Search results

Article 21(1) Judgments of the Grand Chamber of the Court of Justice in Google Spain and Google (C-131/12, ECLI:EU:C:2014:317), GC and others (C136/17, ECLI:EU:C:2019:773)

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details.

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details. On August 4, 2021, A.A.A (hereinafter

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details.

legislation provided a full exemption for the right to access. See also: AEPD (Spain) - EXP202201673 A data subject requested access and the restriction of the

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details.

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details.

machine translation of the Spanish original. Please refer to the Spanish original for more details. The campaign, launched by the Spanish Data Protection Authority

subject was the victim of a crime that was being covered by the media in Spain. During the case trial, the the data subject gave a testimony reporting the

as provided in article 46.1 of the aforementioned Law. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

resolution would terminate the precautionary suspension. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

the provisions of article 46.1 of the aforementioned Law . 940-010921 Mar Spain Martí Director of the AEPD, P.O. the Deputy Director General of Data Inspection

brought the claim in Spain could therefore not act without an individual mandate. A consumers organisation lodged a complaint with the Spanish DPA (AEPD) against

would end the precautionary suspension. 938-26102021 Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

this resolution, would end the precautionary suspension. 938-131120 Sea Spain Marti C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es, 6/6 Director

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details. 1/19 BACKGROUND SEGREGACIÓN

would terminate the precautionary suspension. 938-250923 Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

provided in article 46.1 of the aforementioned Law. 940-0419 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details. RESOLUTION OF SANCTIONING

resolution, I would terminate the precautionary suspension. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

provisions of article 46.1 of the aforementioned Law. Sea Spain Marti Director of the Spanish Agency for Data Protection. C/ Jorge Juan, 6 www.aepd.es 28001

would terminate the precautionary suspension. 938-131120 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

would end the precautionary suspension. 938-26102021 Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

2020, he filed a claim with the Agency Spanish Data Protection. The claim is directed against VODAFONE SPAIN, S.A.U. with NIF A80907397 (hereinafter,

There is no administrative appeal against this act. Mar Spain Martí Director of the Spanish Agency for Data Protection. >> SECOND: On August 12, 2021

in article 46.1 of the aforementioned Law. 938-100322 Mar Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

aepd.es 28001 - Madrid sedeagpd.gob.es 7/7 938-26102021 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

no administrative appeal against this act. 972-110923 Sea Spain Martí Director of the Spanish Data Protection Agency >> SECOND: On May 16, 2024, the claimed

The Spanish DPA fined Vodafone Spain €50,000 for unlawfully processing a non-customer's data. Another person had fraudulently entered into a contract with

for in article 46.1 of the referred Law. 1195-281022 Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

suspension. 938-270122 Sea Spain Marti C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es, 7/7 Director of the Spanish Data Protection Agency C/

The Spanish National High Court held that the Spanish DPA correctly interpreted the GDPR and the national law in a case regarding the unlawful processing

would terminate the precautionary suspension. 815-141020 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.agpd.es 28001

act, as provided in article 46.1 of the referred Law. Mar Spain Martí Director of the Spanish Agency for Data Protection 28001 - Madrid 6 sedeagpd.gob.es

REFERENCE. 1 Acting Administration: Spanish Agency for Data Protection (AEPD) Owner: TNT EXPRESS WORLDWIDE (SPAIN) SL - B28905784 Subject: "Notification

January 15, 2021 filed a claim with the Spanish Data Protection Agency. The claim is directed against Vodafone Spain, S.A.U. with NIF A80907397 (in hereinafter

in article 46.1 of the aforementioned Law. 936-160721 Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

Administrations. e) The independent administrative authorities. f) The Bank of Spain. g) Public law corporations when the purposes of the treatment are related

There is no administrative appeal against this act. Mar Spain Martí Director of the Spanish Agency for Data Protection >> SECOND: On July 7, 2021, the

resolution would end the precautionary suspension. 938-270122 Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

There is no administrative appeal against this act. Mar Spain Martí Director of the Spanish Agency for Data Protection >> SECOND: On August 4, 2021, the

resolution would terminate the precautionary suspension. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

resolution, I would terminate the precautionary suspension. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

would terminate the precautionary suspension. 938-131120 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

suspension. 938-131120 Mar Spain Martí C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 9/9 Director of the Spanish Agency for Data Protection

resolution, would end the precautionary suspension. 938-181022 Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

this resolution would end the precautionary suspension. Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

no administrative appeal against this act. 935-110422 Sea Spain Martí Director of the Spanish Data Protection Agency SECOND: On September 22, 2023, SOLAR

resolution would terminate the precautionary suspension. Mar Spain Martí Director of the Spanish Agency for Data Protection. C / Jorge Juan, 6 www.aepd.es

resolution, would end of the precautionary suspension. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

would end the precautionary suspension. 938-26102021 Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

this resolution would end the precautionary suspension. Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

purposes, as Spanish law imposes on the controller an obligation to provide working devices for the said purpose. On 29 November 2023, the Spanish trade union

There is no administrative appeal against this act. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

There is no administrative appeal against this act. Mar Spain Martí Director of the Spanish Agency for Data Protection >> SECOND: On June 9, 2021, the

no administrative appeal against this act. 935-150322 Sea Spain Marti Director of the Spanish Data Protection Agency >> SECOND: On April 28, 2022, the claimed

resolution would terminate the precautionary suspension. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

provided in article 46.1 of the referred Law. 968-160721 Mar Spain Martí Director of the Spanish Agency for Data Protection 28001 - Madrid 6 sedeagpd.gob.es

would terminate the suspension precautionary. 938-231221 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

resolution, it would end the precautionary suspension. Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

filed by UGT (Spanish trade union) regarding a collective labor conflict. Another lawsuit was filed on December 12, 2018, by CCOO (Spanish trade union)

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details. The resolutions that make

powers to the Spanish Data Protection Agency. With the purpose indicated in the aforementioned article, the claim was transferred to ADEVINTA SPAIN, S.L. (hereinafter

The Spanish DPA fined Vodafone Spain €40,000 for violations of Articles 5(1)(f) and 32 GDPR. The complainant received multiple invoices intended for a

would terminate the precautionary suspension. 938-181022 Mar Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

This resolution would end the precautionary suspension. Sea Spain Martí Director of the Spanish Data Protection Agency. C/ Jorge Juan, 6 www.aepd.es 28001

aepd.es 28001 - Madrid sedeagpd.gob.es 12/12 938-131120 Mar Spain Martí Director of the Spanish Agency for Data Protection GENERAL ANNEX CLAIMANT 1- D. A

information established in Spain and the services provided by them. It will be understood that a service provider is established in Spain when your residence

act, as provided in article 46.1 of the referred Law. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

There is no administrative appeal against this act. Mar Spain Martí Director of the Spanish Agency for Data Protection >> SECOND: On August 18, 2021,

violating the Spanish data protection law (Art.22 LOPDGDD) in force. The data subject therefore filed a complaint with the Spanish DPA. The Spanish DPA recalled

FOURTH: NOTIFY this resolution to GOOGLE SPAIN, S.L., as the establishment of the person in charge in Spain so that it can transfer it to Google Inc.

act, as provided in article 46.1 of the referred Law. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

there is no administrative appeal against this act. Sea Spain Martí Director of the Spanish Data Protection Agency >> SECOND: On January 16, 2024, the

There is no administrative appeal against this act. Mar Spain Martí Director of the Spanish Agency for Data Protection >> SECOND: It is clear that the

Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 11/11 Mar Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

in the article 46.1 of the aforementioned legal text. Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.agpd.es 28001

would terminate the precautionary suspension. 938-131120 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

01/28/2023, at 16:27:43 (Spain time), C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 5/14 and 02/13/2023, at 01:48:22 (Spain time). In relation

This resolution would end the precautionary suspension. Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

this resolution would end the precautionary suspension. Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

resolution would terminate the precautionary suspension. Mar Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

Administrations. e) Independent administrative authorities. f) The Bank of Spain. g) Public law corporations when the purposes of the processing are related

resolution would terminate the precautionary suspension. Sea Spain Martí Director of the Spanish Data Protection Agency

there is no administrative appeal against this act. Sea Spain Martí Director of the Spanish Data Protection Agency >> SECOND: On July 20, 2023, the claimed

would terminate the precautionary suspension. 938-131120 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

against this act there is no administrative appeal. Sea Spain Marti Director of the Spanish Agency for Data Protection. >> SECOND: On February 22, 2022

examined, as has been exposed, EDREAMS has its only establishment in Spain, so the Spanish Agency for Data Protection is competent to act as the main supervisory

would terminate the precautionary suspension. 938-010623 Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

against this act there is no administrative appeal. Sea Spain Marti Director of the Spanish Agency for Data Protection. >> SECOND: On February 4, 2022

aepd.es 28001 - Madrid sedeagpd.gob.es 14/14 938-131120 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

aforementioned Law. Mar Spain Martí C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 13/13 Director of the Spanish Agency for Data Protection

would terminate the precautionary suspension. 938-131120 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

would terminate the suspension precautionary. 938-131120 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

in article 46.1 of the aforementioned Law. 940-110422 Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

resolution would terminate the precautionary suspension. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

resolution, would end the precautionary suspension. 938-100322 Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

subjects's consent under Article 6 GDPR. On 27 August 2021 the Spanish telecommunication company DIGI SPAIN TELECOM, S.L. (controller) duplicated the SIM card of

administrative appeal against this act. 935-30102023 Sea Spain Martí Director of the Spanish Data Protection Agency >> SECOND: On April 27, 2024, the claimed

resolution would terminate the precautionary suspension. Mar Spain Marti Director of the Spanish Data Protection Agency. 28001 – Madrid 6 sedeagpd.gob.es

would terminate the precautionary suspension. 938-131120 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

no administrative appeal against this act. 935-150322 Sea Spain Marti Director of the Spanish Data Protection Agency >> C/ Jorge Juan, 6 www.aepd.es 28001

es 28001 - Madrid sedeagpd.gob.es 16/16 938-26102021 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

provided in article 46.1 of the aforementioned Law. 940-0419 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

There is no administrative appeal against this act. Mar Spain Martí Director of the Spanish Agency for Data Protection. >> SECOND: On June 16, 2021, the

it would end the suspension precautionary 938-26102021 Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

provided for in article 46.1 of the referred Law. 968-171022 Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

this resolution would end the precautionary suspension. Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

would terminate the precautionary suspension. 938-120722 Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

would terminate the precautionary suspension. 938-010623 Mar Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

terminate the precautionary suspension. 938-21112023 Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

This resolution would end the precautionary suspension. Sea Spain Martí Director of the Spanish Data Protection Agency. C/ Jorge Juan, 6 www.aepd.es 28001

(https://gdprhub.eu/index.php?title=AEPD_(Spain)_-_PS/00191/2022) and PS / 00192/2022 (https://gdprhub.eu/index.php?title=AEPD_(Spain)_-_PS-00192-2022), also judged

examined, as has been stated, EDREAMS has its only establishment in Spain, so the Spanish Agency for Data Protection is competent to act as the main control

The Spanish National High Court annulled a decision of the Spanish DPA for failing to comply with the constitutional principle of non-retroactivity of

would terminate the precautionary suspension. 938-131120 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

would terminate the precautionary suspension. 938-181022 Mar Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

resolution would end the precautionary suspension. 938-050522 Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

APDCAT (Catalonia) - PD 6/2021 Authority: APDCAT (Catalonia) Jurisdiction: Spain Relevant Law: Directive (EU) 2019/1153 Directive (EU) 2015/849 LO 7/2021

no administrative appeal against this act. 935-160721 Mar Spain Martí Director of the Spanish Agency for Data Protection >> SECOND: On November 2, 2021

resolution, would terminate the precautionary suspension. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

would terminate the precautionary suspension. 815-141020 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.agpd.es 28001

APDCAT - PS 41/2022 Authority: APDCAT (Catalonia) Jurisdiction: Spain Relevant Law: Article 5(1)(a) GDPR Article 9 GDPR Type: Complaint Outcome: Upheld

resolution, would terminate the injunction suspension Mar Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

The Spanish National High Court annulled a fine issued by the Spanish DPA for violating both the Spanish procedural law for administrative sanctions and

There is no administrative appeal against this act. Sea Spain Martí Director of the Spanish Data Protection Agency >> SECOND: On March 28, 2024, the claimed

resolution, would terminate the injunction suspension Mar Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

the Director of the Agency Spanish Data Protection, HE REMEMBERS: FIRST: START SANCTIONING PROCEDURE against 4FINANCE SPAIN FINANCIAL SERVICES, S.A.U.

APDCAT - IAI 50/2022 Authority: APDCAT (Catalonia) Jurisdiction: Spain Relevant Law: Article 6(1)(c) GDPR Article 86 GDPR Llei 19/2014, de 29 de desembre

resolution would terminate the precautionary suspension. Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

The precautionary suspension has ended. 938-26102021 Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

consideration, as explained above, GLOVOAPP has its main establishment in Spain, so the Spanish Data Protection Agency is competent to act as the lead supervisory

would terminate the precautionary suspension. 938-120722 Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

as provided in article 46.1 of the aforementioned Law. Sea Spain Martí. Director of the Spanish Agency for Data Protection. C/ Jorge Juan, 6 www.aepd.es

would terminate the precautionary suspension. 938-120722 Mar Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

Contact: the websites are owned and managed by kfc restaurant spain s.l. a company registered in Spain, whose registered office is at Serrano Galvache 56, Madroño

website *** URL.1, from which it follows that “the Ministry of Justice of Spain (Audiencia Na- C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob

resolution would terminate the precautionary suspension. Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

Article 6(1)(c) GDPR, necessecity for compliance with a legal obligation. The Spanish national law on transparency, access to public information and good governance

requests exercised by data subjects) is located in Barcelona, Spain. Hence, according to the Spanish DPA (AEPD), this establishment is the main establishment

this resolution, would end the precautionary suspension. Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

Government of Spain, in the management of this emergency situation and, specifically, in relation with the measures imposed on foreigners visiting Spain during

privacy, in relation to the processing of personal data (seejudgment Google Spain and Google, C_131 / 12, EU: C: 2014: 317, paragraph 66).28 In this regard

to the Spanish DPA (AEPD), which is the competent lead DPA under Article 56 GDPR, due to the fact that the hotel’s main establishment is in Spain. When

would terminate the suspension precautionary 938-181022 Mar Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

drivers registered in Spain, as the program “***PROGRAMA.1” represents a small proportion of transport providers that make deliveries in Spain (never have exceeded

instructed by the Spanish Agency for Data Protection and based on to the following BACKGROUND FIRST: A.A.A. British citizen residing in Spain (hereinafter,

ban measures per number of requests per minute (maximum 500 requests from Spain and 50 per minute from abroad) Page 2 of 8, PS 54/2021 08008 Barcelona, 214

controller within the meaning of these provisions (CJEU, 13 May 2014, Google Spain, C-131/12, pt 48). 68. In the present case, the panel notes that APPLE RETAIL

ASSET AND ASSET ASSIGNMENT has been formalized in Spain LIABILITIES of the portfolios acquired in Spain by the company "AKTIV KAPITAL PORTFOLIO AS, OSLO

You can add opinions and guidelines here! You can add opinions and guidelines here! You can add opinions and guidelines here! You can add opinions and

terminate the precautionary suspension. 938-21112023 Sea Spain Martí Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details. File: CN22-005 OPINION No

would terminate the precautionary suspension. 938-131120 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

that as it did not have a legal establishment in Spain, it needed to contract a legal assessor within Spain to prepare the due notification and documents

administrative appeal against this act. 935-30102023 Sea Spain Martí Director of the Spanish Data Protection Agency >> SECOND: On March 5, 2024, the claimed

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details. CN21-012 OPINION No. D22-005

the subject in question in public life [judgments of 13 May 2014, Google Spain and Google, C-131/12, EU:C:2014:317 , paragraph 81, as well as of 24 September

The Spanish DPA was competent to act as the lead supervisory authority as the controller has its registered office and main establishment in Spain. The

borne in mind that in accordance with the provisions of article 24 of the Spanish Constitution, all people have the right to obtain effective protection from

basis. The controller, MERCADONA S.A., is the biggest supermarket chain in Spain. The data subject suffered an accident in one of the controller's stores

Football League. c) Hold the representation of FIFA and UEFA in Spain, as well as that of Spain in the international activities and competitions held inside

November 2022 in the case between [name of plaintiff] , from [place name 1] , Spain, plaintiff, (Agent: mr. R.J.G. Ensink), and The college of mayor and aldermen

provided in article 46.1 of the referred Law. 968-160721 Mar Spain Martí Director of the Spanish Agency for Data Protection C / Jorge Juan, 6 www.aepd.es 28001

APDCAT cited that these requests were subject to specific regulation by the “Spanish law regulating rights of access to information, public participation and

provided in an immediate manner as required by Article 11 LOPDGDD (the Spanish Data Protection Act), since the data subjects should not need to look for

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details. Resolution RPS-2023/001 [Proc

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details. JURISPRUDENCE Red: STSJ CAT

Activities of the Companies of the Iberdrola Spain Group with Regulated Activities (“CSA”) available on the Iberdrola Spain website, during exercise. (…) Regarding

Activities of the Companies of the Iberdrola Spain Group with Regulated Activities (“CSA”) available on the Iberdrola Spain website, during exercise. (…). (…):

Center of Risks of the Bank of Spain: 26.3.4. Communication of data to the Risk Information Center of the Bank of Spain The Holder of the right who assists

assigned complaint number IP 96/2023. 3. On 05/05/2023 and 05/10/2023, the Spanish Data Protection Agency (AEPD) will transfer to this Authority two complaints

implementation of the Court of Justice of the European Union judgment is “Google Spain and Inc v Agencia Española de Protección de Datos (AEPD) and Mario Costeja

(GOOGLE SPAIN SL and Google Inc. v. Spanish Data Protection Agency and N.N.N.) when points out that “[…] it is not disputed that Google Spain is dedicated

110, § 43; C-214/00, Commission v. Spain, May 15, 2003, EU: C: 2003: 276, §§ 53 and 56; C-283/00, Commission v. Spain, October 16, 2003, EU: C: 2003: 544

would terminate the suspension precautionary 938-181022 Mar Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

and "Bookers" of accommodations in Spain to the Spanish authorities. This disclosure is made on the basis of Spanish tax reporting obligations arising from

websites within thirteen countries of the European Union, namely France, Spain, Germany, Italy, the Netherlands, Slovakia, Denmark, Poland, Sweden, Finland

resolution would end the precautionary suspension. 938-190122 Sea Spain Marti Director of the Spanish Data Protection Agency C/ Jorge Juan, 6 www.aepd.es 28001

Furthermore, he argued that because of this mental injury he was forced to move to Spain. However, the Court found this claim is not sufficiently substined, and that

2014, Google Spain and Google, C-131/12. 5 Article 29 Working Party on Data Protection, “Guidelines on the Enforcement of Judgments [Google Spain and Google]

expression and the right to data protection. The DPA also referred to the Google Spain case and stated that the rights of privacy and data protection (Article 7

its importance has been emphasized only since the ECJ judgment in Google Spain.4 17. The right to privacy is not unlimited. It most often collides with

the subject in question in public life [judgments of 13 May 2014, Google Spain and Google, C-131/12, EU:C:2014:317, paragraph 81, as well as of 24 September

personal data relating to the sexual orientation of its users. Also note the Spanish DPA's decision for Grindr, which contradicts several of the Norwegian DPA's

supervisory authorities in Germany, Norway, Estonia, Denmark, Portugal, Spain, Finland and Austria. 1.2 What is stated in the complaint The complaint essentially

Concerned Supervisory Authorities included Germany, Slovenia, France, Denmark. Spain, Norway, Italy, Finland, Poland, Belgium, Portugal, Cyprus, Estonia and the

these purposes and grounds have also been assessed separately for by the Spanish Supreme Court, which has confirmed the lawfulness of the processing of customer

Authorities concerned (i.e., France, the German Land of Rhineland-Palatinate , Spain) in compliance with the principles of cooperation established by art. 60

doubt in this sense in the light of what was stated in the judgment Google Spain C-131/12 which has stated that the processing of personal data carried out

The concerned supervisory authorities were located in Germany, Norway, Spain, Denmark, Poland, Italy, and Portugal. The concerned controller provided

valid consent. HUBSIDE.STORE (“controller”) has stores in France, Belgium, Spain, Portugal and Italy. In France, the controller carried out canvassing campaigns

to be carried out in several European Union countries, including Italy, Spain and Ireland. And in Italy, it involved seven trial centres around the country

8 EDPB: “Spanish DPA Fines Vodafone Spain more than 8 Million Euros”, March 31, 2021. https://edpb.europa.eu/news/national-news/2021/spanish-dpa-fines

of five additional complaints by the supervisory authorities of Saarland, Spain, Ireland, Poland, and Lower Saxony. The controller's main establishment was

recalling the judgments of the Court of Justice of the EU on the cases "Google Spain and Google" (Case C-131/12 of 13 May 2014) and "Weltimmo" (Case C-230/14

provide a high level of protection to fundamental rights and cited Google Spain (C-131/12). Additionally, the Court mentioned that the rights under the Data

by the ECHR in the ruling of 17/10/2019 case Lopez Ribalda and others V Spain on the subject of hidden video surveillance)”; as regards the transparency

controller within the meaning of these provisions (CJEU, 13 May 2014, Google Spain, C-131/12, pt 48). 37. In the present case, the restricted formation notes

effective and complete protection of data subjects (see C‑131/12 Google Spain). To be implicitly a controller under national law, three positive criteria

C-138/01 and C-139/01, EU:C:2003:294, paragraph 65, and of 13 May 2014, Google Spain and Google, C-131/12, EU:C:2014:317, paragraph 71)'. 8 See Decision of the

has been made credible that the applicant has still not been convicted in Spain of the alleged attack on Ms T. Irrespective of the content of the notification

GDPR also cannot justify the processing. Based on CJEU - C-131/12 Google Spain, Hoge Raad - 15/03380 and Article 17 GDPR a weighing of the interests should

65599/10, M.L. and W.W. t. Germany. 3CJEU, 13 May 2014, C-131/12 , Google Spain, §87. 4 European Data Protection Board (EDPB), Guidelines 5/2019 on the criteria

content of which was defined in the Google Spain case. In connection with the decision in the Google Spain case, the Court of Justice of the EU also ruled

The ECJ practice illustrates this in the Google Spain case ( Case C ‑ 131/12 already cited , Google Spain , paras 81, 94, 100 ) . In exercising its supervisory

Slovenia, Norway, Hungary, Poland, Portugal, Denmark, France, Finland, Greece, Spain, Luxemburg, Czech Republic, Austria, Croatia, Cyprus, and Germany (Berlin

Schleswig-Holstein, item 44; see also C.J.U.E., 13 May 2014, Google Spain SL and Google Inc v. Spanish Agency for the Protection of Datos and Gonzales, case. C-131/12

The European Court of Justice has further found in the judgment Google Spain and Google that a search engine provider's processing through the provision

2016/679 (‘EDPB Guidelines 2/2018’), page 4. 60 CJEU, 13 May 2014, Google Spain and Google, C-131/12, ECLI:EU:C:2014:317, para 68 and case-law cited. 61

countries have declared themselves concerned by this procedure: Germany, Spain, Italy and the Netherlands. 24. Pursuant to Article 60(3) of the GDPR, the

then, the jurisprudence of the ECtHR (in the case López Ribalda e others c. Spain, 17 October 2019) considered that constitutes a legitimate justification

possibility of viewing the data of active riders in another European country (Spain), the group DPO stated that "this operation is not permitted on the basis

of legality. To support his point, the complainant relies on the Google Spain judgment of the Court of Justice of the European Union (hereinafter “the

C-131/12 - Google Spain SL, Google Inc./Agencia Española de Protección de Datos, Mario Costeja Gonzáles, on the well-known case "Google Spain", from which it

traitement spécifique. 4 Art. 4(7) LGE. 5 Arrêt de la CJUE du 13 mai 2014, Google Spain SL c. Agencia Española de proteccion de Datos (AEPD) et autres, C-131/12 ;

judgment of the Court of Justice of the European Union of 13 May 2014, Google Spain SL, Google Inc. v Agencia Española de Protección de Datos, Mario Costeja

implementation of the Court of Justice of the European Union Judgment on ,Google Spain and Inc v. Agencia Española de Protección de Datos (AEPD) and Mario Costeja

already begun conducting in-person biometric processing with the Orb in both Spain and Portugal. Share blogs or news articles here! The decision below is a

GDPR by illegally processing the image of a data subject. Example: The Spanish DPA imposed a €35,000 fine on an energy company for the violation of Articles

own, influences the processing of 9 CJEU judgment of 13 May 2014, Google Spain and Google, C-131/12, ECLI: EU: C: 2014: 317, par. 34; CJEU judgment of 5

122. 8 Including ECJ 13 May 2014, CA 31112, ECLI EU:C:2014:317 (Google Spain). 9 ECLI:NL:RBMNE:2020:5111. 10 The judgment of [date 5] , ECLI:NL:RBMNE:2020:5111

27 with reference to the ECJ, judgment of May 13, 2014– C-131/12, Google Spain and Google -, juris para. 71– 72, 75, 92). 27 Because the data processing

as Portugal and Germany, and that a similar practice is followed in e.g. Spain and France. On the basis of the above, DBU and Divisionsforeningen have stated

todistajat, C-25/17, ECLI:EU:C:2018:551. 13 CJEU Judgment of 13 May 2014, Google Spain and Google and Others, C-131/12, ECLI: EU:C:2014:317, para. 34; see also

subsidiary with legal personality, is not decisive' (CJEU, May 13, 2014 , Google Spain, C-131/12, paragraph 48). 32. Along the same lines, the Court of Justice

the complained period, had been extracted from the XX database based in Spain and that Ediscom treated them as responsible. An examination of the access

10 Ibidem, § 132.11 Eur Court. HR, June 12, 2014, Fernández Martínez v. Spain, § 117. Page 15 Decision 55/2021 - 15/34brought by the complainant, namely

in that context: Google Spain SL v Agencia Espanola de Proteccion de Datos (AEPD) (Case C-131/12) [2014] QB 1022 ("Google Spain"); Weltimmo sro v Nemzeti

implementation of the Court of Justice of the European Union judgement on “Google Spain and Inc v. Agencia Española de Protección de Datos (AEPD) and Mario Costeja

case C-131/12 Google Spain SL, Google Inc. v Agencia Española de Protección de Datos (AEPD), Mario Costeja Gonzalez (‘Google Spain’)405 the CJEU considered

the Hungarian original for more details. Language of document : Bulgarian Spanish Czech Danish German Estonian Greek French Italian Latvian Lithuanian Hungarian

Berlin), Portugal, Sweden, Ireland, Latvia, Italy, Norway, Hungary, Austria, Spain, France, Cyprus, Slovakia, Denmark, Slovenia. 36. On 3 October 2019, the

business dealings (see BVerfGE 6, p. 3). ECJ, judgment of 13 May 2014, Google Spain, C-131/12, EU:C:2014:317, para. 98; judgment of 9 March 2017, Manni, C-398/15

an example, the court refers to the judgment of the CJEU regarding Google Spain and Google. 16In that judgment, the CJEU held that the processing of personal

engines are trumped by the protection of data rights: see Case C-131/12 Google Spain SL v Agencia Espanola de Proteccion de Datos. The correct approach is to

The decision below is a machine translation of the Spanish original. Please refer to the Spanish original for more details. THE CIRCUIT COURT [2023] IECC

Belgium, the Czech Republic, Finland, Germany, the Netherlands, Norway, Spain, Sweden, France, United Kingdom". 2. The preliminary investigation activity

addressed a letter to the Chair of the EDPB regarding the recently adopted Spanish electoral law. Given the Cambridge Analytica case and the forthcoming elections

the original; other language versions too - such as the English, French, Spanish or Italian - coincide in this regard with the German) - may be entrusted

on the implementation of the judgment of the Court of Justice in Google Spain and Google,6 can therefore still be used to assess a request for removal

relevant to the defense of his case (ECHR, 21 January 1999, García Ruiz v Spain, CE:ECHR:1999:0121JUD003054496, § 2). 53 To ensure that individuals have

glish Here you must enter the original language (e.g. English, German, Spanish). Original_Source_Language__Code_1=EN Here you must enter the two-letter-code

glish Here you must enter the original language (e.g. English, German, Spanish). Original_Source_Language__Code_1=EN Here you must enter the two-letter-code

the following countries were affected by this procedure: Germany, Belgium, Spain, Italy, Luxembourg and the Netherlands. 20. Pursuant to Article 60(5) of

delegates who received the report 14 CJEU judgment of May 13, 2014, Google Spain and Google, C-131/12, ECLI: EU: C: 2014: 317, para. 34; CJEU judgment of

protection supervisory authorities of Ireland, Poland, Norway, Lithuania, Spain, Latvia, Belgium, Bulgaria, France, Luxembourg, Denmark, Hungary, Slovakia

protected interests (cf. ECHR May 27, 2014 - 10764/09 - [De la Flor Cabrera/Spain]; Niemann JbArbR Vol. 55 pp. 41, 60). The constitutionally guaranteed right

participation of twenty centers in Italy and some European centers located in Spain, Germany and Greece. The participation of the University of Oslo, Department

out by GlovoApp23 SL (parent company which has its main establishment in Spain). The AEPD, on 21 November 2019, agreed on the competence of the Italian

dat een natuurlijke persoon die om 23 Arrest HvJEU van 13 mei 2014, Google Spain en Google, C-131/12, ECLI:EU:C:2014:317, par. 34; Arrest HvJEU van 5 juni

adopted (see, to that effect, judgment of 25 February 2021, Commission v Spain (Personal Data Directive – Criminal law), C‑658/19, EU:C:2021:138, paragraph

Czech Republic, France, Germany, Ireland, the Netherlands, Italy, Poland, Spain, and Sweden. Moreover, Mowi is listed ontheOsloStockExchange(OSE)anditss

search engine as processing for journalistic purposes (C-131/12, Google Spain ECLI:EU:C:2014:317 margin no. 85). However, the ECJ has not yet commented

system, MAS S.R.L.S. first bought personal data bases from an Italian and a Spanish company and also from an unidentified vendor on Facebook. Then, together

about her private life (cf. in this sense judgment of 13 May 2014, Google Spain and Google, C-131/12, EU:C:2014:317, paragraph 98). Their processing may

to be followed. The decision of the European Court of Justice on Google Spain (judgement of 13 May 2014, ref.: C-131/12), on which the Hamburg data protection

May 13, 2014 - C-131/12, GRUR 2014, 895 para. 74 = WRP 2014, 805 - Google Spain and Google). There is nothing to suggest that these principles should no

C-139/01, EU: C: 2003: 294, paragraph 65, as well as 13 May 2014, GoogleSpain and Google, C-131/12, EU: C: 2014: 317, paragraph 71) '. 9, article 5 of

agreement. The data subject rejected this option and filed a complaint at the Spanish DPA which, in turn, transferred the case to the information and data protection

controller within the meaning of these provisions (CJEU, 13 May 2014, Google Spain, C-131/ 12, point 48). 33. In this case, the Restricted Committee notes,

judgment of May 13, 2014, C-131/12, BeckRS 2014, 80862 para. 96 - Google Spain and Google). b. The defendant submitted (page 138 eA) that it stored the

secured the respective country-specific domain endings (e.g. Greece, Sweden, Spain, Finland, Denmark and Austria) within the European Union. Via wikipedia.eu

shop mechanism, it appears that the German, Austrian, Belgian, Danish, Spanish, Finnish, Greek, Irish, Italian, Dutch, Norwegian and Polish authorities

C-138/01 and C-139/01, EU: C: 2003: 294, paragraph 65, and of 1 May 2014, GoogleSpain and Googie. C-131/12, EU: C: 2014: 317, paragraph 71). Bank, which end up

even presented elements regarding the methods of obtaining consent by the Spanish company. Relying on the professional guarantees offered by XX, and trusting

Justice of the European Union('the CJEU') in Case C-131/12. number,Google Spain SL and Google Inc. v Agencia Española de Protección de Datos (AEPD)and Mario

Kantarev, point 123, or from 28/06/2022, in case C-278/20, Commission v. Spain, point 33). 31. In terms of domestic legislation, the above means that if

the Company is IDFI, SL, legal person, company capital registered under Spanish law with its seat in B.                 The amount of the fine was therefore

circumstances, fall within the scope of ‘private life’ (see [Martínez v Spain [GC] (Application No 56030/07) (2014) 60 EHRR 3, para 110]).” 117. Bloomberg

of the European Union, with the judgment of 13 May 2014 C/131-12 (Google Spain), found that the operator of a search engine carries out treatment a treatment

2015/1519, and ruling, dated January 18, 2018, in case no. 2016/1687. Then the Spanish Personal Protection Agency came to a similar conclusion in a ruling dated

the Worldcoin Foundation's processing within national territory, with the Spanish DPA being the first to do so on 26 February 2024. On 21 March 2024, the

enwherethe 180 Judgement of the Court of Justice of 13 May 2014, Google Spain SL, C-131/12, ECLI:EU:C:2014:317, paragraphs97and99. 181Judgementof theCourtof

uskonnollinen yhdyskunta, C-25/17, ECLI:EU:C:2018:55;CJEUJudgementof13May2014,GoogleSpainSLt.AgenciaEspañola deproteccióndeDatos(AEPD) and Others,C-131/12, ECLI:EU:C:2014:317

mechanism, it appears that the German, Austrian, Belgian, Cypriot, Danish, Spanish, Finnish, Greek, Irish, Italian, Luxembourg and Dutch authorities , Norwegian

ruling, dated January 18, 2018, in case no. 2016/1687. Furthermore, the Spanish Personal Protection Agency has reached a similar conclusion in a ruling

legislation] "; "The legitimacy of this was also recently reiterated by the Spanish Guarantor according to which" The situation generated as a consequence of

138Guidelines2/2019onArticle6(1)(b)GDPR,paragraph54. Judgmentof13May2014,GoogleSpainSL,C-131/12,EU:C:2014:317,paragraphs97and99. 139Judgment of 11 December 2019

with Article 6(1) GDPR. • The Agencia Española de Protección de Datos (Spanish supervisory authority - hereinafter the ‘ES SA’) shared its views stating

actingon behalf of variousregional authorities), the Netherlands, Austria, Spain, the United Kingdom, France, Finland and Poland, in circumstances where those