD (Spain) - PS/00322/2020 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)so by virtue of the Law of the Union or of the Member States ”. The violation of article 32 of the RGPD is typified in article 83.4.a) of the aforementioned26 KB (3,840 words) - 14:28, 13 December 2023
- NAIH (Hungary) - NAIH/2020/2000/5 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)regard to the mandatory data provided on the data sheet, data management is a condition for the use of the services of the site. On the basis of the reply24 KB (3,815 words) - 10:11, 17 November 2023
- for the clarification of the facts in question, by virtue of the powers of investigation granted to the control authorities in article 57.1 of the Regulation29 KB (4,480 words) - 14:27, 13 December 2023
- period of time in which the breach has been happening, and (iii) the acceptance by the defendant of the cookies guide of the AEPD], the AEPD understood that31 KB (4,757 words) - 13:52, 13 December 2023
- CNPD (Luxembourg) - Délibération n° 24FR/2022 (category Article 13(2)(a) GDPR) (section English Machine Translation of the Decision)Company A on the basis of Article 37 er of the law of 1 August 2018 on the organization of the National Commission for the data protection and the general data82 KB (11,472 words) - 16:58, 6 December 2023
- LPACAP), for the alleged violation of article 5.1.c) of the GDPR and article 13 of the GDPR, typified in Article 83.5 of the GDPR. FIFTH: Once the aforementioned24 KB (3,717 words) - 13:04, 13 December 2023
- September 2022, the DPA dismissed the complaint because it concerned the processing of personal data that falls outside the scope of the Norwegian Personal19 KB (2,858 words) - 10:06, 17 November 2023
- VDAI - NVSC vs UAB (category Article 58(2)(f) GDPR) (section English Machine Translation of the Decision)with the help of the app and deleted part of the personal data. The decision of the SDPI may be appealed to a court within one month from the date of its11 KB (1,573 words) - 09:18, 17 November 2023
- CNIL (France) - Google Analytics (no case number) (section English Machine Translation of the Decision)consisted of the integration of the Google Analytics functionality on the company's website for the purpose of measuring the audience and performance of its40 KB (5,904 words) - 16:51, 24 February 2022
- Akamai server instead of the company's customer. The Cookie “AKA_A2” appears on the website ***URL.2 as strictly necessary, (***URL.3) The “RT” Cookie, although68 KB (10,193 words) - 12:40, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9861249 (section English Machine Translation of the Decision)relationship with the controller. After the termination of the agreement with the processor, the controller phased out the devices. However, the controller forgot87 KB (14,104 words) - 15:45, 6 December 2023
- AEPD (Spain) - PS/00029/2020 (category Article 35(3)(b) GDPR) (section English Machine Translation of the Decision)coordinate the actions of the technicians and to liaise with the ITA management to keep them informed of the evolution of the event. It will coordinate the necessary44 KB (6,943 words) - 13:49, 13 December 2023
- basis for the email, the origin of the data used to send the email, the recipients of the email, the number of persons concerned by the process, the identity27 KB (4,166 words) - 17:06, 6 December 2023
- e-mail the newsletter received by the Applicant in his complaint of 20 February 2020. The Applicant submitted that in view of the contents of the Applicant's30 KB (4,563 words) - 10:12, 17 November 2023
- AZOP (Croatia) - Decision 10-08-2023 (redirect from AZOP (Croatia) - Decision of 10 August 2023) (section English Machine Translation of the Decision)28454963989 on the basis of Article 57 paragraph 1 and of Article 58, Paragraphs 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council19 KB (2,955 words) - 16:29, 5 December 2023
- article 65 of the LPDGDD Act, on appreciating the possible rational indications of a breach of the rules within the scope of the competences of the Spanish52 KB (8,416 words) - 12:59, 13 December 2023
- gob.es 2/7 THIRD: On September 2, 2020, the Director of the Spanish Agency of Data Protection agreed to initiate a sanctioning procedure to the claimed20 KB (2,973 words) - 14:09, 13 December 2023
- level of security, breaching Article 32 GDPR. The risk analysis that the controller provided was the output of the ‘GESTIONA EIDP’ tool of the DPA itself10 KB (1,343 words) - 13:13, 13 December 2023
- facts suppose, on the part of the entity claimed, the commission of theinfringement of article 22.2 of the LSSI, according to which: “The service providersmay15 KB (2,192 words) - 14:36, 13 December 2023
- accordance with the provisions of section 2 of article 56 in relation to section 1 f) of article 57, both of the RGPD; and in article 47 of the LOPDGDD. C/29 KB (4,648 words) - 12:38, 13 December 2023
- (violation of articles 133 and 134 of Law 2/2014 of 03/25, on the management and use of soil of the Balearic Islands, according to the copy of the resolution56 KB (9,356 words) - 10:43, 13 December 2023
- provided the claimant with the proper response, in the event of exercise of the rights regulated in articles 15 to 22 of the GDPR. The result of said transfer19 KB (3,027 words) - 14:48, 13 December 2023
- AEPD (Spain) - PS/00320/2020 (category Article 58(2)(i) GDPR) (section English Machine Translation of the Decision)They considered the respondent’s lack of cooperation with the AEPD during the investigation of the complaint, and the respondent’s use of the claimant’s basic18 KB (2,736 words) - 14:28, 13 December 2023
- satisfied the claims of the claimant. Consequently, with dated June 3, 2020, for the purposes set forth in article 64.2 of the LOPDGDD, The Director of the Spanish21 KB (3,154 words) - 14:07, 13 December 2023
- 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal96 KB (13,984 words) - 16:57, 6 December 2023
- 1 f) of article 57, both of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 regarding the protection of natural26 KB (3,997 words) - 18:59, 26 February 2024
- AEPD (Spain) - PS/00220/2020 (category Article 83(2)(b) GDPR) (section English Machine Translation of the Decision)for the clarification of the facts in question, by virtue of the powers of investigation granted to the control authorities in article 57.1 of the Regulation28 KB (4,295 words) - 14:11, 13 December 2023
- AEPD (Spain) - PS/00340/2019 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)Notwithstanding the above, for the specific case of the exercise of the right to oppose the processing of data for the sending of electoral propaganda,23 KB (3,554 words) - 14:31, 13 December 2023
- against the respondent, by the alleged violation of Article 5.1(f) of the GDPR, Article 5.1(b) of the GDPR, as set out in Article 83.5 of the GDPR. FOURTH:15 KB (2,317 words) - 13:59, 13 December 2023
- relating to the claim raised before this Agency and on the exercise of the right exercised. On 3 April 2018, in view of the claim for the right of access,22 KB (3,500 words) - 14:50, 13 December 2023
- 6/13 b) The processing of personal data without the concurrence of any of the conditions of legality of the treatment established in article 6 of the Regulation27 KB (4,189 words) - 14:44, 13 December 2023
- (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data62 KB (10,509 words) - 16:58, 12 December 2023
- whether the processing is automatic or not, cf. Number 4 Article 3 of the Act and point 2. Article 4 Regulation. This case concerns the processing of personal26 KB (4,135 words) - 09:59, 6 May 2021
- by the complaining party, the video object of the complaint is only available in the profile of Facebook of the claimed party. Specifically, in the following26 KB (3,971 words) - 13:26, 13 December 2023
- accordance with the provisions of article 65.4 of Organic Law 3/2018, of December 5, on the protection of personal data and guarantee of digital rights, (hereinafter34 KB (5,222 words) - 12:58, 13 December 2023
- lawful. According to the law, the data of the members of the company's management board are published in the commercial register. The DPA emphasized this does16 KB (2,456 words) - 10:29, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 4282/161/21 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)shows the sale of the right to the [travel agency name] domain name from the bankruptcy estate of the travel agency to ZZ Oy. The Office of the Data Protection56 KB (8,980 words) - 08:47, 4 March 2024
- treatment. 2. In assessing the adequacy of the level of security, particular account shall be taken of the risks posed by the processing of data, in particular12 KB (1,838 words) - 14:34, 13 December 2023
- Datatilsynet (Norway) - 20/02191 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)assessment of the municipality's feedback In the feedback of 29 April 2020, the municipality acknowledges the facts of the case as forms the basis for the Data38 KB (5,967 words) - 11:48, 7 May 2022
- UODO (Poland) - DKE.561.11.2020 (category Article 58(2)(e) GDPR) (section English Machine Translation of the Decision)83(1)-(2) and Article 83(6) in connection with Article 58(2)(e) and (i) of the Regulation of the European Parliament and of the Council EU 2016/679 of 27 April46 KB (7,322 words) - 09:51, 17 November 2023
- APD/GBA (Belgium) - 24/2021 (category Article 7(3) GDPR) (section English Machine Translation of the Decision)of cookies on the website of the Defendant does not comply with the GDPR. - the register of processing activities of the defendant does not meet the requirements110 KB (18,238 words) - 16:56, 12 December 2023
- CE - N° 429571 (section On the alleged confusion of credit card data with special categories of data)requests the cancellation for excess of power of the refusal by the President of the CNIL to this request. 3. On the one hand, under the terms of article19 KB (2,790 words) - 09:50, 10 September 2021
- violation of article 5.1.f) of the RGPD If confirmed, the aforementioned violation of article 5.1.f) of the RGPD could mean the commission of the infractions31 KB (4,578 words) - 12:11, 6 March 2024
- EFTA Court - Joined Cases E-11/19 and E-12/19 (category Article 57(3) GDPR) (section English Machine Translation of the Decision)concerning the interpretation of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons59 KB (8,242 words) - 10:47, 17 March 2021
- Data and the Free Circulation of these Data (RGPD) and the Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of the Digital45 KB (7,313 words) - 10:32, 13 December 2023
- in accordance with the provisions of art. 58.2 of the GDPR in the art. 47 of LOPDGDD. - About the Cookies Policy: The Director of the Spanish Agency is16 KB (2,380 words) - 14:01, 13 December 2023
- comply with the requirement of the law. The DPA held that when it comes to a property that is rented out (the object of a contract), the notion of personal22 KB (3,562 words) - 14:22, 13 December 2023
- determined that the candidate was at the time part of the government team of the City Council of Cacabelos, and so had access to all types of information related22 KB (3,420 words) - 12:59, 13 December 2023
- inform the user of a website about the the identity of the controller, the purposes of using specific types of cookies, the data collected, the manner31 KB (4,923 words) - 12:39, 13 December 2023
- evaluation of the effectiveness of the technical and organisational measures to ensure security of processing. The DPA considered that the controller had10 KB (1,214 words) - 11:39, 22 March 2024
- Garante per la protezione dei dati personali (Italy) - 9542071 (section English Machine Translation of the Decision)in turn in the badge'. - the reading of the data, at the time of detection of the presence, takes place through the simultaneous use of the badge (which25 KB (3,961 words) - 15:54, 6 December 2023
- understand that the claims of the complaining party. Consequently, for the purposes provided in its Article 64.2 of the LOPDGDD, the Director of the Spanish Agency22 KB (3,544 words) - 14:48, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9861827 (section English Machine Translation of the Decision)legitimate - of the holder of the exercise of his rights in court" (see cited note, p. 2); “the case is in fact pending [before the] Court of Reggio Emilia87 KB (14,525 words) - 15:45, 6 December 2023
- processing of data collected by the form of the website. Secondly, on the fact that the image and personal data of one of the partners of the complainant's law19 KB (2,957 words) - 14:45, 13 December 2023
- facts suppose, on the part of the entity claimed, the commission of theinfringement of article 22.2 of the LSSI, according to which: “The service providersmay16 KB (2,335 words) - 14:33, 13 December 2023
- platform for the candidacy for the elections of the Official College of Graduates of E.F. and Sciences of Physical Activity and Sports the Community of Madrid24 KB (3,838 words) - 13:51, 13 December 2023
- AEPD (Spain) - PS/00189/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)could lead to the commission of the offense typified in article 72.1 m) of the LOPDGDD, to be sanctioned, in accordance with art. 58.2 of the RGPD ”. Said22 KB (3,343 words) - 14:08, 13 December 2023
- questioned by the 3 complainants. While the consultation of the National Register and the subsequent processing of data of complainants 1 and 3 was justified41 KB (6,354 words) - 16:59, 12 December 2023
- UODO (Poland) - DKN.5130.2024.2020 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)Parliament and of the Council of the EU and of the EU Council 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal75 KB (12,104 words) - 09:58, 17 November 2023
- for the clarification of the facts in question, by virtue of the powers of investigation granted to the control authorities in article 57.1 of the Regulation30 KB (4,436 words) - 14:36, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9509515 (category Article 9(2)(b) GDPR) (section English Machine Translation of the Decision)determining the amount of the fine the Garante considered the following: -Article 83(2)(a) - the policy covered the processing of the personal data of 253 employees33 KB (5,342 words) - 15:52, 6 December 2023
- policyprivacy policy *** URL.3 , the possibility of receiving communications referring torents to the services of the exhibitors and / or the person in charge.As32 KB (4,992 words) - 14:00, 13 December 2023
- AZOP (Croatia) - Decision 18-12-2020 (redirect from AZOP (Croatia) - Decision of 18 December 2020) (section English Machine Translation of the Decision)in which the name i the surname of the applicant and the amount he receives annually from the Center for Social Welfare X, in the interest of the public21 KB (3,345 words) - 15:24, 30 October 2023
- BVwG - W256 2240235-1 (category Article 9(2)(f) GDPR) (section English Machine Translation of the Decision)scope of the verbal power of attorney granted to the RA as well as about the transfer of his personal data to the RA by the party involved. The authority33 KB (5,154 words) - 11:08, 21 January 2022
- 1, 64.2 and 68.1 of the Law Organic 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDD), the Director29 KB (4,607 words) - 13:38, 13 December 2023
- AEPD (Spain) - PS/00324/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)provided the data subject with a copy of its Privacy Notice and whether the categories of the data disclosed, the name of the third party, and the legal basis25 KB (3,670 words) - 14:28, 13 December 2023
- consideration, remotely, by way of electronically and at the individual request of the recipient. The concept of service of the The information society also includes18 KB (2,693 words) - 13:40, 13 December 2023
- processor. The DPA pointed out that the lack of a written agreement between the data controller and the data processor represented a breach of Article 28(3) of16 KB (2,367 words) - 10:06, 17 November 2023
- EWHC (UK) - Johnson v Eastlight Community Homes Ltd (section English Machine Translation of the Decision)notified the defendant of the error and was asked by the defendant to delete the e-mail. Subsequently, the defendant informed the claimant of the error and46 KB (7,676 words) - 10:45, 7 December 2021
- objections to the agreement to initiate the file and In accordance with the provisions of article 64.2.f) of the LPACAP, the aforementioned agreement of beginning32 KB (4,945 words) - 13:25, 13 December 2023
- AEPD (Spain) - PS/00092/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)and of the Council of 27/04/16, relating to the Protection of Individuals with regard to the Processing of Personal Data and the Free Circulation of such22 KB (3,514 words) - 13:58, 13 December 2023
- LfDI (Baden-Württemberg) - O 1018/115 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)detected. 2. assessment of evidence The facts of the case are established on the basis of the credible information provided by Knuddels and the results of the13 KB (1,926 words) - 10:22, 17 November 2023
- AP (The Netherlands) - 10.12.2020 (locatefamily.com) (category AP (The Netherlands)) (section English Machine Translation of the Decision)course of the proceedings. Chapter 2 describes the legal framework. Chapter 3 contains the assessment of the AP, after which chapter 4 gives reasons for38 KB (6,339 words) - 17:14, 12 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 3425/157/2019 (section English Machine Translation of the Decision)natural person? 3) Had the controller given the data subject the right to object to direct marketing as per Article 21 GDPR? DPA held that the controller had3 KB (276 words) - 13:05, 3 March 2024
- VGH München – 5 CS 19.2087 (category Article 6(3) GDPR) (section English Machine Translation of the Decision)sentence 1, Art. 86 GKG § 47 (1), § 52 (2), § 53 (2) no. 2, § 63 (3) sentence 1 no. 2, § 66 (3) sentence 3, § 68 (1) sentence 5 LFGB § 40 paragraph 1a Basic Law40 KB (6,397 words) - 08:03, 21 March 2022
- AEPD (Spain) - PS/00135/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)medium the image of a person. Art. 2.2, Art. 6 LO 1/1982 the holder of the right has granted the effect their express consent". Clause between the general47 KB (7,756 words) - 14:04, 13 December 2023
- 15/1999, of December 13, on the Protection of Personal data. 2º.- Regarding the consent given by the user, which is referred to in the Article 9 of the "General24 KB (3,893 words) - 14:22, 13 December 2023
- analyze it and contact the different areas in charge of managing the rights of the interested parties of the Management of the centers hospitals and Primary Care26 KB (4,017 words) - 12:37, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9429195 (section English Machine Translation of the Decision)particular, the DPA found that the logs register did not keep a record of the customer reference number, but only of the file number, and that the retention27 KB (4,203 words) - 15:49, 6 December 2023
- because the commercial agent did not verify correctly de identity of the person who requested the change of the ownership of the line. The principle of lawfulness24 KB (3,766 words) - 14:21, 13 December 2023
- facts suppose, on the part of the entity claimed, the commission of theinfringement of article 22.2 of the LSSI, according to which: “The service providersmay21 KB (3,202 words) - 14:54, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 1011/161/22 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)process, the controller requested the bank account numbers of all its students. On the basis of the information provided by the controller, the DPA considered15 KB (2,137 words) - 20:18, 27 March 2024
- Tietosuojavaltuutetun toimisto (Finland) - 8314/182/20 (section English Machine Translation of the Decision)conditions after the annulment of the judgment as after the judgment was given. The applicant has stated that the information on the annulment of the judgment29 KB (4,701 words) - 13:03, 3 March 2024
- authorities; on the other hand, criteria relating to the case, namely the prospects of success, the complexity of the case or the importance of the matter for15 KB (2,321 words) - 16:01, 22 March 2022
- contrary to the GDPR and DPA 2018? The DPA 1998 is the applicable legislation in the current case since the DSARs were submitted before the DPA 2018 and GDPR3 KB (372 words) - 11:58, 29 November 2021
- examination of the case and a justification for the Authority's decision. 2. Presentation of the case After a number of specific inquiries, the Data Inspectorate18 KB (2,667 words) - 16:29, 6 December 2023
- Court of Appeal of Brussels - 2019/AR/1006 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)with the registry of the Court of Appeal and whereby a recourse in accordance with article 108 § 1 of the law of December 3, 2017 establishing of the Data59 KB (9,290 words) - 09:10, 5 May 2024
- paragraph 1 f) of article 57, both of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons25 KB (3,791 words) - 14:47, 13 December 2023
- Datatilsynet (Norway) - 20/02137 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)as they became aware of the vulnerability, ”says Ylva Marrable. The legal basis for issuing a reprimand is Article 58 (2) (b) of the Privacy Policy.5 KB (684 words) - 08:06, 7 May 2022
- Article 83(1)-(3) and Article 83(5)(e) of Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons28 KB (4,490 words) - 09:51, 17 November 2023
- provided for the identification of the breach and the execution of a incident response protocol (document 4). Regarding the chronology of the events. C /18 KB (2,698 words) - 13:41, 13 December 2023
- November, on the sanctioning procedure applicable to the areas of competence of the Generalitat, and article 55.2 of Law 39/2015, of 1 October, of the common38 KB (5,760 words) - 08:26, 8 September 2021
- delivery-verification of the vehicle, delivery of a copy of the contract, payment, procedures in all of which must verify the identity of the contracting party26 KB (4,277 words) - 09:18, 26 July 2021
- Court of Appeal of Brussels - 2020/AR/1160 (Second Interim Decision) (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)must be met. 3° This consent relates to the purpose of publication of the personal data in the directories, but not to the identity of the directory provider67 KB (10,544 words) - 09:24, 10 September 2021
- law, the (EU) 2016/681 of the European Parliament and the Council of 27 April 2016, 2004/82/EC of the Council of 29 April 2004 and 2010/65/EU of the European17 KB (2,610 words) - 16:18, 10 March 2022
- Garante per la protezione dei dati personali (Italy) - 9529527 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council, of 27 April 2016, relating to the protection of individuals with regard to to the processing of personal55 KB (8,833 words) - 15:54, 6 December 2023
- AEPD (Spain) - PS/00348/2020 (category Article 58(2)(i) GDPR) (section English Machine Translation of the Decision)When setting the amount of the fine, the AEPD considered the negligent nature of the infringement - Article 83(2)(b) - and the fact that the infringement38 KB (5,648 words) - 14:31, 13 December 2023
- with the ABC group on the basis of the article 37 of the law of 1 August 2018 on the organization of the National Commission for data protection and the52 KB (7,520 words) - 13:13, 20 July 2021
- consult the GDPRhub style guide before you edit pages. In general editing a wiki is simple: Just click the "edit" button in the right corner of a page and2 KB (264 words) - 13:22, 22 November 2021
- Garante per la protezione dei dati personali (Italy) - 9538748 (section English Machine Translation of the Decision)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data24 KB (3,672 words) - 15:54, 6 December 2023
- AEPD (Spain) - PS/00152/2020 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)that the custody of the documentation is the function of the Secretary. Regarding the facts and causes of the incidence. Measures to minimise the incidence27 KB (4,243 words) - 14:06, 13 December 2023
- broadcaster of the video of the aggression suffered by a minor under 14 years old at the day of the XXXXXXX Institute classes, on *** DATE.1, by some of its companions47 KB (7,616 words) - 14:35, 13 December 2023
- AZOP (Croatia) - Decision 04-08-2022 (redirect from AZOP (Croatia) - Opinion on processing of personal data of workers - scanning of identity cards, bank card) (section English Machine Translation of the Decision)exercise of the official authority of the data controller; (f) processing is necessary for the purposes of the legitimate interests of the controller or a third11 KB (1,655 words) - 13:32, 31 October 2023
- corollary of the principle of respect for the rights of the defense, means that the Commission must provide the undertaking concerned with the opportunity22 KB (3,496 words) - 12:08, 17 February 2022
- Identification of the data collected.C- Purposes of the treatment.D- Legitimation of the treatments.E- On the time of conservation of the data.F- Recipients of the38 KB (5,879 words) - 14:07, 13 December 2023
- definition of Article 4(12) GDPR, even if it is attributed to an error of an employee of the Bank Second, the Hellenic DPA considered the violation of the obligation52 KB (8,460 words) - 10:54, 10 January 2024
- (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data36 KB (5,524 words) - 17:01, 6 December 2023
- UODO (Poland) - DKN.5131.5.2020 (category Article 34(2) GDPR) (section English Machine Translation of the Decision)902. Following the initiation of the administrative procedure in this case, the Company notified the President of UODO of the breach of personal data protection47 KB (7,608 words) - 10:00, 17 November 2023
- Garante per la protezione dei dati personali (Italy) - 9445550 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)of staff in the controller (a body governed by public law) and (3) the absence of previous violations of the same type. On the basis of the above elements22 KB (3,478 words) - 15:51, 6 December 2023
- Represenative. Although thousand of Luxemburgish and hundred thousands of European Data Subjects are impacted the DPA of Luxemburg refuses to open an inquiry/Investigation3 KB (337 words) - 16:59, 6 December 2023
- during the hearing, one of the three members of the DPA had stepped down due to a conflict of interest. Therefore, the chair decided to issue the decision84 KB (12,933 words) - 16:46, 12 December 2023
- number of searches of the complainant's ID number in the case file system of the police and the prosecuting authority, in the register of names and the guilt39 KB (6,351 words) - 09:52, 6 May 2021
- an explanation of the abandonment of the documentation of its workers in the field. It is also recorded in the Report of the list of the 29 people affected27 KB (3,993 words) - 13:52, 13 December 2023
- attaching the certificate of birth of the nationality applicant to the document of resolution of granting of nationality. The high number of resolutions51 KB (7,770 words) - 14:08, 13 December 2023
- contested the legality of such a decision before the Supreme Court of Belgium. The Supreme Court annulled the decision of the Court of Appeal of Brussels because43 KB (6,749 words) - 07:07, 28 October 2021
- NAIH (Hungary) - NAIH/2020/974/4 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)form in the text of the petition. " When asked by the Authority about the personal data of the data subjects during the authentication of the data, and67 KB (10,815 words) - 10:11, 17 November 2023
- DSB (Austria) - 2020-0.550.322 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal26 KB (4,098 words) - 13:51, 12 May 2023
- Garante per la protezione dei dati personali (Italy) - 9445710 (section English Machine Translation of the Decision)recording of it. The Italian DPA had to understand whether there was a breach of art. 12 and 15 of the GDPR in relation to an access request of the complainant3 KB (342 words) - 15:51, 6 December 2023
- AP (The Netherlands) - 31.05.2021 (category AP (The Netherlands)) (section English Machine Translation of the Decision)a base 15 to determine the recipients of the group message. The group message is sent after the UWV then to the recipients in the MyWorkbook environment106 KB (14,502 words) - 17:09, 12 December 2023
- NAIH (Hungary) - NAIH/2020/34/3 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)factors in deciding the amount of the fine issued to the respondent, on the basis of GDPR Articles 83(2)(a), (k), (c) and (d). The respondent will be subject48 KB (7,727 words) - 10:11, 17 November 2023