Search results
From GDPRhub
- treatment. The IMY decides on the basis of Articles 58 (2) and 83 of the Data Protection Ordinance and Chapter 6. § 2 of the Data Protection Act that the regional43 KB (4,600 words) - 17:08, 23 March 2022
- these reasons, the processing of data in question needs to benefit from one of the exceptions of art. 9.2 GDPR. concludes that the transfer of data from special58 KB (8,665 words) - 16:10, 1 February 2022
- Commissioner (Cyprus) - 11.17.001.008.001 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)reported to the DPA, according to article 33 of the GDPR as it is likely to cause risk to the rights and freedoms of the data subject. The DPA also held61 KB (9,412 words) - 16:52, 6 December 2023
- informing him of this fact. On June 2, 2020, the claimed status of solution is requested of the errors detected after the claims of claimants 1 and 2. With date28 KB (4,350 words) - 13:57, 13 December 2023
- es Page 2 2/9Along with the claim, it provides documentary evidence (Annex I) that proves thepresence of the camera (s) on the exterior of the facade oriented18 KB (2,721 words) - 14:11, 13 December 2023
- person/manager for the eight insurance policies where the employer was the policyholder. The data subject was the person of contact of the controller regarding52 KB (8,323 words) - 13:17, 13 December 2023
- undermines the clarity of the message. The Spanish DPA also established that the cookie policy (in the second layer of the banner or on the Privacy Policy15 KB (2,200 words) - 14:23, 13 December 2023
- APD/GBA (Belgium) - 64/2020 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)without the knowledge of the person concerned. but also of the correspondent. The Litigation Chamber also states that the legal ground for use of the e-mail7 KB (937 words) - 17:00, 12 December 2023
- Garante per la protezione dei dati personali (Italy) - 9361186 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)made by the Secretary General under Article. 15 of the Regulation of the Guarantor No 1/2000 on the organization and operation of the office of the Guarantor31 KB (5,041 words) - 15:49, 6 December 2023
- VG Mainz - 1 K 584/19.MZ (category Article 58(2) GDPR) (section English Machine Translation of the Decision)street. The DPA was allowed to issue a reprimand, Art. 58(2)(b) GDPR. On the basis of Art. 58(2)(f) GDPR, the DPA was not entitled to order the removal58 KB (9,665 words) - 08:51, 25 November 2020
- FOUNDATIONS OF LAW Yo By virtue of the powers that article 58.2 of the RGPD recognizes to each authority of control, and according to the provisions of articles26 KB (3,846 words) - 12:42, 13 December 2023
- gob.es 3/8 FOUNDATIONS OF LAW I In accordance with the provisions of article 84.3) of Law 9/2014, of 9 May, General of Telecommunications (LGT), the competition21 KB (3,137 words) - 14:33, 13 December 2023
- AEPD (Spain) - PS/00069/2020 (category Article 83(2)(k) GDPR) (section English Machine Translation of the Decision)entity. 2.- The personal data of the users of the prepaid cards that are registered in the Lycamobile register do not correspond to the data of the person20 KB (3,066 words) - 13:55, 13 December 2023
- APD/GBA (Belgium) - 28/2020 (category Article 21(2) GDPR) (section English Machine Translation of the Decision)information. 3. Reason 3.1. As regards the infringement of Articles 17(1)(c), 21(2) and 21(3) AVG 11. It appears from the documents in the file that, following27 KB (4,363 words) - 16:56, 12 December 2023
- includes the data of all the other citizens of the municipality who requested the intervention of Mr. Y in his capacity as Mayor. During the hearing of 5 November32 KB (5,190 words) - 16:51, 12 December 2023
- AEPD (Spain) - PS/00436/2021 (category Article 13(2) GDPR) (section English Machine Translation of the Decision)proposed to sanction the defendant with a fine of €1,500, for the infraction of the article 13 of the RGPD, since at the time of the claim it did not have20 KB (3,085 words) - 12:24, 13 December 2023
- publish the forthcoming decision of the Council of State in the same form as the contested deliberation; 3°) to charge the CNIL with the sum of 5,000 euros18 KB (2,677 words) - 09:50, 10 September 2021
- identify the error in the procedure. In the meantime, with the intervention of the Office of the Minister of Tourism and the necessary explanations, the operation65 KB (10,533 words) - 10:28, 27 January 2022
- accordance with the provisions of section 2 of article 56 in relation to section 1 f) of article 57, both of the GDPR; and in article 47 of the LOPDGDD. SECOND:20 KB (3,077 words) - 10:46, 13 December 2023
- imposed by §§ 5.2 and 6.1 of the Austrian Financial Markets Money Laundering Act (FM-GwG). The DPA pointed out that § 5.2 FM-GwG (Application of due diligence)33 KB (5,254 words) - 13:33, 12 May 2023
- ANSPDCP (Romania) - 12.01.2023 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)data. Hence, the controller violated Articles 32(1)(b) and 32(2) GDPR. Pursuant to its Article 58(2) GDPR statutory powers, the DPA ordered the controller5 KB (613 words) - 15:13, 13 December 2023
- dated September 3, 2021, for the purposes provided in its Article 64.2 of the LOPDGDD, the Director of the Spanish Agency for the Protection of Data agreed20 KB (3,142 words) - 13:31, 13 December 2023
- AEPD (Spain) - PS/00315/2020 (category Article 28(3)(g) GDPR) (section English Machine Translation of the Decision)document 3, written by the complainant addressed to the complainant, of *** DATE.3, entitled "Notice of non-payment for the provision of the service contracted62 KB (10,401 words) - 14:35, 21 November 2023
- violation of the fundamental rights of the defendant. Regarding the violation of the right of rectification of Article 16 GDPR and Article 14 of LOPDGDD63 KB (10,203 words) - 13:01, 13 December 2023
- particular, the amount of the individual claims, the age, the number and the time that had elapsed since the payment of the claim, as well as the origin of the32 KB (5,232 words) - 09:40, 10 September 2021
- APD/GBA (Belgium) - 03/2021 (category Article 24(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal32 KB (4,880 words) - 16:50, 12 December 2023
- APD/GBA (Belgium) - 54/2021 (section The notion of processing of personal data within the meaning of Article 4 GDPR)with the principle of clarity and predictability of the law, as derived from the jurisprudence of the Court of Justice of the European Union and the European73 KB (11,238 words) - 16:59, 12 December 2023
- result, the DPA fined the controller €70,000 for a violation of Article 6(1) GDPR. To determine the amount of the fine, the DPA rejected almost all the mitigating55 KB (9,017 words) - 10:46, 13 December 2023
- ANSPDCP (Romania) - Fine against Estee Lauder Romania (section English Machine Translation of the Decision)a fine of EUR 3.000. Share blogs or news articles here! The decision below is a machine translation of the Romanian original. Please refer to the Romanian3 KB (290 words) - 15:17, 13 December 2023
- AEPD (Spain) - EXP202207084 (category Article 2(2)(c) GDPR) (section English Machine Translation of the Decision)copy to the concierge of the school where the minor son of both is studying, to the address ***EMAIL.1. Thus, the aforementioned email reports the existence15 KB (2,384 words) - 10:46, 13 December 2023
- infringement lead to the DPA imposing a fine of € 5000 on JAVA. In relation to the cookie policy, the Spanish DPA held that the wording of the cookie banner "This26 KB (4,150 words) - 14:05, 13 December 2023
- AEPD (Spain) - PS/00117/2022 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)with the provisions of Title VII, Chapter I, Second Section, of the LOPDGDD, having knowledge of the following points: The list of members of the personnel30 KB (4,623 words) - 12:58, 13 December 2023
- discrimination. With the same complaint, he requested the revision of article 44 of the Regulation on the Organization and Operation of the Units of the Joint Legal14 KB (2,093 words) - 17:06, 10 February 2022
- AEPD (Spain) - EXP202105693 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)a fine of €40,000 which was reduced to €24,000 with the application of two reductions: the acceptance of guilt, and the voluntary payment of the fine. Share49 KB (7,579 words) - 13:15, 13 December 2023
- is informed of the breach. The DPA also reminded the data controller of this obligation in the e-mail they sent informing them of said data breach. Therefore29 KB (4,374 words) - 16:03, 19 January 2024
- Page 3 3/6b) the treatment is necessary for the performance of a contract in which theinterested is part or for the application at the request of this14 KB (2,075 words) - 13:48, 13 December 2023
- address the complaint raised. As of the date of resolution of this complaint, no allegations. LEGAL GROUNDS FIRST: The Director of the Spanish Agency of Data19 KB (3,100 words) - 14:50, 13 December 2023
- subject of the complaint and the edition and re-publication of the same editing the image and removing the reference to the names of the people whose information21 KB (3,099 words) - 13:59, 13 December 2023
- Commissioner (Cyprus) - 11.17.001.008.042 (category Article 7(3) GDPR) (section English Machine Translation of the Decision)necessary for the discharge of obligations laid down by law or by the collective agreements for the purposes of the recruitment, the performance of the contract4 KB (472 words) - 16:52, 6 December 2023
- data subject. The City hall facilitated the access to his data by the data subject in the course of the investigation process of the Spanish DPA and therefore38 KB (6,303 words) - 13:50, 13 December 2023
- plaintiff for annulment of the decision of the defendant of the Agency for the Protection of Personal Data of the Republic of Croatia, CLASS: UP/I-041-02/20-08/4315 KB (2,261 words) - 15:55, 30 October 2023
- sign to the social center. Copy of the poster of the rules of use and enjoyment of said premises. Copy of the regulatory contract for the cafeteria service28 KB (4,619 words) - 13:53, 13 December 2023
- responsible for the treatment of the services of the claimed, and consequently, the responsibility of the Contact with the claimed was from the aforementioned29 KB (4,386 words) - 14:20, 13 December 2023
- in the evidence of the different writings filed with this Agency, rectify the data and access the account to exercise the right of deletion of the claimant…”20 KB (3,052 words) - 08:17, 16 April 2024
- receipt of the request, of the reasons for the failure to act and of the possibility of lodging a complaint with a supervisory authority and of taking legal18 KB (2,922 words) - 14:51, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 4431/161/21 (category Article 25(2) GDPR) (section English Machine Translation of the Decision)purposes of the processing. The DPA found that the processing of all information about the patients' healthcare appointments also failed to meet the fairness54 KB (8,279 words) - 13:53, 21 March 2024
- the RGPD grants to each authority of control and in accordance with the provisions of articles 47, 48.1, 64.2 and 68.1 of the LOPDGDD, The Director of31 KB (4,864 words) - 13:27, 13 December 2023
- and according to the provisions of article 47 of the Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights11 KB (1,490 words) - 13:58, 13 December 2023
- order to promote the services of the claimed and based on the contract of the person in charge of the treatment on behalf of VDF states the following: Calls38 KB (5,945 words) - 12:14, 9 June 2021
- provided the claimant with the proper response, in the event of exercise of the rights regulated in articles 15 to 22 of the GDPR. The result of said transfer18 KB (2,693 words) - 13:31, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9556625 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)pursuant to art. 15 of the Guarantor Regulation n. 1/2000 on the organization and operation of the office of the Guarantor for the protection of personal data57 KB (9,144 words) - 15:55, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9468523 (section English Machine Translation of the Decision)[…] »(Article 6, par. 2, of the RGPD), with the consequence that the provisions contained in art. 2-ter, paragraphs 1 and 3, of the Code, where it is established22 KB (3,488 words) - 15:52, 6 December 2023
- AP (The Netherlands) - 24.03.2020 (category AP (The Netherlands)) (section English Machine Translation of the Decision)paragraph, of the AVG. […] b) the processing is necessary for the performance of obligations and the exercise of specific rights of the controller or the data48 KB (7,461 words) - 17:04, 12 December 2023
- (hereinafter, the accused party), for the use of the image of B.B.B., minor son of C.C.C.. The reported facts are the following: “The Civil Guard of ***LOCALIDAD28 KB (4,608 words) - 13:27, 13 December 2023
- article 58.2 of the RGPD recognizes to each authority of control, and as established in articles 47 and 48 of the LOPDGDD, the Director of the Spanish Data28 KB (4,592 words) - 14:25, 13 December 2023
- ANSPDCP (Romania) - BNP Paribas Personal Finance SA (section English Machine Translation of the Decision)Bucharest Branch. The Romanian DPA investigated the case and found that the operator did not prove the existence of the prior consent of the person concerned5 KB (673 words) - 15:16, 13 December 2023
- CNIL (France) - SAN-2021-003 (category Article 4(2) GDPR) (section On the processing of personal data)lockdown measures. The French DPA questionned the Ministry of the Interior on the subject. In absence of reply, the DPA initated an inquiry. The Ministry was39 KB (6,015 words) - 17:11, 6 December 2023
- and 2) of the GLT: -The cessation of the offending activity, before or during the processing of the former offending party (section g). After the evidence15 KB (2,411 words) - 13:49, 13 December 2023
- interest (from the controller and the third parties to be recipients of the data) linked to the assessment of the financial solvency of the data subjects602 KB (102,229 words) - 14:21, 13 December 2023
- CNPD (Portugal) - Deliberação 2021/1569 (category Article 83(3) GDPR) (section English Machine Translation of the Decision)vast set of third parties in the past, including the offices of the Portuguese Prime Minister, the Minister of Internal Administration (MAI) and the Public11 KB (1,491 words) - 16:54, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9446659 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)constitute a violation of the aforementioned art. 19, paragraph 3, of the Code [n.d.r. now reproduced in art. 2-ter, paragraphs 1 and 3, of the Code], where there25 KB (3,911 words) - 15:51, 6 December 2023
- AEPD (Spain) - PS/00262/2020 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)for the clarification of the facts in question, by virtue of the powers of investigation granted to the control authorities in article 57.1 of the Regulation22 KB (3,293 words) - 14:23, 13 December 2023
- AZOP (Croatia) - Decision 04-07-2022 (redirect from AZOP (Croatia) - Decision of 04-07-2022) (section English Machine Translation of the Decision)investigation, the DPA determined that the cameras indeed partially monitored the public space of the city of Zagreb. The Croatian DPA noted that video surveillance14 KB (2,038 words) - 15:20, 30 October 2023
- Object of complaint: The subject matter of the complaint is the question of whether the respondent was right to make the execution of the deletion of his23 KB (3,622 words) - 13:57, 12 May 2023
- AEPD (Spain) - PS/00389/2019 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)virtue of the powers conferred on each individual by Article 58(2) of the GPRS, the authority, and in accordance with Article 47 of Organic Law 3/2018,31 KB (4,819 words) - 14:34, 13 December 2023
- FIRST: DISMISS the delivery of the physical copy of the recording of the review of the END of Degree Project (TFG) made on 07/20/2021 through the Microsoft18 KB (2,786 words) - 12:38, 13 December 2023
- HDPA (Greece) - 25/2022 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)Consequently, the data subject lodged a complaint with the DPA regarding the processing of their data. The controller stated before the DPA that the data processing48 KB (7,803 words) - 13:29, 11 October 2022
- provided at the request of the data subject, provided otherwise the identity of the data subject has been verified. 2. The controller shall facilitate the processing27 KB (4,159 words) - 10:13, 17 November 2023
- IMY (Sweden) - DI-2021-4355 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)subject of the complaint and was therefore not part of the DPA’s investigation. As a result, the DPA concluded that the controller had not protected the data28 KB (3,101 words) - 09:49, 7 June 2023
- AEPD (Spain) - E/03884/2020 (category Article 2(1) GDPR) (section English Machine Translation of the Decision)manages the underground service of Bilbao, one of the main Spanish cities. In the context of the covid-19 pandemic, the company was using thermal cameras to verify56 KB (8,737 words) - 09:35, 26 May 2021
- relating to the other account; the absence of fraud and guilt in the action of the defendant; the non-existence of infringement of article 32.1 of the GDPR to54 KB (8,451 words) - 13:35, 13 December 2023
- From the perspective of the website operator, the consent was obtained before the commencement of the proceedings, and the privacy policy on the website20 KB (3,151 words) - 16:38, 6 December 2023
- paragraph second, of the LSSI. II The joint assessment of the documentary evidence in the procedure brings to knowledge of the AEPD, a vision of the denounced14 KB (2,070 words) - 13:43, 13 December 2023
- than if the partial faces that appear in it appear pixelated. cen. - Examining the profile of the owner of the origin of the video on the social network28 KB (4,527 words) - 12:35, 13 December 2023
- AZOP (Croatia) - Decision 29-06-2022 (Center for Social Welfare) (section English Machine Translation of the Decision)doubted the lawfulness of the publication and therefore filed a complaint at the Croatian DPA. The DPA held that the controller did not prove the existence17 KB (2,660 words) - 15:35, 30 October 2023
- persons the municipality's website. The personal information covered by the breach is the birth number and title of the document. The title of the document26 KB (3,885 words) - 08:43, 7 May 2022
- HDPA (Greece) - 20/2020 (category Article 2(2)(a) GDPR) (section English Machine Translation of the Decision)thecasementioned in the history of the present.Attended by the President of the Authority, Konstantinos Menoudakos and the regular members of the Authority Spyridon29 KB (4,578 words) - 15:35, 6 December 2023
- article 22.2 of the LSSI regarding the irregularities detected in the cookie policy of the website it owns. In the opening agreement determined that the sanction52 KB (7,564 words) - 12:41, 13 December 2023
- Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data25 KB (4,037 words) - 14:55, 13 December 2023
- Is the processing of electricity supply data, without the consent of the data subject, a breach of Article 6 (1) GDPR? The Spanish DPA held that the processing24 KB (3,939 words) - 14:03, 13 December 2023
- (i.e. the protection of the privacy rights of every citizen to be informed about the use of the camera images when making use of the services of a carwash)35 KB (5,303 words) - 17:01, 12 December 2023
- breach of Article 5.2 of the GDPR, Article 24.1 of the GDPR and Article 33 of the GDPR can be established. - As regards the involvement of the Data Protection55 KB (8,810 words) - 16:55, 12 December 2023
- sedeagpd.gob.es 2/6 2. In the event of exercising the rights regulated in articles 15 to 22 of the RGPD, accreditation of the response provided to the claimant15 KB (2,292 words) - 13:56, 13 December 2023
- incidents, the DPA only became aware of a data breach 2-3 months after it had occurred. In conclusion, the DPA imposed a €150,000 fine on the controller9 KB (974 words) - 15:54, 20 December 2022
- Persónuvernd (Iceland) - 2022030544 (category Article 2(2)(c) GDPR) (section English Machine Translation of the Decision)Generally, this type of processing would fall within the scope of the GDPR. However, in the present case the Icelandic DPA recalled that the GDPR includes an9 KB (1,242 words) - 08:18, 28 June 2023
- AEPD (Spain) - PS/00273/2019 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)58.2 of the RGPD grants to each supervisory authority, and in accordance with the provisions of Articles 47 and 48 of the LOPDGDD, the Director of the16 KB (2,359 words) - 14:24, 13 December 2023
- DVI (Latvia) - SIA "TET" (redirect from DVI (Latvia) - Decision of 9 September 2022) (section English Machine Translation of the Decision)re-assessing the final amount of the administrative fine, the DPA briefly recalled the material violations. The Latvian DPA noted that the controller had114 KB (17,942 words) - 15:46, 2 November 2022
- Datatilsynet (Denmark) - 2020-432-0037 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)held that the Family Court was in serious violation of Article 32(1) GDPR due to the scope of the data mishandling and the sensitivity of the subject. Moreover46 KB (7,343 words) - 16:39, 6 December 2023
- Court of Appeal of Brussels - 2021/AR/205 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)entitled to use the name and image of the music artist of the musical works which are the subject matter of those agreements, for the duration of the copyright92 KB (14,873 words) - 09:03, 20 August 2021
- AEPD (Spain) - EXP202100897 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)accordance with the provisions of article 65.5 of the LOPDGDD, the processing of the claim continues. FOURTH: On 01/13/2022, the Director of the AEPD agreed:72 KB (11,671 words) - 13:34, 13 December 2023
- AZOP (Croatia) - Decision 31-05-2022 (redirect from AZOP (Croatia) - Decision of 31 May 2022) (section English Machine Translation of the Decision)year - the copy is identical to the original" and the seal of the School with the signature of the secretary, which is in replacement until of the secretary's17 KB (2,433 words) - 15:45, 30 October 2023
- Copy of the Didactic Schedules of the Physics and Chemistry area of 3 C, corresponding to the academic year 2019-2020. Statistical data of the academic25 KB (3,972 words) - 14:47, 13 December 2023
- 2016/679 of the European Parliament and of the Council of April 27, 2016, regarding the protection of natural persons in the regarding the processing of personal21 KB (3,123 words) - 14:25, 13 December 2023
- before the Court of First Instance nº3 of Pontevedra. 2. Order to enforce the Award dated March 25, 2019 of the Court of First Instance nº3 of Pontevedra26 KB (3,848 words) - 14:31, 13 December 2023
- logic of the case; The holding of the DPA/court. Ideally, the summary follows the structure of the original decision and expresses the DPA's position on each8 KB (1,355 words) - 13:38, 1 February 2024
- on the webpage. The Bulgarian Parliament adopted Law on Measures and Actions during the the state of emergency. One of the measures requires the establishment25 KB (3,096 words) - 17:48, 25 November 2021
- Sanctioner, the Director of the Spanish Data Protection Agency. II In the present case, the claimant accredits by attaching a copy of this, the receipt of an SMS12 KB (1,685 words) - 12:41, 13 December 2023
- HDPA (Greece) - 24/2022 (category Article 2 GDPR) (section English Machine Translation of the Decision)satisfy the right of access. The first complaint concerned a breach of the provisions concerning the control of the computer during the data subject's work8 KB (1,087 words) - 16:32, 15 November 2022
- Tietosuojavaltuutetun toimisto (Finland) - 3846/157/2019 (section English Machine Translation of the Decision)the DPA ordered the controller to delete the data subject’s data in accordance with Article 17 GDPR. Pursuant to Article 58(2)(d) GDPR, the DPA ordered the4 KB (424 words) - 13:05, 3 March 2024
- HDPA (Greece) - 12/2022 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)6475628, contact@dpa.gr / www.dpa.gr, - employee, the The latter finds the existence of a problem in the continuous attendance of her course by the complainant46 KB (7,390 words) - 08:07, 1 April 2022
- Tietosuojavaltuutetun toimisto (Finland) - 1198/161/2022 (category Article 9(2)(a) GDPR) (section English Machine Translation of the Decision)accepted the decision of the Data Protection Commissioner and the Sanctions College, and the decision is also binding on them. The sanction panel of the Office13 KB (1,847 words) - 15:52, 11 December 2023
- data. The claim of the claimant refers to the elimination, in the motor index of search the following urls: 1. *** URL.1 2. *** URL.2 3. *** URL.3 SECOND:40 KB (6,518 words) - 13:29, 13 December 2023
- Article 58.2 of the RGPD, the Spanish Agency of As a supervisory authority, it has a range of powers corrective measures in the event of a breach of the RGPD14 KB (2,017 words) - 13:57, 13 December 2023
- article 58.2.b) of the RGPD, for an infringement of article 13 of the RGPD, typified in article 83.5 of the RGPD, a warning sanction. In view of all the actions20 KB (3,075 words) - 14:32, 13 December 2023
- IMY decides on the basis of Articles 58 (2) and 83 of the Data Protection Ordinance and Chapter 6. § 2 of the Data Protection Act that the hospital board47 KB (5,207 words) - 18:51, 21 March 2022
- means.2. In the cases referred to in Article 11(2), the controller shall not refuse to act at the request of the data subject for the purpose of exercising16 KB (2,571 words) - 14:49, 13 December 2023
- Court of Appeal of Brussels - 2020/AR/329 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)resources at the disposal of the DPA was not judged conclusive neither as it was not supported by any data. Morover, "[the DPA] is at the service of the citizen48 KB (7,560 words) - 09:03, 20 August 2021
- Inspection of Data proceeded, on June 3, 2020, to transfer the claim, of in accordance with the provisions of article 65.4 of Organic Law 3/2018, of 5 December34 KB (5,427 words) - 14:30, 13 December 2023
- article 58.2 of the RGPD recognizes to each authority of control, and as established in arts. 47 and 48.1 of the LOPDGDD, the Director of The Spanish Data14 KB (2,143 words) - 14:09, 13 December 2023
- ANSPDCP (Romania) - Fine against Banca Transilvania SA (category Article 32(2) GDPR) (section English Machine Translation of the Decision)them at the request of the controller. Finally, the DPA also took into account that the disclosure of personal data in the public space (on the internet)7 KB (845 words) - 15:17, 13 December 2023
- OLG Linz - 6R49/19x (category Article 2(1) GDPR) (section English Machine Translation of the Decision)affected by the operation. At the end of the trial, the plaintiff is satisfied with the result of the transplantation of his own hair. The treatment was33 KB (5,113 words) - 09:50, 14 December 2023
- DPC (Ireland) - Meta Platforms Ireland Limited (Instagram) - IN-18-5-7 (section English Machine Translation of the Decision)case, the GDPR" (EDPB - 119). Turning to the facts of the case, the EDPB outlined a number of factors which, in contradiction to the view of the DPC, support21 KB (3,069 words) - 14:17, 1 February 2023
- control and in accordance with the provisions of articles 47, 48.1, 64.2 and 68.1 of the LOPDGDD, The Director of the Agency is competent to initiate and resolve17 KB (2,461 words) - 13:22, 13 December 2023
- UODO (Poland) - DKN.5101.25.2020 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)resulting from the GDPR. The DPA also considered that the confidentiality of the processed data was breached in the course of the performance of the employee63 KB (10,088 words) - 09:52, 17 November 2023
- with article 65 of the LPDGDD Law, when assessing possible rational indications of a violation of the rules in the field of competences of the Spanish Data20 KB (3,014 words) - 13:16, 13 December 2023
- theSection 3 of Chapter VIl of the GDPR, must, under the terms of paragraph 3 of article 68 of theregulation, be “composed of the director of a supervisory40 KB (5,935 words) - 16:55, 6 December 2023
- BKP. 3.2 More about the requirements of the Personal Data Act The Personal Data Act implements the European Privacy Regulation in Norwegian law. The rules19 KB (2,942 words) - 09:03, 14 September 2023
- provided the claimant with the proper response, in the event of exercise of the rights regulated in articles 15 to 22 of the RGPD. The result of said transfer18 KB (2,721 words) - 14:51, 13 December 2023
- No. 2.We also understand that it is necessary to bear in mind that the ship wherefound the cameras that were the subject of the complaint (1.2 of plot18 KB (2,749 words) - 13:57, 13 December 2023
- AEPD (Spain) - PS/00433/2020 (category Article 58(2)(c) GDPR) (section English Machine Translation of the Decision)virtue of the powers that article 58.2 of Regulation (EU) 2016/679, of theEuropean Parliament and of the Council, of April 27, 2016, regarding the Protection23 KB (3,592 words) - 14:40, 13 December 2023
- infringement, by the defendant to the provisions of article 21 of the current Law 34/2002, of July 11, on Services of the Society of the Information and15 KB (2,337 words) - 14:24, 13 December 2023
- AZOP (Croatia) - Decision 29-06-2022 (bank) (redirect from AZOP (Croatia) - Decision of 29 June 2022 - unknown Bank) (section English Machine Translation of the Decision)that the names of the winners will be published on the website within seven days from the day of the draw. The name of the winner refers to all the data20 KB (3,166 words) - 15:36, 30 October 2023
- case for the offer or sale of products or services. FIFTH: On February 2, 2021, the instructor of the procedure agreed to the opening of a period of practical22 KB (3,321 words) - 14:37, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9269629 (section English Machine Translation of the Decision)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data38 KB (5,724 words) - 15:47, 6 December 2023
- to the Act of 1 August 2018 on the organisation of the National Commission for Having regard to the Act of 1 August 2018 on the organisation of the National69 KB (11,315 words) - 13:30, 19 January 2022
- with the court and with the other counterparties in the proceedings. The decision from the Spanish DPA does not analyze in detail the articles of the GDPR17 KB (2,544 words) - 13:39, 13 December 2023
- within the meaning of Article 5(1)(c) of the GDPR. The FPS Finance therefore does not comply with the data minimization principle. Moreover, the DPA ruled124 KB (18,772 words) - 17:01, 12 December 2023
- HDPA (Greece) - 7/2024 (category Article 58(2)(c) GDPR) (section English Machine Translation of the Decision)certified pursuant to both Article 58(2) GDPR. and Article 21 of N. 2472/1997. Notably, the DPA focused only on the portion of the data subject's compliant concerning7 KB (795 words) - 12:05, 5 April 2024
- AEPD (Spain) - PS/00322/2020 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)so by virtue of the Law of the Union or of the Member States ”. The violation of article 32 of the RGPD is typified in article 83.4.a) of the aforementioned26 KB (3,840 words) - 14:28, 13 December 2023
- NAIH (Hungary) - NAIH/2020/2000/5 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)regard to the mandatory data provided on the data sheet, data management is a condition for the use of the services of the site. On the basis of the reply24 KB (3,815 words) - 10:11, 17 November 2023
- for the clarification of the facts in question, by virtue of the powers of investigation granted to the control authorities in article 57.1 of the Regulation29 KB (4,480 words) - 14:27, 13 December 2023
- period of time in which the breach has been happening, and (iii) the acceptance by the defendant of the cookies guide of the AEPD], the AEPD understood that31 KB (4,757 words) - 13:52, 13 December 2023
- CNPD (Luxembourg) - Délibération n° 24FR/2022 (category Article 13(2)(a) GDPR) (section English Machine Translation of the Decision)Company A on the basis of Article 37 er of the law of 1 August 2018 on the organization of the National Commission for the data protection and the general data82 KB (11,472 words) - 16:58, 6 December 2023
- VDAI - NVSC vs UAB (category Article 58(2)(f) GDPR) (section English Machine Translation of the Decision)with the help of the app and deleted part of the personal data. The decision of the SDPI may be appealed to a court within one month from the date of its11 KB (1,573 words) - 09:18, 17 November 2023
- LPACAP), for the alleged violation of article 5.1.c) of the GDPR and article 13 of the GDPR, typified in Article 83.5 of the GDPR. FIFTH: Once the aforementioned24 KB (3,717 words) - 13:04, 13 December 2023
- September 2022, the DPA dismissed the complaint because it concerned the processing of personal data that falls outside the scope of the Norwegian Personal19 KB (2,858 words) - 10:06, 17 November 2023
- CNIL (France) - Google Analytics (no case number) (section English Machine Translation of the Decision)consisted of the integration of the Google Analytics functionality on the company's website for the purpose of measuring the audience and performance of its40 KB (5,904 words) - 16:51, 24 February 2022
- Akamai server instead of the company's customer. The Cookie “AKA_A2” appears on the website ***URL.2 as strictly necessary, (***URL.3) The “RT” Cookie, although68 KB (10,193 words) - 12:40, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9861249 (section English Machine Translation of the Decision)relationship with the controller. After the termination of the agreement with the processor, the controller phased out the devices. However, the controller forgot87 KB (14,104 words) - 15:45, 6 December 2023
- basis for the email, the origin of the data used to send the email, the recipients of the email, the number of persons concerned by the process, the identity27 KB (4,166 words) - 17:06, 6 December 2023
- AEPD (Spain) - PS/00029/2020 (category Article 35(3)(b) GDPR) (section English Machine Translation of the Decision)coordinate the actions of the technicians and to liaise with the ITA management to keep them informed of the evolution of the event. It will coordinate the necessary44 KB (6,943 words) - 13:49, 13 December 2023
- e-mail the newsletter received by the Applicant in his complaint of 20 February 2020. The Applicant submitted that in view of the contents of the Applicant's30 KB (4,563 words) - 10:12, 17 November 2023
- AZOP (Croatia) - Decision 10-08-2023 (redirect from AZOP (Croatia) - Decision of 10 August 2023) (section English Machine Translation of the Decision)28454963989 on the basis of Article 57 paragraph 1 and of Article 58, Paragraphs 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council19 KB (2,955 words) - 16:29, 5 December 2023
- article 65 of the LPDGDD Act, on appreciating the possible rational indications of a breach of the rules within the scope of the competences of the Spanish52 KB (8,416 words) - 12:59, 13 December 2023
- level of security, breaching Article 32 GDPR. The risk analysis that the controller provided was the output of the ‘GESTIONA EIDP’ tool of the DPA itself10 KB (1,343 words) - 13:13, 13 December 2023
- gob.es 2/7 THIRD: On September 2, 2020, the Director of the Spanish Agency of Data Protection agreed to initiate a sanctioning procedure to the claimed20 KB (2,973 words) - 14:09, 13 December 2023
- facts suppose, on the part of the entity claimed, the commission of theinfringement of article 22.2 of the LSSI, according to which: “The service providersmay15 KB (2,192 words) - 14:36, 13 December 2023
- accordance with the provisions of section 2 of article 56 in relation to section 1 f) of article 57, both of the RGPD; and in article 47 of the LOPDGDD. C/29 KB (4,648 words) - 12:38, 13 December 2023
- (violation of articles 133 and 134 of Law 2/2014 of 03/25, on the management and use of soil of the Balearic Islands, according to the copy of the resolution56 KB (9,356 words) - 10:43, 13 December 2023
- provided the claimant with the proper response, in the event of exercise of the rights regulated in articles 15 to 22 of the GDPR. The result of said transfer19 KB (3,027 words) - 14:48, 13 December 2023
- AEPD (Spain) - PS/00320/2020 (category Article 58(2)(i) GDPR) (section English Machine Translation of the Decision)They considered the respondent’s lack of cooperation with the AEPD during the investigation of the complaint, and the respondent’s use of the claimant’s basic18 KB (2,736 words) - 14:28, 13 December 2023
- satisfied the claims of the claimant. Consequently, with dated June 3, 2020, for the purposes set forth in article 64.2 of the LOPDGDD, The Director of the Spanish21 KB (3,154 words) - 14:07, 13 December 2023
- 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal96 KB (13,984 words) - 16:57, 6 December 2023
- 1 f) of article 57, both of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 regarding the protection of natural26 KB (3,997 words) - 18:59, 26 February 2024
- AEPD (Spain) - PS/00220/2020 (category Article 83(2)(b) GDPR) (section English Machine Translation of the Decision)for the clarification of the facts in question, by virtue of the powers of investigation granted to the control authorities in article 57.1 of the Regulation28 KB (4,295 words) - 14:11, 13 December 2023
- against the respondent, by the alleged violation of Article 5.1(f) of the GDPR, Article 5.1(b) of the GDPR, as set out in Article 83.5 of the GDPR. FOURTH:15 KB (2,317 words) - 13:59, 13 December 2023
- AEPD (Spain) - PS/00340/2019 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)Notwithstanding the above, for the specific case of the exercise of the right to oppose the processing of data for the sending of electoral propaganda,23 KB (3,554 words) - 14:31, 13 December 2023
- relating to the claim raised before this Agency and on the exercise of the right exercised. On 3 April 2018, in view of the claim for the right of access,22 KB (3,500 words) - 14:50, 13 December 2023
- 6/13 b) The processing of personal data without the concurrence of any of the conditions of legality of the treatment established in article 6 of the Regulation27 KB (4,189 words) - 14:44, 13 December 2023
- (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data62 KB (10,509 words) - 16:58, 12 December 2023
- whether the processing is automatic or not, cf. Number 4 Article 3 of the Act and point 2. Article 4 Regulation. This case concerns the processing of personal26 KB (4,135 words) - 09:59, 6 May 2021
- by the complaining party, the video object of the complaint is only available in the profile of Facebook of the claimed party. Specifically, in the following26 KB (3,971 words) - 13:26, 13 December 2023
- accordance with the provisions of article 65.4 of Organic Law 3/2018, of December 5, on the protection of personal data and guarantee of digital rights, (hereinafter34 KB (5,222 words) - 12:58, 13 December 2023
- lawful. According to the law, the data of the members of the company's management board are published in the commercial register. The DPA emphasized this does16 KB (2,456 words) - 10:29, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 4282/161/21 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)shows the sale of the right to the [travel agency name] domain name from the bankruptcy estate of the travel agency to ZZ Oy. The Office of the Data Protection56 KB (8,980 words) - 08:47, 4 March 2024
- treatment. 2. In assessing the adequacy of the level of security, particular account shall be taken of the risks posed by the processing of data, in particular12 KB (1,838 words) - 14:34, 13 December 2023
- Datatilsynet (Norway) - 20/02191 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)assessment of the municipality's feedback In the feedback of 29 April 2020, the municipality acknowledges the facts of the case as forms the basis for the Data38 KB (5,967 words) - 11:48, 7 May 2022
- UODO (Poland) - DKE.561.11.2020 (category Article 58(2)(e) GDPR) (section English Machine Translation of the Decision)83(1)-(2) and Article 83(6) in connection with Article 58(2)(e) and (i) of the Regulation of the European Parliament and of the Council EU 2016/679 of 27 April46 KB (7,322 words) - 09:51, 17 November 2023
- CE - N° 429571 (section On the alleged confusion of credit card data with special categories of data)requests the cancellation for excess of power of the refusal by the President of the CNIL to this request. 3. On the one hand, under the terms of article19 KB (2,790 words) - 09:50, 10 September 2021
- APD/GBA (Belgium) - 24/2021 (category Article 7(3) GDPR) (section English Machine Translation of the Decision)of cookies on the website of the Defendant does not comply with the GDPR. - the register of processing activities of the defendant does not meet the requirements110 KB (18,238 words) - 16:56, 12 December 2023
- violation of article 5.1.f) of the RGPD If confirmed, the aforementioned violation of article 5.1.f) of the RGPD could mean the commission of the infractions31 KB (4,578 words) - 12:11, 6 March 2024
- comply with the requirement of the law. The DPA held that when it comes to a property that is rented out (the object of a contract), the notion of personal22 KB (3,562 words) - 14:22, 13 December 2023
- EFTA Court - Joined Cases E-11/19 and E-12/19 (category Article 57(3) GDPR) (section English Machine Translation of the Decision)concerning the interpretation of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons59 KB (8,242 words) - 10:47, 17 March 2021
- Data and the Free Circulation of these Data (RGPD) and the Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of the Digital45 KB (7,313 words) - 10:32, 13 December 2023
- in accordance with the provisions of art. 58.2 of the GDPR in the art. 47 of LOPDGDD. - About the Cookies Policy: The Director of the Spanish Agency is16 KB (2,380 words) - 14:01, 13 December 2023
- evaluation of the effectiveness of the technical and organisational measures to ensure security of processing. The DPA considered that the controller had10 KB (1,214 words) - 11:39, 22 March 2024
- determined that the candidate was at the time part of the government team of the City Council of Cacabelos, and so had access to all types of information related22 KB (3,420 words) - 12:59, 13 December 2023
- inform the user of a website about the the identity of the controller, the purposes of using specific types of cookies, the data collected, the manner31 KB (4,923 words) - 12:39, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9542071 (section English Machine Translation of the Decision)in turn in the badge'. - the reading of the data, at the time of detection of the presence, takes place through the simultaneous use of the badge (which25 KB (3,961 words) - 15:54, 6 December 2023
- understand that the claims of the complaining party. Consequently, for the purposes provided in its Article 64.2 of the LOPDGDD, the Director of the Spanish Agency22 KB (3,544 words) - 14:48, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9861827 (section English Machine Translation of the Decision)legitimate - of the holder of the exercise of his rights in court" (see cited note, p. 2); “the case is in fact pending [before the] Court of Reggio Emilia87 KB (14,525 words) - 15:45, 6 December 2023
- processing of data collected by the form of the website. Secondly, on the fact that the image and personal data of one of the partners of the complainant's law19 KB (2,957 words) - 14:45, 13 December 2023
- facts suppose, on the part of the entity claimed, the commission of theinfringement of article 22.2 of the LSSI, according to which: “The service providersmay16 KB (2,335 words) - 14:33, 13 December 2023
- platform for the candidacy for the elections of the Official College of Graduates of E.F. and Sciences of Physical Activity and Sports the Community of Madrid24 KB (3,838 words) - 13:51, 13 December 2023
- AEPD (Spain) - PS/00189/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)could lead to the commission of the offense typified in article 72.1 m) of the LOPDGDD, to be sanctioned, in accordance with art. 58.2 of the RGPD ”. Said22 KB (3,343 words) - 14:08, 13 December 2023
- questioned by the 3 complainants. While the consultation of the National Register and the subsequent processing of data of complainants 1 and 3 was justified41 KB (6,354 words) - 16:59, 12 December 2023
- UODO (Poland) - DKN.5130.2024.2020 (category Article 28(3) GDPR) (section English Machine Translation of the Decision)Parliament and of the Council of the EU and of the EU Council 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal75 KB (12,104 words) - 09:58, 17 November 2023
- for the clarification of the facts in question, by virtue of the powers of investigation granted to the control authorities in article 57.1 of the Regulation30 KB (4,436 words) - 14:36, 13 December 2023
- policyprivacy policy *** URL.3 , the possibility of receiving communications referring torents to the services of the exhibitors and / or the person in charge.As32 KB (4,992 words) - 14:00, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9509515 (category Article 9(2)(b) GDPR) (section English Machine Translation of the Decision)determining the amount of the fine the Garante considered the following: -Article 83(2)(a) - the policy covered the processing of the personal data of 253 employees33 KB (5,342 words) - 15:52, 6 December 2023
- AZOP (Croatia) - Decision 18-12-2020 (redirect from AZOP (Croatia) - Decision of 18 December 2020) (section English Machine Translation of the Decision)in which the name i the surname of the applicant and the amount he receives annually from the Center for Social Welfare X, in the interest of the public21 KB (3,345 words) - 15:24, 30 October 2023
- BVwG - W256 2240235-1 (category Article 9(2)(f) GDPR) (section English Machine Translation of the Decision)scope of the verbal power of attorney granted to the RA as well as about the transfer of his personal data to the RA by the party involved. The authority33 KB (5,154 words) - 11:08, 21 January 2022
- 1, 64.2 and 68.1 of the Law Organic 3/2018, of December 5, Protection of Personal Data and guarantee of digital rights (hereinafter, LOPDGDD), the Director29 KB (4,607 words) - 13:38, 13 December 2023
- consideration, remotely, by way of electronically and at the individual request of the recipient. The concept of service of the The information society also includes18 KB (2,693 words) - 13:40, 13 December 2023
- AEPD (Spain) - PS/00324/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)provided the data subject with a copy of its Privacy Notice and whether the categories of the data disclosed, the name of the third party, and the legal basis25 KB (3,670 words) - 14:28, 13 December 2023
- processor. The DPA pointed out that the lack of a written agreement between the data controller and the data processor represented a breach of Article 28(3) of16 KB (2,367 words) - 10:06, 17 November 2023
- EWHC (UK) - Johnson v Eastlight Community Homes Ltd (section English Machine Translation of the Decision)notified the defendant of the error and was asked by the defendant to delete the e-mail. Subsequently, the defendant informed the claimant of the error and46 KB (7,676 words) - 10:45, 7 December 2021
- objections to the agreement to initiate the file and In accordance with the provisions of article 64.2.f) of the LPACAP, the aforementioned agreement of beginning32 KB (4,945 words) - 13:25, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 3425/157/2019 (section English Machine Translation of the Decision)natural person? 3) Had the controller given the data subject the right to object to direct marketing as per Article 21 GDPR? DPA held that the controller had3 KB (276 words) - 13:05, 3 March 2024
- AEPD (Spain) - PS/00092/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)and of the Council of 27/04/16, relating to the Protection of Individuals with regard to the Processing of Personal Data and the Free Circulation of such22 KB (3,514 words) - 13:58, 13 December 2023
- LfDI (Baden-Württemberg) - O 1018/115 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)detected. 2. assessment of evidence The facts of the case are established on the basis of the credible information provided by Knuddels and the results of the13 KB (1,926 words) - 10:22, 17 November 2023
- AP (The Netherlands) - 10.12.2020 (locatefamily.com) (category AP (The Netherlands)) (section English Machine Translation of the Decision)course of the proceedings. Chapter 2 describes the legal framework. Chapter 3 contains the assessment of the AP, after which chapter 4 gives reasons for38 KB (6,339 words) - 17:14, 12 December 2023
- AEPD (Spain) - PS/00135/2020 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)medium the image of a person. Art. 2.2, Art. 6 LO 1/1982 the holder of the right has granted the effect their express consent". Clause between the general47 KB (7,756 words) - 14:04, 13 December 2023
- VGH München – 5 CS 19.2087 (category Article 6(3) GDPR) (section English Machine Translation of the Decision)sentence 1, Art. 86 GKG § 47 (1), § 52 (2), § 53 (2) no. 2, § 63 (3) sentence 1 no. 2, § 66 (3) sentence 3, § 68 (1) sentence 5 LFGB § 40 paragraph 1a Basic Law40 KB (6,397 words) - 08:03, 21 March 2022
- 15/1999, of December 13, on the Protection of Personal data. 2º.- Regarding the consent given by the user, which is referred to in the Article 9 of the "General24 KB (3,893 words) - 14:22, 13 December 2023
- analyze it and contact the different areas in charge of managing the rights of the interested parties of the Management of the centers hospitals and Primary Care26 KB (4,017 words) - 12:37, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9429195 (section English Machine Translation of the Decision)particular, the DPA found that the logs register did not keep a record of the customer reference number, but only of the file number, and that the retention27 KB (4,203 words) - 15:49, 6 December 2023
- because the commercial agent did not verify correctly de identity of the person who requested the change of the ownership of the line. The principle of lawfulness24 KB (3,766 words) - 14:21, 13 December 2023
- facts suppose, on the part of the entity claimed, the commission of theinfringement of article 22.2 of the LSSI, according to which: “The service providersmay21 KB (3,202 words) - 14:54, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 1011/161/22 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)process, the controller requested the bank account numbers of all its students. On the basis of the information provided by the controller, the DPA considered15 KB (2,137 words) - 20:18, 27 March 2024
- Tietosuojavaltuutetun toimisto (Finland) - 8314/182/20 (section English Machine Translation of the Decision)conditions after the annulment of the judgment as after the judgment was given. The applicant has stated that the information on the annulment of the judgment29 KB (4,701 words) - 13:03, 3 March 2024
- authorities; on the other hand, criteria relating to the case, namely the prospects of success, the complexity of the case or the importance of the matter for15 KB (2,321 words) - 16:01, 22 March 2022
- contrary to the GDPR and DPA 2018? The DPA 1998 is the applicable legislation in the current case since the DSARs were submitted before the DPA 2018 and GDPR3 KB (372 words) - 11:58, 29 November 2021
- examination of the case and a justification for the Authority's decision. 2. Presentation of the case After a number of specific inquiries, the Data Inspectorate18 KB (2,667 words) - 16:29, 6 December 2023
- Datatilsynet (Norway) - 20/02137 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)as they became aware of the vulnerability, ”says Ylva Marrable. The legal basis for issuing a reprimand is Article 58 (2) (b) of the Privacy Policy.5 KB (684 words) - 08:06, 7 May 2022
- Court of Appeal of Brussels - 2019/AR/1006 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)with the registry of the Court of Appeal and whereby a recourse in accordance with article 108 § 1 of the law of December 3, 2017 establishing of the Data59 KB (9,290 words) - 09:10, 5 May 2024
- paragraph 1 f) of article 57, both of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons25 KB (3,791 words) - 14:47, 13 December 2023
- Article 83(1)-(3) and Article 83(5)(e) of Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons28 KB (4,490 words) - 09:51, 17 November 2023
- provided for the identification of the breach and the execution of a incident response protocol (document 4). Regarding the chronology of the events. C /18 KB (2,698 words) - 13:41, 13 December 2023
- law, the (EU) 2016/681 of the European Parliament and the Council of 27 April 2016, 2004/82/EC of the Council of 29 April 2004 and 2010/65/EU of the European17 KB (2,610 words) - 16:18, 10 March 2022
- November, on the sanctioning procedure applicable to the areas of competence of the Generalitat, and article 55.2 of Law 39/2015, of 1 October, of the common38 KB (5,760 words) - 08:26, 8 September 2021
- delivery-verification of the vehicle, delivery of a copy of the contract, payment, procedures in all of which must verify the identity of the contracting party26 KB (4,277 words) - 09:18, 26 July 2021
- Court of Appeal of Brussels - 2020/AR/1160 (Second Interim Decision) (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)must be met. 3° This consent relates to the purpose of publication of the personal data in the directories, but not to the identity of the directory provider67 KB (10,544 words) - 09:24, 10 September 2021
- Garante per la protezione dei dati personali (Italy) - 9529527 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council, of 27 April 2016, relating to the protection of individuals with regard to to the processing of personal55 KB (8,833 words) - 15:54, 6 December 2023
- AEPD (Spain) - PS/00348/2020 (category Article 58(2)(i) GDPR) (section English Machine Translation of the Decision)When setting the amount of the fine, the AEPD considered the negligent nature of the infringement - Article 83(2)(b) - and the fact that the infringement38 KB (5,648 words) - 14:31, 13 December 2023
- consult the GDPRhub style guide before you edit pages. In general editing a wiki is simple: Just click the "edit" button in the right corner of a page and2 KB (264 words) - 13:22, 22 November 2021
- with the ABC group on the basis of the article 37 of the law of 1 August 2018 on the organization of the National Commission for data protection and the52 KB (7,520 words) - 13:13, 20 July 2021
- Garante per la protezione dei dati personali (Italy) - 9538748 (section English Machine Translation of the Decision)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data24 KB (3,672 words) - 15:54, 6 December 2023
- AEPD (Spain) - PS/00152/2020 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)that the custody of the documentation is the function of the Secretary. Regarding the facts and causes of the incidence. Measures to minimise the incidence27 KB (4,243 words) - 14:06, 13 December 2023
- broadcaster of the video of the aggression suffered by a minor under 14 years old at the day of the XXXXXXX Institute classes, on *** DATE.1, by some of its companions47 KB (7,616 words) - 14:35, 13 December 2023
- AZOP (Croatia) - Decision 04-08-2022 (redirect from AZOP (Croatia) - Opinion on processing of personal data of workers - scanning of identity cards, bank card) (section English Machine Translation of the Decision)exercise of the official authority of the data controller; (f) processing is necessary for the purposes of the legitimate interests of the controller or a third11 KB (1,655 words) - 13:32, 31 October 2023
- corollary of the principle of respect for the rights of the defense, means that the Commission must provide the undertaking concerned with the opportunity22 KB (3,496 words) - 12:08, 17 February 2022
- (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data36 KB (5,524 words) - 17:01, 6 December 2023
- Identification of the data collected.C- Purposes of the treatment.D- Legitimation of the treatments.E- On the time of conservation of the data.F- Recipients of the38 KB (5,879 words) - 14:07, 13 December 2023
- definition of Article 4(12) GDPR, even if it is attributed to an error of an employee of the Bank Second, the Hellenic DPA considered the violation of the obligation52 KB (8,460 words) - 10:54, 10 January 2024
- Represenative. Although thousand of Luxemburgish and hundred thousands of European Data Subjects are impacted the DPA of Luxemburg refuses to open an inquiry/Investigation3 KB (337 words) - 16:59, 6 December 2023
- UODO (Poland) - DKN.5131.5.2020 (category Article 34(2) GDPR) (section English Machine Translation of the Decision)902. Following the initiation of the administrative procedure in this case, the Company notified the President of UODO of the breach of personal data protection47 KB (7,608 words) - 10:00, 17 November 2023
- Garante per la protezione dei dati personali (Italy) - 9445550 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)of staff in the controller (a body governed by public law) and (3) the absence of previous violations of the same type. On the basis of the above elements22 KB (3,478 words) - 15:51, 6 December 2023
- during the hearing, one of the three members of the DPA had stepped down due to a conflict of interest. Therefore, the chair decided to issue the decision84 KB (12,933 words) - 16:46, 12 December 2023
- number of searches of the complainant's ID number in the case file system of the police and the prosecuting authority, in the register of names and the guilt39 KB (6,351 words) - 09:52, 6 May 2021
- an explanation of the abandonment of the documentation of its workers in the field. It is also recorded in the Report of the list of the 29 people affected27 KB (3,993 words) - 13:52, 13 December 2023
- attaching the certificate of birth of the nationality applicant to the document of resolution of granting of nationality. The high number of resolutions51 KB (7,770 words) - 14:08, 13 December 2023
- contested the legality of such a decision before the Supreme Court of Belgium. The Supreme Court annulled the decision of the Court of Appeal of Brussels because43 KB (6,749 words) - 07:07, 28 October 2021
- NAIH (Hungary) - NAIH/2020/974/4 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)form in the text of the petition. " When asked by the Authority about the personal data of the data subjects during the authentication of the data, and67 KB (10,815 words) - 10:11, 17 November 2023
- Garante per la protezione dei dati personali (Italy) - 9445710 (section English Machine Translation of the Decision)recording of it. The Italian DPA had to understand whether there was a breach of art. 12 and 15 of the GDPR in relation to an access request of the complainant3 KB (342 words) - 15:51, 6 December 2023
- DSB (Austria) - 2020-0.550.322 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal26 KB (4,098 words) - 13:51, 12 May 2023
- AP (The Netherlands) - 31.05.2021 (category AP (The Netherlands)) (section English Machine Translation of the Decision)a base 15 to determine the recipients of the group message. The group message is sent after the UWV then to the recipients in the MyWorkbook environment106 KB (14,502 words) - 17:09, 12 December 2023
- NAIH (Hungary) - NAIH/2020/34/3 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)factors in deciding the amount of the fine issued to the respondent, on the basis of GDPR Articles 83(2)(a), (k), (c) and (d). The respondent will be subject48 KB (7,727 words) - 10:11, 17 November 2023
- APD/GBA (Belgium) - 19/2020 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)(EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data39 KB (6,246 words) - 16:55, 12 December 2023
- ANSPDCP (Romania) - fine to Enel Energie Muntenia SA (section English Machine Translation of the Decision)of the processing. Thus, the controller violated the security of processing as required by Article 32 GDPR and the DPA imposed the fine of 14,423.7 lei4 KB (410 words) - 15:18, 13 December 2023
- HDPA (Greece) - 4/2022 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)infrastructure used in the context of the incident. For the identified violations and taking into account the criteria of article 83 par. 2 GKPD, the Authority imposed11 KB (1,274 words) - 10:37, 23 February 2022
- About the Privacy Policy: By virtue of the powers that article 58.2 of Regulation (EU) 2016/679, of the European Parliament and of the Council, of 04/27/1631 KB (4,862 words) - 14:28, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9542155 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)Italian DPA notes the unlawfulness of the processing of personal data carried out by the Local Health Authority of Bologna for violation of Articles 5(2)(f) and26 KB (4,162 words) - 15:54, 6 December 2023
- to an acute nature of the situation and the need for crucial (business) information. In the second case, however, the DPA held that the company had no legal5 KB (608 words) - 18:57, 5 March 2022
- to the information. 2. service is acting under the authority or the control of the provider. Paragraph 1 shall not apply when the recipient of the 3. This37 KB (5,933 words) - 16:53, 19 April 2024
- Garante per la protezione dei dati personali (Italy) - 9547248 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)letter a) of the Regulation); GIVEN the note of 11 September 2019 with which the Office notified the parties of the extension of the deadline for the decision22 KB (3,235 words) - 15:55, 6 December 2023
- NAIH (Hungary) - NAIH/2020/66/21 (category Article 25(2) GDPR) (section English Machine Translation of the Decision)days of becoming final inform the data subject of the fact and circumstances of the incident, the data subject on the scope of personal data and the measures67 KB (10,492 words) - 10:11, 17 November 2023
- centre. Did the enclosure of the report in the emails constitute a violation of the GDPR? The AEPD held that the senders of the email violated the principle30 KB (4,761 words) - 14:24, 13 December 2023
- DSB (Austria) - 2020-0.743.659 (category Article 9(2) GDPR) (section English Machine Translation of the Decision)186/1950 as amended; Sections 1 to 3 of the Ordinance of the City of Vienna's Magistrate regarding the provision of information for contact tracing in50 KB (8,015 words) - 13:52, 12 May 2023
- Garante per la protezione dei dati personali (Italy) - 9451049 (section English Machine Translation of the Decision)by at least one of the subjects of the economic relationship, the xml files of the invoices are deleted within 60 days from the end of the transitional period;9 KB (1,288 words) - 15:52, 6 December 2023
- AZOP (Croatia) - Decision 28-08-2019 (redirect from AZOP (Croatia) - Decision of 28 August 2019) (category Article 25(2) GDPR) (section English Machine Translation of the Decision)Article 7, paragraph 2 of the said Ordinance, the financial report of the budget users of the state budget for the financial year consists of Balance sheets16 KB (2,373 words) - 15:31, 30 October 2023
- and / or the resolution of the contract independent of the guarantee that the deposit supposed. " or “3.- RETURN OF POSSESSION.- At the end of the leasing36 KB (5,582 words) - 14:35, 13 December 2023
- legitimate basis for the processing of personal data. The facts claimed also provide evidence of the violation of the Article 13 of the GDPR, by not informing31 KB (4,909 words) - 13:56, 13 December 2023
- complainant contacted the DPA. Did the company have a legal basis for monitoring the former employee's email account? The DPA held that the company did not have5 KB (483 words) - 18:55, 5 March 2022
- employee of the Department of Administrative Affairs, as secretary, attended the meeting, by order of the President. The Authority took into account the following:102 KB (17,186 words) - 13:46, 26 April 2024
- Tietosuojavaltuutetun toimisto (Finland) - 531/161/20 (section English Machine Translation of the Decision)with Article 25 GDPR. The Finnish DPA held that the data processing activities fell within the meaning of Article 35, and that the controller did not comply3 KB (263 words) - 13:05, 3 March 2024
- AEPD (Spain) - PS/00001/2021 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)establishes that 'the purpose of the multiplier for deterrence and the taking into consideration of the size and global resources of the undertaking in question270 KB (43,335 words) - 12:39, 13 December 2023
- THIRD: A copy of the e-mail sent and a receipt of the establishment of the extension of the deadline for completing the procedures before the AEAT, in which32 KB (4,834 words) - 14:43, 13 December 2023
- no reply in the Agency to the transfer of the claim. THIRD: On 09/06/2020, in accordance with article 65 of the LOPDGDD, the Director of the Spanish Agency32 KB (4,837 words) - 14:26, 13 December 2023
- accordance with the provisions of Article 58.2 of the RGPD and in articles 47 and 48.1 of the LOPDGDD. II Article 6.1 of the RGPD, establishes the cases that18 KB (2,727 words) - 13:50, 13 December 2023
- images of the street, in accordance with Article 58(2)(d) GDPR. The company PLAY ORENES S.L. made use of the reduction of 20% of the amount of the sanction50 KB (7,524 words) - 13:44, 13 December 2023
- Helsingin hallinto-oikeus (Finland) - H5259/2022 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)position on the legality of the processing of his personal data in the social and health sector of the city of Helsinki (later the controller). The processing43 KB (6,678 words) - 08:41, 4 March 2024
- 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic82 KB (13,424 words) - 17:10, 6 December 2023
- DSB (Austria) - 2020-0.111.488 (category Article 9(2) GDPR) (section English Machine Translation of the Decision)order. In the criminal verdict issued on the basis of the objection, the punished person is required to contribute to the costs of the criminal proceedings8 KB (1,048 words) - 13:50, 12 May 2023
- Datatilsynet (Norway) - 20/01949 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)submitted a complaint to the DPA on the municipality's use of a digital form to survey bullying behaviour at local schools. The DPA concluded in their investigations49 KB (7,572 words) - 16:14, 6 December 2023
- ofthe children of the group and the management of the Center. The cameras are orientedform that they only collect the image of the area where the children develop31 KB (4,808 words) - 14:01, 13 December 2023
- 58.2 of RGPD and in art. 47 and 48.1 of LOPDGDD. II The legitimacy for the treatment of the fingerprint for the control of the workers by the employer we35 KB (5,363 words) - 14:02, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 8235/154/18 (category Article 58(2)(c) GDPR) (section English Machine Translation of the Decision)from the head office of the optician group, the local optician's company, the Finnish country company and the company defined as the head office of the28 KB (4,501 words) - 13:07, 3 March 2024
- Tietosuojavaltuutetun toimisto (Finland) - TSV/29/2020 (category Article 25(2) GDPR) (section English Machine Translation of the Decision)printed or created on the basis of a filing system. The DPA was of the opinion that SMS should be considered as such a document. The DPA emphasised that, in25 KB (3,651 words) - 09:37, 3 April 2024
- contains the home address of the claimant. SECOND: In view of the facts stated, on October 1, 2019 and on the 14th of the same month and year, the claim for17 KB (2,458 words) - 13:51, 13 December 2023
- not the content and form of the instruction of the superior acting on behalf of the Applicant was precisely described. THE In view of the above, the Authority58 KB (9,071 words) - 10:12, 17 November 2023
- BAG - 9 AZR 383/19 (category Article 38(3) GDPR) (section English Machine Translation of the Decision)dismissed. 3. The plaintiff must bear the costs of the legal dispute. By law! Facts of the case The parties dispute the validity of the plaintiff's appeal40 KB (6,019 words) - 14:13, 28 November 2023
- continue with the next phase of the process of obtaining the duplicate. After being aware of the facts, the person responsible recommended to the claimant make49 KB (7,973 words) - 13:25, 13 December 2023
- virtue of the Order provided. The purpose of the subsequent treatment is identical to that for which the preliminary diligence: the protection of the intellectual29 KB (4,537 words) - 14:19, 13 December 2023
- place: filming of the data subject, storage of the recording and showing the recording to others. In the opinion of the DPA it was clear that the parents' consent34 KB (5,375 words) - 10:07, 17 November 2023
- AZOP (Croatia) - Decision 21-01-2022 (redirect from AZOP (Croatia) - Decision of 21 January 2022) (section English Machine Translation of the Decision)registry. The data subject then filed a complaint with the DPA. First, the DPA considered that the data subject was not a user or client of the controller18 KB (2,722 words) - 15:26, 30 October 2023
- order to minimize the capture of areas beyond the perimeter of the Residence and to Above all, the visualization of the windows of the adjoining houses25 KB (3,876 words) - 13:48, 13 December 2023
- 197(1) of the Spanish Criminal Code, with the aggravating circumstance from Article 197(5) of being data related to the sex life of the victim. Can the AEPD48 KB (7,550 words) - 14:05, 13 December 2023
- a penalty of €150 per day of delay at the end of a period of 2 months following the notification of the decision. The CNIL also ordered the municipality22 KB (3,384 words) - 13:25, 24 January 2024
- Korkein hallinto-oikeus (Finland) - KHO:2024:34 (section English Machine Translation of the Decision)existed if the right of internet users to receive the data in question superseded the right of the person who requested the deletion of the data to the protection60 KB (9,713 words) - 13:07, 26 March 2024
- on the basis of § 68 of the German Medicines Act. The tax audit had taken place on the complainant's premises. The definition of the purpose of the official66 KB (10,546 words) - 13:50, 12 May 2023
- existence of the prerequisite for the liability of Ing Bank N.V., presupposition constituted by the possession of the latter of the quality of owner or of responsible13 KB (1,994 words) - 14:01, 21 June 2023
- for processing of this claim, a transferred the defendant, in accordance with the provisions of article 65.4 of the Law Organic 3/2018, of December 5, Protection38 KB (6,160 words) - 14:06, 13 December 2023
- Article 21 of the General Data Protection Regulation and confirming the objections of the lecturers - he requested the enforcement of the rights of the data9 KB (1,337 words) - 10:13, 17 November 2023
- UODO (Poland) - DKN.5130.2815.2020 (category Article 32(2) GDPR) (section English Machine Translation of the Decision)Article 32(1) and (2) of 2 of Regulation EU 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with37 KB (5,819 words) - 09:58, 17 November 2023
- prompting the data subject to file a complaint with the Spanish DPA. Initially, the DPA held that the controller was not obliged to fulfill the data subject's13 KB (1,878 words) - 13:37, 13 December 2023
- clarify the answer provided. The company did not respond to the third request of the Polish DPA. Based on the facts of the case and on the analysis of the31 KB (5,101 words) - 09:52, 17 November 2023
- Garante per la protezione dei dati personali (Italy) - 9435807 (category Article 58(2)(d) GDPR) (section English Machine Translation of the Decision)In setting the quantity of the fine, the Garante considered the following to be factors justifying the size of the fine: -the wide scope of the processing58 KB (9,448 words) - 15:50, 6 December 2023
- after the filing of the complaint. The provisions regarding the lawfulness of the data. both the consent of the interested party who is *** COMPANY.2 and33 KB (5,338 words) - 14:09, 13 December 2023
- maintain the subscription. 2.2. Comments from the City of Copenhagen In its opinion to the Data Inspectorate, the City of Copenhagen stated that the municipality13 KB (1,990 words) - 16:22, 6 December 2023
- CNIL (France) - SAN-2023-0076 (category Article 9(2)(j) GDPR) (section English Machine Translation of the Decision)36 GDPR. The elements of the DPIA under scrutiny were the sources of the data used and the purpose of processing. In relation to the sources of data used19 KB (2,826 words) - 17:01, 6 December 2023
- 2016/679 of the European Parliament and of the Council of 27 April 2016 on the the protection of individuals with regard to the processing of personal90 KB (14,937 words) - 12:35, 3 August 2022
- APD/GBA (Belgium) - 05/2021 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal60 KB (9,281 words) - 16:50, 12 December 2023
- cookies identified in the The previous paragraph responds to the preferences of the user of the Website. In this way, it is in the interest of this party to show46 KB (7,199 words) - 13:48, 13 December 2023
- under the rules of the GDPR? The BVwG held that the provisions of the Austrian Administrative Penal Act (Verwaltungsstrafgesetz - VStG) and the Austrian47 KB (7,345 words) - 09:41, 10 September 2021
- assessed the legality of the cookie banner showed on the webpage based on its own visit of the site. First of all, the AEPD noted that the new version of the36 KB (5,344 words) - 10:47, 13 December 2023
- subjects (the company processes data relating to 21.10% of the Belgian population), the seriousness of the breach and the nature of the data processed (in113 KB (18,732 words) - 16:50, 12 December 2023
- Hämeenlinnan hallinto-oikeus (Finland) - 2548/2023 (category Article 85(2) GDPR) (section English Machine Translation of the Decision)light of this, the Court agreed with the DPA that the controller had not violated the GDPR or the Finnish Data Protection Act. The Administrative Court of Helsinki44 KB (6,893 words) - 10:28, 25 March 2024
- APD/GBA (Belgium) - 08/2019 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)and 5.2 of the DGPS and Article 6 of the DGPS; 2.the defendant has not complied with the obligations imposed by sections 12.1. and 12.2. of the DGPS and24 KB (3,843 words) - 16:51, 12 December 2023
- Garante per la protezione dei dati personali (Italy) - 9435753 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)basis of the duration of the infringements, both the wilful and negligent violations of the GDPR committed by Wind Tre, and the number of people affected129 KB (21,020 words) - 15:49, 6 December 2023
- determining the amount of a significantly serious infringement, the lack of diligence in the conduct of BBVA and the volume of business of the complainant37 KB (5,785 words) - 14:11, 13 December 2023
- recipients of the mail have. In the case of an advisory email about a new document in the Krifa Box, both the subject field of the advisory email and the body24 KB (3,947 words) - 16:24, 6 December 2023
- covered by the consent exemption. For this reason, the DPA found a violation of Article 22(2) LSSI. In light of the above violations, DPA has imposed the following195 KB (30,495 words) - 12:40, 13 December 2023
- with the Bavarian DPA (BayLDA) regarding the use of the newsletter tool Mailchimp by the respondent, a German company. He argued that the transfer of email15 KB (2,168 words) - 13:06, 14 September 2021
- Tietosuojavaltuutetun toimisto (Finland) - TSV/224/2023 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)from the controller on the basis of the processing of his personal data. The registered person has doubts about the legality of the processing of his personal31 KB (4,693 words) - 11:50, 6 March 2024
- By virtue of the powers that article 58.2 of Regulation (EU) 2016/679, of the European Parliament and of the Council, of 04/27/16, regarding the Protection45 KB (6,853 words) - 14:29, 13 December 2023
- AP (The Netherlands) - 24.02.2022 (category AP (The Netherlands)) (section English Machine Translation of the Decision)planNVIS 13 2.3.1 Legal framework 13 2.3.2 Factual findings 14 2.3.3Legal assessment 17 2.4PhysicalSecurityAccesstoNVIS 19 2.4.1Legal framework 19 2.4.2 Factual179 KB (22,957 words) - 17:07, 12 December 2023
- AZOP (Croatia) - Decision 16-11-2021 (redirect from AZOP (Croatia) - Decision of 16 November 2021 - Real Estate Agency) (section English Machine Translation of the Decision)right to the protection of personal data xy, provides the following SOLUTION The request to determine the violation of the right to the protection of personal12 KB (1,882 words) - 15:24, 30 October 2023
- AEPD (Spain) - PS/00385/2020 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)information, on the identification data of the owner of the same. d) .- Through the link << Privacy Policy >>, existing at the bottom of the main page, the web redirects55 KB (8,967 words) - 14:33, 13 December 2023
- correctly from the operational point of view. They conclude after the analysis of the evidence and the report of the payment service provider, that the reported10 KB (1,503 words) - 10:35, 13 December 2023
- for the policy of privacy made on the website of its ownership. 1,000 euros (thousand euros), for the infringement of article 22.2 of the LSSI, due to20 KB (3,162 words) - 14:08, 13 December 2023
- evaluation of the use of this database and the legal basis for the processing of the data, the Customs Authority sent a data breach notification to the DPA. The61 KB (9,133 words) - 18:55, 5 March 2022
- Penalty Procedure, the Director of the Spanish Data Protection Agency, by virtue of the powers that art 58.2 of Regulation (EU) 2016/679, of the European Parliament45 KB (7,217 words) - 14:40, 13 December 2023
- DSB (Austria) - D123.768/0004-DSB/2019 (category Article 85(2) GDPR) (section English Machine Translation of the Decision)11 of the Charter of Fundamental Rights of the European Union (EU-CFR), OJ No C 326 of 26 October 2012, p. 39, Article 12 of the Convention for the Protection29 KB (4,637 words) - 13:57, 12 May 2023
- against the entity complained of, by virtue of the powers established in Article 58.2 of the RGPD and in Articles 47, 64.2 and 68.1 of the Organic Law 3/201839 KB (6,623 words) - 14:08, 13 December 2023
- noyb.eu, and made possible by the contributions of hundreds of volunteers. loading loading loading loading Subscribe to the weekly GDPRtoday newsletter!6 KB (277 words) - 12:46, 10 April 2024
- Korkein hallinto-oikeus (Finland) - KHO:2023:56 (section English Machine Translation of the Decision)purpose. In the view of the DPA, the court had failed to apply the principle of minimisation. The Supreme Administrative Court noted that the initial decision45 KB (5,016 words) - 14:14, 21 March 2024
- allegedinfringement of article 5.1.f) of the RGPD, sanctioned in accordance with the provisions of theArticle 58.2.a) of the aforementioned RGPD.FIFTH: The aforementioned37 KB (5,700 words) - 14:24, 13 December 2023
- 2016/679 of the European Parliament and of the Council of April 27, 2016 relating to the protection of personal data and the free movement of such data;53 KB (8,418 words) - 11:21, 6 February 2024
- Garante per la protezione dei dati personali (Italy) - 9698724 (section English Machine Translation of the Decision)Guardia di Finanza. From the assessment it emerged that, with the resolution of the Capitoline Council no. XX of the XX (annex 3 of the XX minutes), have been83 KB (13,648 words) - 11:30, 16 August 2022
- extensive overview of the facts and background to the case, the Court of Appeal refers to considerations 2.1 to 2.11 of the contested judgment of 2 February 202228 KB (4,573 words) - 10:04, 14 December 2023
- AEPD (Spain) - PS/00070/2020 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)respond to the claims of the claimant, who did not mention ex- The name of the Mayor was expressly displayed on the B.B.B. website, and not on the of the townhall43 KB (7,001 words) - 13:56, 13 December 2023
- sec. 3 of the Act of May 10, 2018 on the Protection of Personal Data (Journal of Laws of 2019, item 1781) and art. 57 sec. 1 lit. a, art. 58 sec. 2 lit60 KB (9,755 words) - 09:58, 17 November 2023
- frame of the images captured by the video surveillance camera. lancia of the store, in which one can see on the other side of the threshold of the door46 KB (7,230 words) - 14:20, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9283014 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)sensitiveness of disseminated data, and, on the other hand, the small budget of the school and the deletion of the document before the proceeding started. Feel6 KB (437 words) - 15:47, 6 December 2023
- elements of the municipality’s actions. Did the use of the claimant’s personal data for the registration calling infringed any articles of the GDPR? The AEPD45 KB (7,267 words) - 13:56, 13 December 2023
- Personvernnemnda (Norway) - 2021-09 & PVN-2021-15 (20/01790) (section English Machine Translation of the Decision)its assessment of the size of the infringement fee and forwarded the case to the Privacy Board on 3 May 2021. Coop was informed of the case in a letter40 KB (6,549 words) - 18:49, 5 March 2022
- GHSHE (Netherlands) - 200.270.589 01 and 200.270.589 02 (section English Machine Translation of the Decision)ABN Amro. 2.4. The court of appeal has also taken note of the contents of the judgment: * - the minutes of the oral procedure at first instance of 9 September91 KB (15,371 words) - 15:11, 5 October 2021
- NAIH (Hungary) - NAIH-373-31/2023 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)data at the bottom of the letters, and that the use of the data was terminated when the letter was forwarded. The information on the letter and in the legal140 KB (23,189 words) - 08:25, 20 February 2024
- Datatilsynet (Norway) - 17/01281 (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)process the personal data. 2) Second, the DPA held, however, that the processing was *not* necessary to achieve this interest, and therefore, 3) the balancing38 KB (6,275 words) - 16:13, 6 December 2023
- Court of Appeal of Brussels - 2022/AR/1085 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)deals with the dismissal for reasons of expediency. The court follows the reasoning of the DPA and dismisses this part of the complaint. the Court of Appeal30 KB (4,204 words) - 09:54, 14 December 2023
- CNIL (France) - SAN-2020-008 (category Article 13(2)(a) GDPR) (section On the right of access in the case of a company acquisition)mainly regarding the identity of the data controller, the legal basis for the processes, the transfer of data outside of the EU and the data retention period104 KB (16,646 words) - 17:09, 6 December 2023
- AEPD (Spain) - PS/00201/2019 (category Article 58(2)(d) GDPR) (section English Machine Translation of the Decision)1 of the Regulations on Relations between the Association and SCPSA, approved by the General Assembly of the Association. Article 2.3 of said Regulations54 KB (9,019 words) - 14:10, 13 December 2023
- Infringement of article 22.2) of the LSSI, regarding the non-existence of "Policy of Cookies ”of the website of its ownership, with an initial penalty of 3,00052 KB (8,471 words) - 14:33, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9570997 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)made in the absence of the required consent and pending the unsuitability of the legal base of legitimate interest. For these reasons the Italian DPA, with131 KB (21,014 words) - 15:55, 6 December 2023
- submissions of the legally represented complainant, it emerges that the subject of the complaint is the question of whether the respondent has infringed the complainant's25 KB (3,605 words) - 13:59, 12 May 2023
- application of the Members of Parliament to the National Council on G 72-74/2019 shall be rejected.6 The remainder of the application of the Members of the Bundesrat24 KB (3,729 words) - 09:50, 14 December 2023
- CNPD (Luxembourg) - Délibération n° 38FR/2021 (category Article 38(2) GDPR) (section English Machine Translation of the Decision)Regarding the breach of Article 37(7) GDPR, the CNPD considered that the contact details of the DPO were not easy to find on the website of the controller81 KB (11,895 words) - 16:58, 6 December 2023
- correction of the decision of 2 October 2015 on the suspension of unemployment benefits. NAV supplemented the decision with an electronic note in the document18 KB (2,845 words) - 10:07, 17 November 2023
- (section 2 of the notification). Finally, the defendant instructed the plaintiff to enable the legal basis for the collection and processing of the salutation41 KB (6,779 words) - 12:35, 24 November 2021
- 2002/58/EC of the European Parliament and of the Council of July 12, 2002 concerning the processing of personal data and the protection of privacy in the electronic56 KB (8,757 words) - 14:12, 28 February 2024
- Garante per la protezione dei dati personali (Italy) - 9779057 (category Article 58(2)(i) GDPR) (section English Machine Translation of the Decision)a legal basis. The DPA fined the controller € 70,000. When deciding the fine, the DPA took the unintentional nature of the breach, the additional measures63 KB (9,916 words) - 11:28, 16 August 2022
- Court of Appeal of Brussels - 2020/AR/1333 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)83.2.b of the GDPR) c) Measures taken by the controller and the processor to mitigate the damage suffered by the data subject (art / e83.2.c of the GDPR}51 KB (7,792 words) - 11:43, 24 January 2022
- and of the Council, of 04/27/16, regarding the Protection of Natural Persons regarding the Processing of Personal Data and the Free Circulation of these85 KB (13,042 words) - 12:42, 13 December 2023
- CNIL (France) - SAN-2020-018 (category Article 15(3) GDPR) (section Violation of the obligation to gather consent as prescribed by Article L. 34-5 of the Postal and Electronic Communication law:)2016/679 of the European Parliament and of the Council of April 27, 2016 relating to the protection of personal data and the free movement of such data;69 KB (11,007 words) - 17:10, 6 December 2023
- CNIL (France) - SAN-2021-024 (section The material competence of the CNIL and the non-application of the "one-stop shop" mechanism provided for by the GDPR)2002/58/EC of the European Parliament and of the Council of July 12, 2002 concerning the processing of personal data and the protection of privacy in the electronic82 KB (13,428 words) - 17:02, 6 December 2023
- Garante per la protezione dei dati personali (Italy) - 9685947 (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council, of 27 April 2016, relating to the protection of individuals with regard to to the processing of personal115 KB (18,595 words) - 11:30, 16 August 2022
- DPC (Ireland) - Inquiry into Airbnb Ireland UC - 28 September 2023 (category Article 58(2)(d) GDPR) (section English Machine Translation of the Decision)effort on the part of the controller to minimise the amount of personal data sent to it with the data subject's ID. With respect to the third issue, the DPC17 KB (2,411 words) - 09:25, 27 November 2023
- DPA (HmbBfDI) and later transferred to the German Federal DPA (BfDI), advanced a number of grounds upon which the consent of the data subject could not289 KB (33,568 words) - 15:00, 1 February 2023
- 9 (2) of the GDPR apply. Article 9 (2) of the GDPR does not contain an exception that would explicitly allow the processing of health data for the purpose72 KB (11,159 words) - 10:09, 17 November 2023
- BVwG - W245 2252208-1/36E and W245 2252221-1/30E (category Article 46(2)(c) GDPR) (section English Machine Translation of the Decision)Austrian DPA found that the use of Google Analytics by an Austrian website led to the transfer of personal data to the US in violation of Chapter V of the GDPR158 KB (26,392 words) - 08:25, 7 June 2023
- with the inspection function that the AEPD was carrying out (83(2)(b) GDPR) and the link between the activity of the respondent and the processing of personal86 KB (14,295 words) - 14:32, 13 December 2023
- Datatilsynet (Denmark) - 2019-432-0024 (category Article 6(2) GDPR) (section English Machine Translation of the Decision)accordance with the rules in Article 6 (2) of the Data Protection Regulation. 1 (e) and section 11 (1) of the Data Protection Act. 1. 3.2. Obligation to13 KB (1,936 words) - 16:37, 6 December 2023
- Department of Education of the Government of Navarra replied to the decision to initiate the procedure, agreeing with the allegations of infringement of Articles116 KB (18,941 words) - 14:21, 13 December 2023
- Personvernnemnda (Norway) - 2020-14 (19/00110) (section English Machine Translation of the Decision)Google. The DPA made a balance of interests between the consideration of freedom of information and the public's interest in having access to the search32 KB (5,120 words) - 18:48, 5 March 2022
- monthly reach of 35,000 readers. The Inspectorate of the GBA informed the Respondent of this decision of the Executive Committee of the GBA by letter dated107 KB (17,697 words) - 16:52, 12 December 2023
- IP - 0610-376/2020/35 (category Article 13(2) GDPR) (section English Machine Translation of the Decision)with para. Article 3 of the ZIN, in the matter of performing inspection control over the implementation of the provisions of ZVOP-1 and the General Decree110 KB (17,995 words) - 11:15, 22 April 2021
- account the current technical level, the cost of implementation and the nature of the treatment concerned. to ensure adequate security of the information16 KB (2,399 words) - 16:34, 6 December 2023
- Datatilsynet (Norway) - 18/02579 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)close, and a lack of control with the supplier (CGI) regarding the results of the security testing, was a breach of the principle of accountability following41 KB (6,337 words) - 18:52, 5 March 2022
- *** COMPANY. 3. o The company *** EMPRESA.2 was hired for the purpose of analyzing the scope, together with *** COMPANY.3 , and apply the measures necessary100 KB (16,401 words) - 14:07, 13 December 2023
- Tietosuojavaltuutetun toimisto (Finland) - 8393/161/2019 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)overview of the processing of personal data by the controller in the context of the automated decision making for the loyalty program. Thus, the authority held111 KB (17,604 words) - 13:08, 3 March 2024
- UODO (Poland) - ZSOŚS.421.25.2019 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)32 sec. 2, art. 38 sec. 1, art. 39 sec. 1 lit. b and art. 39 sec. 2 of the Regulation of the European Parliament and of the EU Council 2016/679 of 27 April156 KB (25,012 words) - 10:01, 17 November 2023
- AEPD (Spain) - PS/00025/2019 (category Article 58(2)(d) GDPR) (section English Machine Translation of the Decision)this Agency the receipt of that communicationby the recipient.The letter in which the claimed entity of the claim was transmitted issigned by the AEPD on 10/15/201888 KB (14,301 words) - 13:48, 13 December 2023
- Garante per la protezione dei dati personali (Italy) - 9685922 (redirect from Garante per la protezione dei dati personali (Italy) - Injunction order against Guglielmo Marconi Airport of Bologna Spa (9685922)) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council, of 27 April 2016, relating to the protection of individuals with regard to to the processing of personal119 KB (19,123 words) - 11:29, 16 August 2022
- done in the moment of the collection of the data. The AEPD also analyzed the content of the information provided. Firstly, the the way that the data subject440 KB (73,154 words) - 09:44, 12 May 2021
- to verify the presumed author, nor the operability of the operating system. LEGAL FOUNDATIONS I By virtue of the powers that Article 58.2 of the RGPD grants12 KB (1,686 words) - 14:09, 13 December 2023
- balancing of the interests of the parties, whereas especially the likelihood of litigation, the weight of the claims involved and the interests of the data17 KB (2,569 words) - 07:15, 17 May 2022
- electronic message to the Personnel Department of DEWA X, the President and the Secretariat of the Board of Directors of DEWA X, the Director of Administration61 KB (10,257 words) - 10:15, 1 November 2023
- add the "friends/contacts" of those members. 3. The Inspectorate of the GBA informed the defendant of this decision of the Executive Committee of the GBA84 KB (14,035 words) - 16:56, 12 December 2023
- Personvernnemnda (Norway) - PVN-2022-22 (category Article 83(2) GDPR) (section English Machine Translation of the Decision)when applying the fine. The Norweigen DPA re-considered the case but found no reason to change its decision. The DPA submitted the case to the Norwegian Privacy91 KB (14,440 words) - 10:06, 17 November 2023
- following the protest. Page 2 21.3.3 pre-convert in accordance with applicable law and the provisions of this decisioninformation practices.2. The Authority192 KB (30,170 words) - 10:11, 17 November 2023
- 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter the Regulation or the GDPR) and of the Law n ° 78-17 of January 661 KB (10,028 words) - 17:09, 6 December 2023
- done in the moment of the collection of the data. The AEPD also analyzed the content of the information provided. Firstly, the the way that the data subject457 KB (75,575 words) - 09:36, 12 May 2021
- UODO (Poland) - ZSPR.421.7.2019 (category Article 7(3) GDPR) (section English Machine Translation of the Decision)(infringement of Article 24(1) of Regulation 2016/679). In the light of the foregoing, the President of the Office for the Protection of Personal Data of his own60 KB (9,815 words) - 10:02, 17 November 2023
- Tietosuojavaltuutetun toimisto (Finland) - 3075/182/2018 (section English Machine Translation of the Decision)end of the relationship (before 2018, the data will be deleted five years after the end of the relationship). DECISION OF THE DATA PROTECTION SUPERVISOR No7 KB (883 words) - 09:47, 17 November 2023
- Court of Appeal of Brussels - 2021/AR/74 (category Court of Appeal of Brussels (Belgium)) (section English Machine Translation of the Decision)made any interference from the Market Court obsolete. In case 26/2021, the Belgian DPA (APD/GBA) changes the language of the procedure against IAB to Dutch5 KB (518 words) - 15:08, 9 August 2022
- AP Barcelona - Auto 72/2021 (category Article 9(2) GDPR) (section English Machine Translation of the Decision)never be used. The purpose of the legislator in the development of the GDPR is not only to protect the rights of natural persons but also the free circulation34 KB (5,368 words) - 14:01, 20 September 2021
- BVwG - W101 2132183-1 and W101 2132039-1 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)Article 12(1) and (2) GDPR. Google Inc. filed an appeal with the BVwG against ruling I) and II) of the decision of the DSB. In the course of the pending procedure107 KB (17,615 words) - 09:42, 10 September 2021
- with the provisions of Title VII, Chapter I, Section Two of Organic Law 3/2018 of December 5, on the Protection of Personal Data and Guarantee of Digital22 KB (3,521 words) - 14:36, 13 December 2023
- AEPD (Spain) - PS/00266/2019 (category Article 83(2)(e) GDPR) (section English Machine Translation of the Decision)authority by Article 58(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard28 KB (4,459 words) - 14:23, 13 December 2023
- OLG Naumburg - 9 U 6/19 (category Article 9(2)(a) GDPR) (section English Machine Translation of the Decision)provisions of Paragraphs 17(3) and 3(5) of the ApBetrO, 43 of the AMG, 14 of the Professional Code of Conduct of the Chamber of Pharmacists of Saxony-Anhalt and32 KB (5,236 words) - 16:00, 10 March 2022
- Garante per la protezione dei dati personali (Italy) - 9445796 (section English Machine Translation of the Decision)No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data16 KB (2,430 words) - 15:51, 6 December 2023
- Personvernnemnda (Norway) (category DPA)appeal a decision directly with the DPA. If the DPA upholds its decision, the appeal is submitted to Personvernnemnda, who has the authority to overturn decisions5 KB (427 words) - 15:48, 24 January 2022
- HDPA (Greece) - 44/2019 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)continuation of the operation of the original server (server) of the same company, provided of course the processing of the data of a personal nature takes127 KB (21,184 words) - 15:39, 6 December 2023
- appeal of the defendant against the judgment of the Linz Higher Regional Court (Oberlandesgericht) as the court of appeal of 10 April 2020, GZ 2 R 35/20k-1934 KB (5,408 words) - 13:57, 20 September 2021
- appear in the The website of said organization requests the authorization of the children if they are over 14 years of age or of the holder of their parental19 KB (2,923 words) - 14:26, 13 December 2023
- that the relevant processing of information in Y Municipality takes place within the framework of the rules of the Data Protection Regulation. The following10 KB (1,528 words) - 16:23, 6 December 2023
- and the case law from the Court of Justice of the EU, that “that the scope of application of the special and exclusive discipline (also in the sense that13 KB (1,771 words) - 11:44, 10 September 2021
- and the case law from the Court of Justice of the EU, that “that the scope of application of the special and exclusive discipline (also in the sense that12 KB (1,766 words) - 11:44, 10 September 2021
- EDPB - Binding Decision 4/2022 - 'Meta (Instagram)' (section English Machine Translation of the Decision)this case, the GDPR" (119). Turning to the facts of the case, the EDPB outlines a number of factors which, in contradiction to the view of the DPC, support468 KB (51,340 words) - 14:10, 30 January 2023
- initiative, the Berlin Commissioner for Data Protection (the DPA) started an "on-the-spot" investigation into the controller. The DPA found that the controller's7 KB (936 words) - 16:39, 12 December 2023
- CE - N° 428451 (category Article 9(3) GDPR) (section On the conditions laid down by the contested decree for the processing of data by auditors)prior consultation of the National Council of Physicians and the DPA on the contested decree. The Public Health Code requires the accounts of public health35 KB (5,153 words) - 16:29, 20 May 2021
- against the controller, although it was undisputed that the controller had not notified the DPA about the loss of the USB stick. The Court held that the data28 KB (4,596 words) - 18:30, 18 November 2021
- Tietosuojavaltuutetun toimisto (Finland) - 60/171/2020 (section English Machine Translation of the Decision)within the meaning of Article 28 of the General Data Protection Regulation, with the controller of the personal data processing company. The controller has8 KB (1,064 words) - 09:48, 17 November 2023
- Digitaliseringsstyrelsen - Decision against Google of 30 October 2023 (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons ner in connection with the processing of personal52 KB (8,025 words) - 05:01, 23 November 2023
- GHAL - 200.256.426 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)was granted. 2.2 After the pleadings, the Court of Appeal issued a judgment. 2.3 In the principal's appeal, DFW claimed that the Court of Appeal should set40 KB (6,777 words) - 16:28, 15 March 2022
- heard the report of the case carried out in the chamber was of council of the u 24/03/2021 by the cons. TERRUSI FRANCESCO; all the writings of the P .M21 KB (3,076 words) - 12:50, 16 September 2021
- EDPB - Binding Decision 2/2022 - 'Instagram' (category Article 24(2) GDPR) (section English Machine Translation of the Decision)integral to the delivery of the service to the data subject. The controller should also be able to justify the necessity in the context of the mutually understood276 KB (38,206 words) - 09:46, 20 January 2023
- AEPD (Spain) - PS/00254/2019 (category Article 58(2) GDPR) (section English Machine Translation of the Decision)article 58.2 b) of the GDPR, the diligence carried out by VOX with regard to the rapid communication of the security violation to the AEPD, the actions taken39 KB (6,341 words) - 14:23, 13 December 2023
- infringement; (iii) the continued nature of the infraction; (iv) the evident connection between the activity of the defendant and the processing of personal data206 KB (32,869 words) - 14:36, 13 December 2023
- IDPC (Malta) - CDP/IMI/LSA/17/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)comply with the legal obligation in Article 13(2) of S.L. 373.01. Timing of the request The DPA determined that the controller violated Article 12(3) GDPR,7 KB (825 words) - 13:19, 9 November 2022
- APD/GBA (Belgium) - 48/2022 (category Article 9(2)(g) GDPR) (section 2. The legal basis (Articles 6 and 9 GDPR))Articles 5(2), 24 and 35(1) GDPR. The DPA concluded that the airport was the controller for the processing of data in the context of the first step. The airport7 KB (874 words) - 16:47, 6 April 2022
- translation of the English original. Please refer to the English original for more details. Inquiry concerning the Department of Health (IN-21-3-2) Date of Decision:10 KB (1,339 words) - 12:51, 17 October 2023
- Datatilsynet (Norway) - 21/02455 (category Article 3(2)(b) GDPR) (section English Machine Translation of the Decision)because of the lack of information from the controller, the DPA concluded that this criteria was also fulfilled. Third, the DPA conducted the balancing9 KB (1,125 words) - 04:17, 23 June 2022
- VG Ansbach - AN 14 K 19.01313 (category Article 78(2) GDPR) (section English Machine Translation of the Decision)tenor 1. The proceedings are discontinued. 2. The defendant bears the costs of the proceedings. 3. The value in dispute is set at EUR 2,500.00. 4. The plaintiff13 KB (2,004 words) - 09:00, 23 August 2023
- APD/GBA (Belgium) - 127/2022 (category Article 35(3) GDPR) (section English Machine Translation of the Decision)into the matter. The site was unencrypted with the http-protocol at the time of the first report of the investigation of the DPA. However, after the DPA14 KB (1,993 words) - 14:36, 14 September 2022
- protective law within the meaning of § 823.2 of the Civil Code, had to be enforced here. With reference to the judgment of the European Court of Justice Google127 KB (21,367 words) - 16:00, 22 March 2022
- APD/GBA (Belgium) - 159/2022 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)not the controller is a large company, the nature of the function of the data subject and the context of the departure of the data subject. The DPA stated28 KB (4,300 words) - 15:48, 16 November 2022
- IMY (Sweden) - DI-2020-10545 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)The Swedish DPA found H&M to have processed personal data for direct marketing in violation of Articles 6(1), 12(2), 12(3) and 21(3) of the GDPR. Six different5 KB (601 words) - 15:53, 15 November 2023
- APD/GBA (Belgium) - 137/2021 (category Article 12(3) GDPR) (section Violation of the right to access (Article 15 GDPR), the right to object (Article 21 GDPR) and the right to erasure (Article 17 GDPR))subjects also have the right to object to the processing of their personal data, and to request the erasure of their personal data. The Belgian DPA observed that6 KB (761 words) - 10:35, 16 December 2021
- CNIL (France) - 2c1s196162814 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)complained at the DPA about the unlawfulness of processing of his personal data and requested erasure of his personal data. The DPA did not make any specific13 KB (1,877 words) - 12:06, 4 January 2023
- DSB (Austria) - 2022-0.277.156 (category Article 3(2)(b) GDPR) (section English Machine Translation of the Decision)Ascertaining the applicability of the GDPR at the facts at issue, the Austrian DPA addressed the question whether Article 3(2)(b) GDPR covered the processing5 KB (662 words) - 08:42, 25 May 2023
- APD/GBA (Belgium) - 42/2023 (category Article 9(2)(h) GDPR) (section English Machine Translation of the Decision)GDPR. The controller denied this request of erasure. The DPA dismissed the complaint on the basis of article 95, §1, 3° WOG (Law establishing the DPA). The16 KB (2,252 words) - 15:34, 28 April 2023
- IDPC (Malta) - CDP/COMP/344/2022 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)As part of the curriculum, the therapists would assess the data subject at the beginning of the year and set goals for them. At the end of the year, these6 KB (693 words) - 09:56, 13 November 2023
- NAIH (Hungary) - NAIH-3561-4/2022 (category Article 28(3)(a) GDPR) (section Official English Text of the Decision)The Hungarian DPA ordered the operator of a weather forecast website to stop transferring data to the US via Google ad services. The DPA held that the13 KB (1,677 words) - 09:39, 14 November 2022
- Datatilsynet (Norway) - 20/03771 (category Article 46(2)(c) GDPR) (section English Machine Translation of the Decision)to the US or make the data available from the US in the context of their processing on the controller's behalf. As a result, the DPA found that the controller15 KB (2,045 words) - 18:58, 7 March 2023
- APD/GBA (Belgium) - 02/2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)9. In the event of a continuation of the handling of the case on the merits, the Disputes Chamber the parties pursuant to Articles 98, 2° and 3° in conjunction15 KB (2,043 words) - 15:41, 24 January 2023
- ANSPDCP (Romania) - Fine against La Santrade S.R.L. (category Article 12(2) GDPR) (section English Machine Translation of the Decision)exercise of the rights of data subjects. In particular, the DPA failed to fulfill a data deletion request. The DPA held that the controller did not comply5 KB (537 words) - 13:31, 23 June 2021
- what the appellant argues, the extent of the processing plays a role in the consideration of the proportionality of the processing under Article 8(2), since40 KB (6,464 words) - 09:58, 7 July 2021
- Tallinna Halduskohus - 3-19-579 (category Article 58(3)(b) GDPR) (section English Machine Translation of the Decision)precepts in the course of the supervision proceedings as well as the decision of 26 March 2019 to return the challenge No 2.1.-3/19/656 and order the Data Protection16 KB (2,518 words) - 14:09, 24 March 2022
- DSB (Austria) - DPA 2023-0.594.826 (category Article 2(1) GDPR) (section English Machine Translation of the Decision)other competent authorities of the Republic of Austria on the basis of the applicable legal provisions. The DPA found that the controller had relevant internal56 KB (8,709 words) - 14:27, 10 April 2024
- DPC - C-19-X-XXX Ryanair DAC - November 2020 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)complainant informed of the progress of the complaint via updates transmitted to the ICO. 14. The DPC provided the data controller with a copy of the draft decision35 KB (4,975 words) - 20:43, 5 May 2021
- APD/GBA (Belgium) - 10/2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)inside the DPA, a copy of the file may be requested by the parties. If one of parties wishes to make use of the possibility of consulting the file, the latter14 KB (1,967 words) - 15:07, 22 February 2023
- IMY (Sweden) - DI-2019-3375 (category Article 6(3) GDPR) (section English Machine Translation of the Decision)verify and evaluate the effectiveness of its measures. For this the DPA issued a fine of SEK 8 000 000. During the investigation, the DPA found that information15 KB (1,735 words) - 08:36, 29 July 2021
- APD/GBA (Belgium) - 35/2024 (category Article 4(2) GDPR) (section English Machine Translation of the Decision)is filed on the basis of article 62, § 1 of the WOG transferred to the Disputes Chamber. 2 6. In accordance with Article 95, § 2, 3° of the WOG as well as27 KB (4,006 words) - 10:14, 17 March 2024
- HDPA (Greece) - 28/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)violation of the provisions of Articles 12(3) and 15 GDPR. In addition, the DPA found that the controller had breached the independent duty of cooperation4 KB (397 words) - 15:02, 15 November 2022
- complaint with the Data Protection Authority data (hereafter "DPA") against the defendants. 2. The subject of the complaint concerns the collection of personal20 KB (2,756 words) - 07:49, 8 June 2023
- APD/GBA (Belgium) - 11/2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)2022, the complaint is declared admissible by the SPL of the DPA on the basis of articles 58 and 60 of the LCA and the complaint is transmitted to the Litigation25 KB (3,639 words) - 13:51, 28 February 2023
- IMY (Sweden) - DI-2020-10547 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)Article 58(2)(b) of the General Data Protection Regulation for the infringement of Article 21(3), 12(3), 6(1). Report on the supervisory report The Swedish37 KB (4,294 words) - 15:52, 25 October 2022
- APD/GBA (Belgium) - 33/2022 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)GDPR. Moreover, the DPA noted that the controller violated Article 33 GDPR by not notifying the DPA of the data breach. The DPA issued a warning pursuant26 KB (4,116 words) - 15:36, 30 March 2022
- IMY (Sweden) - DI-2021-10448, (category Article 58(2)(b) GDPR) (section English Machine Translation of the Decision)Second, The DPA held that the controller did not violate Article 16 GDPR for the way it handled the two erasure requests of the data subject. The DPA stated10 KB (1,505 words) - 15:07, 7 February 2023
- APD/GBA (Belgium) - 141-2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)against the defendant, the local section of the political party “Y” of Braine-l’Alleud (hereinafter “the political party”). 2. The subject of the complaint25 KB (3,494 words) - 13:27, 20 December 2023
- APD/GBA (Belgium) - 143/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)(SPL) of DPA on the basis of Articles 58 and 60 of the LCA and the complaint is transmitted to the Chamber Litigation under Article 62, § 1 of the LCA23 KB (3,383 words) - 08:06, 3 November 2022
- BlnBDI (Berlin) - 631.457.4 521.14765.10 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)to Article 15(3) GDPR. The DPA reprimanded the controller pursuant to Article 58(2)(b) GDPR. It is not entirely clear from the text of the decision itself13 KB (1,865 words) - 08:45, 16 February 2023
- BVwG - W211 2227144-1 (category Article 2 GDPR) (section English Machine Translation of the Decision)GDPR and the DPA pursuant to Article 77 of the GDPR in conjunction with Articles 4 and 35(2) of the DPA. Exceptionally, the data protection authority is38 KB (5,801 words) - 10:08, 10 September 2021
- IMY (Sweden) - DI-2020-10696 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)58(2)(c) GDPR and to deal with the erasure request pursuant of Article 58(2)(d) GDPR. Also, the DPA ordered the controller pursuant of Article 58(2)(d)57 KB (6,743 words) - 13:54, 1 February 2023
- IP (Slovenia) - 07141-9/2023/10 (category Article 17(3)(b) GDPR) (section English Machine Translation of the Decision)regarding the lawfulness of the processing of personal data. Following the initiation of the proceedings, the controller stated that Article 51 of the National6 KB (553 words) - 14:57, 6 December 2023
- APD/GBA (Belgium) - 141/2022 (category Article 17(3) GDPR) (section English Machine Translation of the Decision)or recent events. The DPA stated that the photo of the house constituted personal data, because the data subject was the owner of the house, which made25 KB (3,628 words) - 16:09, 9 November 2022
- IDPC (Malta) - CDP/IMI/LSA/22/2021 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)from the date of receipt of the request, and Articles 15(1), 15(2), 15(3) GDPR, when the controller failed to provide the data subject with a copy of their18 KB (2,190 words) - 09:57, 23 May 2023
- APD/GBA (Belgium) - 128/2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)article 47 of the order regulations internal to the DPA, a copy of the file may be requested by the parties. If one of parties wish to make use of the possibility23 KB (3,272 words) - 09:19, 13 September 2023
- APD/GBA (Belgium) - 149/2022 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)information when the provided information by the controller was deemed insufficient. Violation of Articles 28(2) and 28(3) GDPR The DPA confirmed that the controller89 KB (13,017 words) - 15:07, 2 November 2022
- APD/GBA (Belgium) - 165/2022 (category Article 13(2) GDPR) (section English Machine Translation of the Decision)Article 12(3) GDPR. The DPA ordered the controller to fulfil the request pursuant to Article 95(1)(5) WOG and Article 58(2)(c) GDPR. The DPA emphasised28 KB (4,010 words) - 13:40, 14 December 2022
- IMY (Sweden) - DI-2021-6140 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)pursuant to Article 58(2)(b) of the GDPR for the infringement of Article 12(3) of the GDPR. Report on the supervisory report The Swedish Authority for Privacy42 KB (4,784 words) - 08:22, 20 October 2022
- APD/GBA (Belgium) - 45/2023 (category Article 9(2)(a) GDPR) (section English Machine Translation of the Decision)data to the new mutuality within the framework of the exercise of the right to data portability 3 cumulative conditions: The exercise of the right to data22 KB (2,983 words) - 08:20, 16 May 2023
- officio investigation by the DPA. In light of this, the Court held that the appeal should be upheld since the decision by the DPA lacked a legal basis and shall16 KB (2,426 words) - 15:24, 26 November 2023
- CJEU - C-416/23 - Request for interpretation of a legal provision under Article 267 TFEU (category Article 57(2) GDPR)GDPR for breach of the right of access under Article 15 GDPR by a company. By decision of 22 April 2020, the DPA refused to deal with the data protection6 KB (766 words) - 13:27, 11 November 2023
- Tietosuojavaltuutetun toimisto (Finland) - 4300/182/2019 (category Article 2(2)(d) GDPR) (section English Machine Translation of the Decision)copy of a document. Concerning the first question, the DPA held that under Article 2(2)(d) GDPR, the Regulation does not apply to the processing of personal17 KB (2,394 words) - 16:11, 1 June 2022
- article 47 of the rules of order inside the DPA, a copy of the file may be requested by the parties. If one of parties wishes to make use of the possibility16 KB (2,242 words) - 10:12, 8 February 2023
- transferred to the United States. However, the fact that the Danish DPA cannot decide on the possible transfer of personal data of the complainant to the United104 KB (14,260 words) - 13:54, 9 June 2023
- APD/GBA (Belgium) - 145/2022 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)Article 58(2)(b) GDPR contains the authority of the DPA to reprimand a controller. Article 58(2)(c) GDPR contains the possibility to order the controller18 KB (2,545 words) - 16:10, 25 October 2022
- offences, the trial of which took place after the coming into force of DPA 2018 on 25 May 2018 ("the commencement date" for the Act). The processing of at least30 KB (4,052 words) - 12:51, 19 January 2024
- BlnBDI (Berlin) - 521.13874 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)that influence it. The DPA issued a reprimand to the controller, Article 58(2)(b). Notably, the DPA's decision derives the right to a copy only from Article13 KB (1,811 words) - 09:06, 12 November 2021
- APD/GBA (Belgium) - 170/2022 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)The Belgian DPA closed the procedure because of a prior settlement decision between the DPA and a press organisation regarding the use of cookies The controller31 KB (4,450 words) - 11:01, 7 December 2022
- APD/GBA (Belgium) - 87/2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)cases. In the first case (Article 3.1 of the GDPR), the data processing carried out in the context of the activities of an establishment of a controller21 KB (2,987 words) - 20:10, 4 July 2023
- Garante per la protezione dei dati personali (Italy) - 9917820 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)already indicated in the footer of the website". For the above, the Office proceeded to notify the Company of the deed of initiation of the sanctioning procedure26 KB (4,162 words) - 08:14, 23 August 2023
- APD/GBA (Belgium) - 117/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)possible on the basis of the 'legitimate interest' of the controller, the Disputes Chamber points out that the consent, but the legitimate interest of the controller17 KB (2,319 words) - 11:23, 5 August 2022
- Screenshot of the message flow between Mr [...] and the plaintiff, Appendix K 2, sheet 14 of the file). The defendant also sent the disputed message to the plaintiff44 KB (7,334 words) - 09:02, 17 March 2022
- Garante per la protezione dei dati personali (Italy) - 9744655 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)duration of the infringement, the absence of previous infringements by the controller, and the degree of the controller’s cooperation with the DPA. Share28 KB (4,506 words) - 07:53, 28 April 2023
- Persónuvernd (Island) - 2023030483 (category Article 15(3) GDPR) (section English Machine Translation of the Decision)attempt to locate the requested data and delivered the part of the data that was available to the municipality, it was the conclusion of the Privacy Protection20 KB (3,159 words) - 11:04, 15 January 2024
- Rb. Amsterdam - 20/1908 (category Article 6(3) GDPR) (section 2. Is Spanish royal decree 1070/2017 a law under the GDPR?)regulation. The court held that the Spanish DPA, and not the Dutch DPA, is the competent supervisory authority in relation to the processing activities21 KB (3,054 words) - 10:07, 10 September 2021
- ANSPDCP (Romania) - Fine against Dante International SA (eMAG) - no 3 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)Authority for the resolution of the 3 reported cases, the following aspects were found: 1. In the first case, a petitioner requested the deletion of the account17 KB (2,352 words) - 11:25, 11 July 2023
- APD/GBA (Belgium) - 158/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)that for the processing in question (the publication of the invoice with the name of the data subject) the controller did not meet any of the conditions42 KB (6,128 words) - 12:47, 16 November 2022
- IP (Slovenia) - 07101-22-2023-7 34 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)informing the data subject, as provided by Article 12(3) GDPR. Thus, the DPA noted that at the time of the complaint submission on 16 October 2023, the controller20 KB (3,235 words) - 09:16, 28 February 2024
- Persónuvernd (Iceland) - nr. 2020082238 (category Article 9(2)(f) GDPR) (section English Machine Translation of the Decision)dispute (cf. Article 9(2)(f) GDPR). Hence, the Icelandic DPA was of the opinion that the concept of necessity, within the meaning of the mentioned provision26 KB (3,942 words) - 10:18, 5 October 2021
- The Belgian DPA dismissed a complaint, despite the existence of GDPR violations. The DPA was of the opinion that the breaches did not result in a "major20 KB (2,909 words) - 06:45, 14 September 2023
- APD/GBA (Belgium) - 172/2022 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)especially not after the sale of the property. The DPA continued by stating that the controller did not meet any of the lawfulness requirements of Article 6 GDPR43 KB (6,300 words) - 11:35, 20 December 2022
- APD/GBA (Belgium) - 27/2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)according to the controller. The DPA first reiterated the legal requirements of Article 15 GDPR. In particular, the DPA stressed the importance of the right of20 KB (2,953 words) - 05:48, 26 April 2023
- APD/GBA (Belgium) - 09/2023 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)basis of the complaint submitted by the complainant, in the context of 3 the 'procedure prior to the decision on the merits' and no decision on the merits of16 KB (2,239 words) - 19:52, 15 February 2023
- Tietosuojavaltuutetun toimisto (Finland) - 7732/161/23 (2) (category Article 3(2) GDPR) (section English Machine Translation of the Decision)assessment of whether it would impact the interim decision of emergency procedure or the handling of the case. Hence, the DPA ordered the suspension of the decision20 KB (2,928 words) - 11:58, 11 October 2023
- APD/GBA (Belgium) - 60/2023 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)60/2023 – 3/13 2. a breach of Article 5(2), Article 24(1) and Article 25(1) and (2) of the GDPR; and 3. an infringement of Article 12(1) and (2), Article39 KB (5,541 words) - 08:17, 6 June 2023
- Tietosuojavaltuutetun toimisto (Finland) - 1788/152/22 (category Article 15(3) GDPR) (section English Machine Translation of the Decision)The DPA ordered the Police University College to give the data subject a video recording featuring other students. The DPA held that the controller wrongfully17 KB (2,540 words) - 10:11, 7 June 2022
- personal data, such as the names, addresses and dates of birth of millions of Germans, including of the data subject, from controller 2, the address trader Acxiom19 KB (2,876 words) - 11:50, 2 May 2024
- breach of the equality of arms principle. Amazon had argued that the involvement of the French DPA in the procedure had enabled the French DPA to gain51 KB (8,228 words) - 17:33, 11 January 2023
- APD/GBA (Belgium) - 17/2023 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)Article 62, § 1 of the LCA. 4. Pursuant to article 95 § 2, 3° of the LCA as well as article 47 of the rules of order inside the DPA, a copy of the file may be17 KB (2,351 words) - 15:21, 8 March 2023
- APD/GBA (Belgium) - 81/2023 (category Article 30(2)(a) GDPR) (section English Machine Translation of the Decision)unclear categories of data subjects. As such, the DPA concluded a breach of article 30(2)(a) GDPR. The DPA noted that the DPO of the processor is also a31 KB (4,462 words) - 12:25, 3 July 2023
- On 5 June 2019 and 2 September 2019, the DPA notified the Consumentenbond and the consumer that the Irish DPA was investigating the complaint and further22 KB (3,313 words) - 16:18, 26 January 2022
- VwGVG and the other procedural requirements are also met. 3.3. To the point: 3.3.1. Legal position: 3.3.1.1. § Section 24 (1) and (4) of the FADP read19 KB (3,024 words) - 03:47, 4 August 2022
- rules on the calculation of damages in GDPR, so it is a matter of the Court's discretion to assess the amount. No violation of the principled of data minimization69 KB (11,077 words) - 16:48, 7 March 2022
- APD/GBA (Belgium) - 04/2023 (category Article 5(2) GDPR) (section English Machine Translation of the Decision)against the controller. 2. The object of the complaint concerns the lack of appropriate action on the part of the controller at the request of the complainant20 KB (2,870 words) - 10:07, 1 February 2023
- IMY (Sweden) - DI-2021-10488 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)undue delay within the meaning of Article 12(3) GDPR. In light of the this, the DPA concluded that the controller has processed the complainant’s personal18 KB (2,020 words) - 12:13, 12 October 2022
- Garante per la protezione dei dati personali (Italy) - 10009296 (category Article 12(3) GDPR) (section English Machine Translation of the Decision)obscuring the data of third parties". For the above, with a note dated 9/10/2023, the Office notified the Bank of the start of the procedure for the adoption25 KB (3,777 words) - 07:58, 8 May 2024
- APD/GBA (Belgium) - 40/2023 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)Fourth, the DPA assessed the excessiveness of the request. The DPA did agree with the controller that the access request was indeed excessive. The controller49 KB (7,595 words) - 10:23, 12 April 2023
- Persónuvernd - 2020010598 (category Article 2(1) GDPR) (section English Machine Translation of the Decision)Article 4 of the Act, and thus the authority of the Data Protection Authority, cf. Paragraph 1 Article 39 of the Act, covers the processing of partially9 KB (1,361 words) - 09:44, 13 May 2022
- APD/GBA (Belgium) - 80/2021 (category Article 21(2) GDPR) (section English Machine Translation of the Decision)2016/679 of the European Parliament and of the Council of April 27, 2016 relating to the protection of natural persons with regard to the processing of personal31 KB (4,562 words) - 08:39, 28 July 2021
- UOOU - UOOU-00196/20 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)legal basis. The DPA found a violation of Article 6(1) GDPR, as the mere "scraping" of the public register did not fulfill the condition of necessity processing6 KB (752 words) - 09:03, 6 May 2021
- dumping in the context of the GAS procedure. The Belgian DPA stressed that the Authority did not need to reveal the identity of the Complainant to the four suspects16 KB (2,341 words) - 06:44, 22 December 2021
- DPC - C-XX-X-XX Groupon International Limited - December 2020 (category Article 12(2) GDPR) (section English Machine Translation of the Decision)infringed Articles 12(2),17(1)(a) and 6(1) in the circumstances of the complainant’s case. The decision also reprimanded Groupon in respect of the infringements4 KB (286 words) - 15:04, 10 August 2021
- Datainspektionen - DI-2019-9432 (category Article 32(2) GDPR) (section The data breach should have been documented and reported to the DPA)According to the DPA, the university knew about the incident on at least April 3, 2019, not August 30, 2019, when it received the letter from the DPA informing59 KB (8,959 words) - 11:43, 7 April 2022
- follow-up to the exercising the right of inspection of the complainant. The allegations regarding the sending of 1 In accordance with Article 61 of the WOG, the38 KB (5,767 words) - 16:10, 19 March 2024
- AEPD (Spain) - EXP202301323 (category Article 7(3) GDPR) (section English Machine Translation of the Decision)issued by the Director of the Spanish Agency for the Protection of Data in the procedure AI/00057/2023, for violation of the provisions of the Law 34/200231 KB (4,748 words) - 15:41, 27 March 2024