Search results
From GDPRhub
- interim measures under Article 21 GDPR because the appellant failed to prove an urgent interest. The complainant asked his bank (ING Bank N.V.) to remove19 KB (3,021 words) - 15:48, 15 March 2022
- data as follows: "Any information about an identified or identifiable natural person (" the data subject "); an identifiable natural person is a person19 KB (2,942 words) - 09:03, 14 September 2023
- indirectly, in particular by means of an identifier, such as a name, an identification number, data from location, an online identifier or one or more elements20 KB (3,075 words) - 14:32, 13 December 2023
- the controller relies on an overall bundled consent to anything contained in the terms and the privacy policy. This represents an “all-or nothing” approach468 KB (51,340 words) - 14:10, 30 January 2023
- month of receiving these requests for an extension to fulfil the contested right. Additionally, they did not provide an explanation for the delay. The DPA5 KB (616 words) - 09:37, 24 October 2023
- Romanian DPA (ANSPDCP) fined SC Medicover SRL with €2,000 after completing an investigation concerning the operator and finding a violation of Article 325 KB (575 words) - 15:21, 13 December 2023
- The Romanian DPA (ANSPDCP) imposed an approximately €2000 fine on SC C&V Water Control SA for failing to provide information to the DPA during the investigation3 KB (351 words) - 15:21, 13 December 2023
- parties reached an agreement before the Court of Appeal of Brussels (commercial section) had to render a judgement. The parties reached an agreement which5 KB (518 words) - 15:08, 9 August 2022
- Authority (Επίτροπος Δεδομένων Προσωπικού Χαρακτήρα) found that consent is not an appropriate legal basis for processing employees' personal health data. In4 KB (472 words) - 16:52, 6 December 2023
- 15 GDPR, for failing to respond to an access request submitted by a participant in a telephone survey. In this case an individual, the data subject, who5 KB (571 words) - 16:39, 28 February 2023
- subsequent period of 3 months. (2) The Tribunal may, on an application by the data subject, make an order requiring the Commissioner- (a) to take appropriate12 KB (1,722 words) - 14:39, 21 December 2023
- with Article 123 of the LPACAP, the interested parties may, on an optional basis, file an appeal for replacement to the Director of the Spanish Data Protection16 KB (2,625 words) - 14:29, 13 December 2023
- processing is implemented by the State, an administrative fine not exceeding 10 million euros or, in the case of an undertaking, 2% of the total annual worldwide18 KB (2,677 words) - 09:50, 10 September 2021
- data is all information that relates to an identified or identifiable natural person ('data subject'), and, in an employment relationship, the employer inevitably18 KB (2,724 words) - 08:24, 14 March 2022
- others, to the possibility of making an injunction and imposing a fine and to the right to file a case before issuing an administrative act in accordance with23 KB (3,657 words) - 11:23, 17 April 2024
- who was not able to provide an explanation. After receiving the report, the AEPD also tried to contact the company for an analysis of the case, measures27 KB (3,993 words) - 13:52, 13 December 2023
- cessations in such position); the claimant also attached such list in an Excel file as an evidence of its claim. According to the claimant, such information26 KB (4,034 words) - 14:04, 13 December 2023
- The Spanish DPA (AEPD) imposed a fine of €3,000 to an online perfume shop for displaying personal data (including billing information and address) to a32 KB (4,837 words) - 14:26, 13 December 2023
- files an appeal for reversal on 03/18/2021, appeal that is declared inadmissible for being filed out of time. The claimant on 06/30/2021 presents an extraordinary32 KB (4,780 words) - 10:44, 13 December 2023
- observed. There was also no suspicious network traffic suggesting an external attack. An assessment of technical measures in terms of IT infrastructure,37 KB (5,819 words) - 09:58, 17 November 2023
- instead of providing access to data after an access request by the data subject. The data subject submitted an access request Article 15 GDPR for his two39 KB (5,674 words) - 08:57, 29 June 2023
- personnel delegates, whichit implies the realization of an electoral campaign and the publication of an electoral census.C / Jorge Juan, 6www.aepd.es28001 -37 KB (5,700 words) - 14:24, 13 December 2023
- The Higher Regional Court of Köln held that an access request of an insurance holder aimed to verify the lawfulness of premium increases - and not the42 KB (6,689 words) - 08:30, 21 November 2022
- on how to delete an account, Check out our Help Center. If you want to report an account that belongs to a minor, please, send us an email. In your email58 KB (8,995 words) - 13:00, 13 December 2023
- disability status. In July 2020, an individual sent an e-mail to the Hellenic DPA reporting that when they attempted to submit an application on the tourism4all65 KB (10,533 words) - 10:28, 27 January 2022
- violations in writing. This decision is an appeal of decision 24/2020, where a customer (the data subject) of an insureance company (the controller) claimed85 KB (12,340 words) - 15:30, 19 August 2022
- person, to an undetermined number of people physical. 3. An approved certification mechanism may be used in accordance with the Article 42 as an element that100 KB (16,401 words) - 14:07, 13 December 2023
- Regulation stipulates the imposition of an administrative fine in accordance with Article 83, paragraph 4, point a), that is, an administrative fine of up to EUR7 KB (855 words) - 15:30, 30 October 2023
- Chamber, which requested an investigation by the Inspection Service. Should you forward e-mails to a new recipient, or display an automated response to say7 KB (937 words) - 17:00, 12 December 2023
- with standardised icons allowing provide in an easily visible, intelligible and clearly legible manner an adequate overview of the planned treatment. The22 KB (3,500 words) - 14:50, 13 December 2023
- necessity. The DPA also reprimanded the controller for failing to reply to an access request within one month. The data subject found out that the controller22 KB (3,237 words) - 12:25, 17 June 2022
- notice of a traffic offense due to an improper parking of a professional car that, in that moment, was being driven by an employee of him (the claimant),22 KB (3,424 words) - 14:06, 13 December 2023
- was uploaded to an online archive in 2010. In the document the complainant is identified by name and accused of unfair treatment of an employee. The Celle127 KB (21,367 words) - 16:00, 22 March 2022
- Correctional Service (DCS) regarding their processing of personal data, specifically an overview of such processing (equivalent to Article 30 GDPR) for purposes related18 KB (2,525 words) - 08:44, 11 July 2022
- new evidence revealing that the violation of the right to object was due to an isolated error and not to malicious intent. In a previous decision (hub: 13/2021)16 KB (2,374 words) - 11:46, 18 August 2022
- appellant may challenge this decision within 30 days by submitting an appeal to an administrative court in accordance with the Code of Administrative Court16 KB (2,456 words) - 10:29, 13 December 2023
- public interest. In a decision of 16 July 2019, the AP dismissed an objection made by an appellant against the decision to lift the order as unfounded as40 KB (6,464 words) - 09:58, 7 July 2021
- 2021 the French DPA (CNIL) carried out an online inspection of the website "facebook.com" in the context of an investigation into the processing of the82 KB (13,428 words) - 17:02, 6 December 2023
- received an election propaganda letter dated 9 October 2018 from Mr. Y - a letter on the letterhead of the commune of ... the Mayor's office and in an envelope32 KB (5,190 words) - 16:51, 12 December 2023
- Commissioner for Data Protection and Freedom of Information (HmbBfDI) issued an order under the GDPR's urgency procedure prohibiting Facebook Ireland Ltd11 KB (1,423 words) - 09:50, 6 July 2021
- in Article 6 (1) and an additional criterion under Article 9 (2) of the GDPR apply. Article 9 (2) of the GDPR does not contain an exception that would72 KB (11,159 words) - 10:09, 17 November 2023
- the Metropolitan Court in an administrative lawsuit 2subjectable. The emergency does not affect the time limit for bringing an action. The application to67 KB (10,492 words) - 10:11, 17 November 2023
- the Administrative Court Rules - VwGO - an action for rescission is admissible, since the contested warning is an administrative act - at least a declaratory58 KB (9,665 words) - 08:51, 25 November 2020
- basis of a request for an official procedure in parallel with an ongoing procedure Page 12 12there is also a civil action in which an interim measure is granted192 KB (30,170 words) - 10:11, 17 November 2023
- the case of an arbitrary assumption of an "acte clair" or an "acte éclairé" by the specialised courts, the scope of assessment is exceeded in an unjustifiable19 KB (3,209 words) - 13:08, 15 September 2021
- Google LLC was under a legal obligation to preserve search results relating to an employee selection process at a public body and rightfully rejected a data20 KB (3,107 words) - 10:49, 13 December 2023
- The Spanish DPA dropped an investigation due to time limitation periods for infringments outlined in national law. The claimant became aware, in the course22 KB (3,420 words) - 12:59, 13 December 2023
- to his report, when the patient makes an order, the registrar does not directly ask separately whether it is an order related to the right of inspection21 KB (3,204 words) - 13:37, 12 January 2024
- the data subject had withdrawn a complaint, the Hellenic DPA continued with an ex officio investigation into the sending of unauthorized advertising messages4 KB (423 words) - 05:43, 30 October 2023
- Adherence to an approved code of conduct pursuant to article 40 or to a certification mechanism approved under article 42 may serve as an element to demonstrate54 KB (8,451 words) - 13:35, 13 December 2023
- indirectly, in particular through reference to an identifier such as a name, an identity number, location data, an online identifier or one or more factors that50 KB (8,004 words) - 04:49, 14 December 2022
- Contact Tracing do not contain an obligation for restaurants to collect data on customers (under Article 6(1)(c) GDPR) but only an obligation provide certain50 KB (8,015 words) - 13:52, 12 May 2023
- justify this, PSI mentioned that the contact form was not operational, so an email address was provided instead. The Spanish DPA encountered many errors44 KB (7,162 words) - 13:53, 13 December 2023
- carried out, or with three carried out out, by an ultimate wrongdoer; (II) there should be the need for an order to be action to be against the time? and43 KB (7,235 words) - 16:34, 24 March 2022
- employees have not had an official need for such access. The hospital says in its letter that the personal information "was in an area that was not natural45 KB (6,645 words) - 14:40, 28 March 2022
- E-Mail-Adresse an Maichimp, die Gegenstand Ihrer Beschwerde ist - datenschutzrechtlich unzulässig, weil [...] nicht geprüft hatte, ob für die Übermittlung an Mailchimp15 KB (2,168 words) - 13:06, 14 September 2021
- The attribution to the [complainant] of an assessment "overall in line with expectations" was not the result of an automated decision-making process without90 KB (14,651 words) - 08:07, 5 September 2022
- the respective agency to submit an official notification of a positive PCR test. In the case in question, however, an official report was submitted on37 KB (5,745 words) - 13:53, 12 May 2023
- Following an investigation the Spanish Data Protection Authority imposed a fine of EUR 60,000 on XFERA MÓVILES for violation of Article 6(1)(a) GDPR. Ms36 KB (5,821 words) - 14:20, 13 December 2023
- with consumers], an elaborate model declaration of consent must be provided previously by the person responsible for the treatment with an intelligible formulation38 KB (6,160 words) - 14:06, 13 December 2023
- Protection Office. On [...] - [...] April 2020, there was an exchange of correspondence between an employee of KSSiP, AM (as part of the activities ordered75 KB (12,104 words) - 09:58, 17 November 2023
- indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special69 KB (11,077 words) - 16:48, 7 March 2022
- auditee "acting as trustee of the condominium Residence A […], sent an email to Mrs A and an email to Mr and Mrs B, all three co-owners of the residence, within76 KB (11,147 words) - 16:58, 6 December 2023
- "personal data": any information about an identified natural person or identifiable ("the interested party"); An identifiable natural person shall be deemed72 KB (11,671 words) - 13:34, 13 December 2023
- (hereinafter: "Plenary Session") had decided to open an Plenary Session") had decided to open an investigation at Company A on the basis of Article 3769 KB (11,315 words) - 13:30, 19 January 2022
- such users to IP owners or to a third party for the purposes of initiating an action for damages. However, initiatives and requests in this regard must7 KB (966 words) - 12:03, 1 November 2022
- of lawyer] ([name of lawyer]), lawyer, filed an application with the respondent on behalf of claimant for an addition in connection with a civil appeal procedure9 KB (1,203 words) - 16:30, 10 March 2022
- and Article 13 GDPR and decided to: - impose an administrative fine of €7,600 on the controller, - issue an injunction to the controller to bring the processing52 KB (7,520 words) - 13:13, 20 July 2021
- given an effective way to exercise his/her GDPR rights (as the email address provided refused each email received); (iii) the website offered an option47 KB (7,368 words) - 14:21, 13 December 2023
- diseases and emergencies caused by them, the authority, during an epidemic threat or state of an epidemic announced due to COVID, may issue a decision entirely60 KB (9,755 words) - 09:58, 17 November 2023
- processing of data for both identification and marketing purposes will be an active act, an active behavior.2.End the practice of restricting the e-mail addresses24 KB (3,815 words) - 10:11, 17 November 2023
- law-friendly representative, while the complainant did not have an overriding could demonstrate an interest in secrecy. The same result can be reached on the25 KB (3,875 words) - 10:36, 11 January 2024
- Following an investigation, the Spanish Data Protection Authority (AEPD) imposed a fine of 120,000 Eur on VODAFONE ESPAÑA SAU (Vodafone) for a serious24 KB (4,074 words) - 14:21, 13 December 2023
- Regionalist Party of Aragon (PAR) violated Article 21 GDPR by continuing to send an individual unsolicited political canvassing materials after she had exercised23 KB (3,554 words) - 14:31, 13 December 2023
- claimed party is considered responsible for an infringementtypified in article 83.5.a) of the RGPD , in an initial assessment, they are considered concurrentthe24 KB (3,769 words) - 14:10, 13 December 2023
- on 16 May 2019. On 20 February 2019 the complainant received an email with an invoice for an alleged contracted telephone line from Vodafone España, S.A24 KB (3,887 words) - 14:34, 13 December 2023
- indirectly, in particular by reference to an identifier, such as a name, an identification number, localisation data, an online identifier or one or more factors54 KB (9,019 words) - 14:10, 13 December 2023
- on a data services company that refused to grant access to its premises for an on-site inspection, in breach of Article 58(1) GDPR. QUALITY-PROVIDER S.A57 KB (9,217 words) - 10:44, 13 December 2023
- surveillance through a warning. The controller also submitted a certificate by an external company ensuring that the surveillance system only points to the13 KB (1,964 words) - 13:52, 13 December 2023
- for the provision of an aid to a city patient, which has not been regarded in the case-law as an appealable decision equivalent to an administrative decision12 KB (1,810 words) - 13:07, 3 March 2024
- a fine for an amount of 70,000 euros (seventy thousand euros). TENTH: Once the proposed resolution was notified, the defendant requested an extension term49 KB (7,973 words) - 13:25, 13 December 2023
- risks. The Minister of Interior (the controller) requested the French DPA for an opinion on a draft decree made pursuant to Act No. 2023-380 of 19 May 202336 KB (5,524 words) - 17:01, 6 December 2023
- The HDPA issued an opinion requested by the Supreme Council For Civil Personnel Selection (ASEP) on the basis of Article 36 GDPR regarding the online publication33 KB (5,266 words) - 15:32, 6 December 2023
- itself incompetent to assess which of the different legal grounds applicable to an access request is the most beneficial for the complainant, in a case where35 KB (5,628 words) - 16:38, 6 December 2023
- Articles 112 and 123 of the LPACAP, the interested parties may, on an optional basis, lodge an appeal for reconsideration with the Director of the Spanish Agency16 KB (2,587 words) - 13:50, 13 December 2023
- The Spanish DPA (AEPD) held that the data controller must give an express answer which justifies by any means the receipt of a request for erasure, without18 KB (2,721 words) - 14:51, 13 December 2023
- to sanction the unlawful processing of personal data relating to an employee. Ms. XX, an employee of TB s.r.l., claims a violation of her data protection16 KB (2,471 words) - 15:51, 6 December 2023
- FURNISHYOURSPACE SL €3,000 for infringing the Spanish Law regulating cookies after an investigation launched due to a complaint referred by the Berlin DPA, for19 KB (2,841 words) - 14:02, 13 December 2023
- alpen***.at. After rejecting an offer by the controller for a stay in one of the controller's hotels, the data subject received an email with advertisement40 KB (6,007 words) - 13:59, 12 May 2023
- fundamental rights of an individual, which is the right to protection of his/her personal data, or more broadly, to protection of his/her privacy. An essential element22 KB (3,364 words) - 09:52, 17 November 2023
- footage and sharing it without authorization. The data subject was a member of an a community of owners, the controller. They complained with the president24 KB (3,631 words) - 13:20, 13 December 2023
- he is on the X portal published an article entitled "X" (URL: X) in which his personal information was published. As an attachment to his request, the applicant21 KB (3,345 words) - 15:24, 30 October 2023
- that the defendant had an informational poster on the door of access to the rented premises as a home, informing that it was an area video-surveillance22 KB (3,562 words) - 14:22, 13 December 2023
- the data subject is not entitled to the deletion of a search result about an interview he gave. Particular consideration was given to the lack of sensitivity26 KB (4,299 words) - 18:49, 5 March 2022
- found that an attempt was being made unduly conceal the information held by the authorities and make the state opaque, which is not inherent in an open democracy26 KB (4,193 words) - 10:30, 13 December 2023
- thus, figure one in the case of an individual dressed in a suit green, military with a background image of a hangar with an airplane (photo H hereinafter)28 KB (4,592 words) - 14:25, 13 December 2023
- ° request an investigation from the inspection service in accordance with Article 63, 2 ° ; 2° request the inspection service to carry out an additional30 KB (4,204 words) - 09:54, 14 December 2023
- Every EU jurisdiction has different legal writing styles. We have tried to develop a common ground in our GDPRhub style guide. → Please consult the GDPRhub2 KB (264 words) - 13:22, 22 November 2021
- regarding the collection and processing of data of an energy company, the Spanish DPA (AEPD) launched an investigation. In the first place, they found that440 KB (73,154 words) - 09:44, 12 May 2021
- not compliant with Article 32 of the GDPR. It recommended the use of BCC as an alternative. The data subject complained to the Greek DPA (the HDPA) about5 KB (483 words) - 08:42, 29 September 2021
- A housing cooperative had incorrectly judged that the use of an electric lock system did not process personal data. The Finnish DPA ruled that, as individuals3 KB (355 words) - 13:05, 3 March 2024
- wife and I had an attack of anxiety and fear. These events occurred on 08/07/2019 01:50 AM and 08/08/2019 05:30 AM, which were testified in an appearance procedure37 KB (6,022 words) - 13:52, 13 December 2023
- regarding the collection and processing of data of an energy company, the Spanish DPA (AEPD) launched an investigation. In the first place, they found that457 KB (75,575 words) - 09:36, 12 May 2021
- (ANSPDCP) fined an apartment building owners association €500 for illegally processing the image of a data subject. The owners association of an apartment building6 KB (779 words) - 15:16, 13 December 2023
- this body may be considered as an administrative offense in accordance with the provisions of the GDPR, classified as an infraction in its article 83.561 KB (9,700 words) - 13:21, 13 December 2023
- or indirectly, in particular throughreference to an ID, such as name, ID number, datalocation, on an online ID or on one or more agents thatspecific to61 KB (9,412 words) - 16:52, 6 December 2023
- certification mechanism approved in accordance with Article 42 may serve as an element for demonstrating compliance with the requirements set out in paragraph12 KB (1,838 words) - 14:34, 13 December 2023
- reprimanded Tarlun Limited for violating Article 12(3) GDPR by failing to respond to an access request within one month due to a misperception. The decision recognised16 KB (2,438 words) - 09:07, 9 June 2023
- Appellant was sentenced in an accessory sanction of disqualification from driving for a period of 90 (ninety) days for the practice of an infraction to art. 27º21 KB (3,220 words) - 09:51, 6 October 2021
- processing, is issued an official warning due to processing (publishing) personal data of prize winners on the official website page to an excessive extent20 KB (3,166 words) - 15:36, 30 October 2023
- indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more elements110 KB (18,238 words) - 16:56, 12 December 2023
- The object of the complaint is the distribution of the photo as an attachment to an e-mail. The complainant argues that there is Page 4 Substance decision30 KB (4,871 words) - 16:58, 12 December 2023
- The Belgian DPA (APD/GBA) held that an environmental regulation enforcement agency violated Article 5 and 6 GDPR by disclosing the name of a complainant's41 KB (6,354 words) - 16:59, 12 December 2023
- report in 2023 was a two-button form with an “I VALIDATE” button written in white on a red background and an “I REFUSE” button written in black on a grey53 KB (8,418 words) - 11:21, 6 February 2024
- patients' consent for an additional blood sample to be taken to check for the presence of antibodies to COVID-19. It has been considered an important factor88 KB (14,189 words) - 09:58, 7 December 2021
- such an application would have to be submitted to the public prosecutor's office. 8th 6. In a letter dated ... ...2019, the plaintiff brought an action97 KB (16,519 words) - 09:57, 22 February 2023
- case. 11. This report proposed that the restricted panel impose an administrative fine and an injunction to bring the processing into compliance with the provisions59 KB (9,623 words) - 17:03, 6 December 2023
- Society Services (LSSI). Borjamotor, S.A., recognizing its responsibility, made an early payment of €4.800 (reduced from the original €8.000 fine). In 2016,45 KB (6,853 words) - 14:29, 13 December 2023
- The Austrian Federal Administrative Court rejected an appeal against a decision by the Austrian DPA: the failure to inform a data subject under Article32 KB (5,232 words) - 09:40, 10 September 2021
- Administration Act states: "When it is stipulated by law that an administrative sanction may be imposed on an enterprise, the sanction can be imposed even if no individual26 KB (3,885 words) - 08:43, 7 May 2022
- infringing Article 58(2) GDPR due to an alleged infraction of the right of access by a data subject. The defendant agreed to an early and guilty voluntary payment23 KB (3,592 words) - 14:40, 13 December 2023
- not responding to an access request. The data subject also approached LEXER, the credit recovery company for ABANCA, requesting for an immediate cessation26 KB (3,997 words) - 18:59, 26 February 2024
- The Danish DPA (Datatilsynet) held that an electronic ticketing system for public transport violated the principles of lawfulness, fairness, and transparency24 KB (3,763 words) - 16:23, 6 December 2023
- be properly documented. A data subject made an access request to an educational institution, asking for course programs, statistical data of the grades and25 KB (3,972 words) - 14:47, 13 December 2023
- Administration Act states: "When it is stipulated by law that an administrative sanction may be imposed on an enterprise, the sanction can be imposed even if no individual24 KB (3,591 words) - 18:57, 5 March 2022
- reprimanded Barclays for an excessive retention of the complainants’ personal data in a credit information system (CIS) recognising that it was an isolated and bona22 KB (3,235 words) - 15:55, 6 December 2023
- documents). These Russian citizens - allegedly part of an Eastern European Immigrants' Association (EDINSTVO), an organisation for the support of eastern European75 KB (12,306 words) - 10:02, 21 December 2022
- ID documents. A data subject was asked by AirBnb (the controller) to submit an ID card together with a newly taken photograph for identity verification when17 KB (2,411 words) - 09:25, 27 November 2023
- house with an angle of vision”. Their operation is varied, with multiple possibilities depending on the model and brand, sometimes allowing an image to be15 KB (2,313 words) - 10:35, 13 December 2023
- had been successfully deleted. However, 6 months later the claimant received an SMS from the salon again and therefore lodged a complaint before the Spanish15 KB (2,337 words) - 14:24, 13 December 2023
- pursuant to Article 32(1) GDPR, which led to a personal data breach caused by an employee's error. The controller is the Danish Agency for Digitisation. As15 KB (2,304 words) - 15:24, 24 March 2022
- 1 and your address at Spain. A copy of an Ibercheck report according to which, linked to your NIE, there is an annotation of non-payment in the BADEXCUG86 KB (14,295 words) - 14:32, 13 December 2023
- 83(5)(a) GDPR where a company can be fined up to €20000000, or in the case of an undertaking, up to 4 % of the total worldwide annual turnover of the preceding45 KB (7,217 words) - 14:40, 13 December 2023
- University Hospital (AUH). Based on this, on 19 December 2022, the DPA initiated an investigation against the Central Denmark Region (the controller). During46 KB (7,192 words) - 12:37, 19 December 2023
- Bundesgerichtshof asks for an answer to the question whether, in the case of a request for a listing against the person responsible for an internet search service7 KB (972 words) - 14:15, 20 September 2021
- their DPO who independently monitored decisions made in their capacity as an executive of the company. The Data Protection Officer (“DPO”) of a Berlin8 KB (1,011 words) - 16:35, 12 December 2023
- must be able to prove without difficulty that they have carried out an identification, an assessment and a framework of the risks in terms of protection of73 KB (11,238 words) - 16:59, 12 December 2023
- replaced by Article 1-9 § 5. 1Article 1-9 § 5: Correction of an error made in an act, an extract of an act, a decision or a document published in the Annexes73 KB (11,604 words) - 16:57, 12 December 2023
- has been given to [applicant under 1]: “Client is portrayed as an important player in an alleged fraud in connection with broadcasting rights of football34 KB (5,811 words) - 09:44, 8 December 2020
- The Romanian DPA (ANSPDCP) conducted an investigation into ING Bank N.V. Amsterdam – Bucharest Branch, following a personal data breach notification, and4 KB (381 words) - 15:19, 13 December 2023
- The Romanian DPA fined the President of an Association of Owners €300 for not providing the information requested by the DPA by the legal deadline. The4 KB (359 words) - 13:39, 2 December 2022
- to all cookies. Is publishing illegal recordings of a witness on a website an infringement of Article 6(1)(a) GDPR? Is placing cookies without consent when26 KB (4,150 words) - 14:05, 13 December 2023
- plaintiff's assets, so that the plaintiff has an even greater interest in the deletion of the negative entries compared to an insolvency debtor who has completed28 KB (4,215 words) - 15:09, 6 December 2023
- indirectly, in particular by means of an identifier, such as a name, an identification number, location data, an online identifier or one or more elements28 KB (4,435 words) - 14:23, 13 December 2023
- including by e-mail and via a file transfer link. Also, they were given (an unencrypted) USB stick which they dropped into the controller's letterbox28 KB (4,596 words) - 18:30, 18 November 2021
- jurisdiction in 2019. Based on this notification, the Swedish DPA initiated an investigation into the medical data which the Uppsala Regional Council emailed43 KB (4,600 words) - 17:08, 23 March 2022
- the supervisory authorities in Article 57 (1) of the GDPR.Thus, on 31/10/18, an information injunction was sent to the entity in question. THIRD:By letter26 KB (4,212 words) - 14:10, 13 December 2023
- which constitutes an aggravating circumstance in this case (the nature, gravity and duration of the infringement); 3. The Company made an informed decision52 KB (8,444 words) - 10:01, 17 November 2023
- data accessible to an unlimited number of people, or if it extends, even partially, to the public sphere and is thereby directed to an area outside the private21 KB (3,166 words) - 13:43, 12 May 2023
- the AB0086485 credit note had not been paid because it was offset against an existing debt that was outstanding. It adds that a credit note corresponding22 KB (3,521 words) - 14:36, 13 December 2023
- The Spanish DPA ordered a processor (Amazon Web Services) to answer an erasure request from a data subject that had not been completed by the controller22 KB (3,465 words) - 13:30, 13 December 2023
- indirectly, in particular by means of an identifier, such as a name, an identification number, location data, an online identifier or one or more elements60 KB (10,197 words) - 14:01, 13 December 2023
- 000,000 Eur or, in the case of an undertaking, an amount not exceeding 20,000,000 or, in the case of an undertaking, an amount equivalent to a maximum61 KB (9,973 words) - 13:55, 13 December 2023
- a victim of an assault. At this time, the recipient was aware of the data accuracy issue on WMP’s systems and that this letter related to an individual18 KB (2,476 words) - 09:10, 14 May 2024
- to comply with a DPA's request for access to information in the course of an investigation, conduct sanctioned in Article 83(5)(e) GDPR. The company has16 KB (2,462 words) - 13:58, 13 December 2023
- This infringement is punishable by a fine of up to or, in the case of an enterprise, an amount equivalent to a maximum of 4% of the total annual turnover for18 KB (2,727 words) - 13:50, 13 December 2023
- find any contact information of the DPO. There was only an online form available. They wrote an email to the controller and asked to reveal the contact18 KB (2,611 words) - 12:45, 16 June 2023
- the dispute amicably. In an email of August 12, 2020 (2:48 p.m.), Mr. De Haan stated that the parties were unable to reach an amicable settlement. 1.416 KB (2,580 words) - 10:43, 23 September 2020
- with standardized icons allowing provide in an easily visible, intelligible, and clearly legible manner an adequate overview of the planned treatment.17 KB (2,654 words) - 14:50, 13 December 2023
- of personal data to a third country or to an international organization, and the existence or absence of an adequacy decision issued by the Commission96 KB (13,984 words) - 16:57, 6 December 2023
- for parties to be represented by an attorney, which included the sharing of personal data. The data subject filed an appeal with the Federal Administrative33 KB (5,154 words) - 11:08, 21 January 2022
- For example, if as an alternative to sending unencrypted e-mails the written submission of documents is offered, no compulsion due to an unreasonable measured30 KB (4,562 words) - 15:27, 6 December 2023
- registered [the applicant] in the CKI on 12 December 2015 with an A-coding (for the creation of an unauthorised arrears) and a 2-coding (for making the claim29 KB (4,710 words) - 12:25, 4 October 2021
- obligation of transparency,regardless of its size as an organization.Article 13 GDPR establishes an exhaustive list of the information that must bebe provided31 KB (4,808 words) - 14:01, 13 December 2023
- Council of State (RvS) held that if there are easier methods of verifying an identity, it is disproportionate to ask the data subject requesting access12 KB (1,870 words) - 12:37, 16 September 2021
- The Croatian DPA stated in an advisory opinion that the scanning of employees' identity and bank cards may not be based on compliance with a legal obligation11 KB (1,655 words) - 13:32, 31 October 2023
- responded to the data subject, although not in an adequate manner. Thus the Spanish DPA imposed a fine of €10,000 and an order to comply within 30 days. Right of60 KB (9,630 words) - 12:34, 13 December 2023
- accidentally or unlawfully. 3. Adherence to an approved code of conduct as referred to in Article 40 or an approved one certification mechanism as referred60 KB (9,281 words) - 16:50, 12 December 2023
- provide an interactive map to our website – Google Privacy Policy C/ Jorge Juan, 6 www.aepd.es 28001 – Madrid sedeagpd.gob.es 9/31 Lawyers: As an object85 KB (13,042 words) - 12:42, 13 December 2023
- although they complied with an erasure request, they did not subsequently notify the data subject. A data subject made an erasure request at MAG Interactive14 KB (1,580 words) - 15:22, 6 December 2023
- proposed that the restricted committee of the Commission impose an administrative fine and an injunction to bring the processing into compliance with the provisions48 KB (7,525 words) - 17:02, 6 December 2023
- indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier, or to one or more specific46 KB (7,106 words) - 17:06, 6 December 2023
- server is protected against unauthorized access with a password. Following an ex officio administrative proceedings, the President of the UODO has established32 KB (5,139 words) - 10:02, 17 November 2023
- addresses are in BCC must be placed when sending an email in bulk. In addition, the default value to unsend an email, which is initially 5 seconds was now set32 KB (4,880 words) - 16:50, 12 December 2023
- the GDPR, any supervisory authority can submit complaints by an involved person or by an organism. It makes sense then 3 Published on the GBA website.35 KB (5,303 words) - 17:01, 12 December 2023
- children of families who regularly live in a rented apartment or are looking for an apartment. The Supreme Administrative Court considered that the data controller45 KB (5,016 words) - 14:14, 21 March 2024
- to the Spanish far-right political party VOX. The data controller had sent an email without blind copying, to the members of that political party, infringing3 KB (210 words) - 14:32, 13 December 2023
- internet search service operator. Judgment C-131/12 states that an internet search engine is an independent controller of the processing of personal data carried19 KB (3,000 words) - 13:07, 3 March 2024
- 2005). The mere commission of an administrative offense — objective type — is not sufficient time to proceed to impose an administrative sanction. Guilt21 KB (3,281 words) - 14:30, 13 December 2023
- Sector (Responsibility), which requires that only parties responsible for an adiminstrative infraction by way of fraud or negligence be subject to sanction20 KB (3,085 words) - 12:24, 13 December 2023
- payment. The Spanish Data Protection Authority gave an example of what measures would have constituted an adequate remedy and mitigation to the breach according131 KB (20,916 words) - 12:38, 13 December 2023
- the first plaintiff - the data controller - has an independent obligation to process personal date with an appropriate level of security. In the case at105 KB (18,002 words) - 16:24, 10 March 2022
- technical unit managing the evaluation procedure). "This The change is an advantage and an improvement over the statistical analysis carried out after the The116 KB (18,941 words) - 14:21, 13 December 2023
- and 32 GDPR. The Romanian DPA (ANSPDCP) started an investigation after receiving a complaint against an individual who held the office of Secretary-General7 KB (1,035 words) - 15:19, 13 December 2023
- former employer €3000 for debiting the bank-account of a former employee for an external service. The DPA held that the controller had processed the personal8 KB (1,143 words) - 13:02, 13 December 2023
- vice versa in such a way that the data subject receives it in an easy and comprehensible form an overview of the processing of personal data by the controller111 KB (17,604 words) - 13:08, 3 March 2024
- commercial authority of an address publishing and direct marketing company. On January 12, 2019, the co-participant submitted an application to the complainant87 KB (14,194 words) - 10:07, 15 February 2024
- indirectly, in particular by means of an identifier, such as a name, an identification number, data from location, an online identifier or one or more elements287 KB (48,336 words) - 13:53, 13 December 2023
- indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, an online identifier or one or more factors53 KB (8,593 words) - 13:47, 13 December 2023
- Commission also stated that it would carry out a proportionality assessment and an additional DPIA under Article 35 GDPR, in order to guarantee the adherence56 KB (8,102 words) - 13:57, 1 February 2023
- Legislative Decree no. 150/2011, an objection to this provision may be lodged with the ordinary judicial authority, by lodging an appeal with the ordinary court33 KB (5,342 words) - 15:52, 6 December 2023
- but it is an isolated fact, produced by a human error. FUNDAMENTOS DE DERECHOI In the present case the defendant is accused of committing an infringement17 KB (2,518 words) - 14:11, 13 December 2023
- the access request constituted an abuse of rights (Section 242 of the German Civil Code). According to this principle, an exercise of a right is not permitted16 KB (2,369 words) - 10:26, 7 December 2022
- constitute a violation of the GDPR. It also held that Article 77 GDPR grants an independent right to lodge a complaint with a DPA, irrespective of Member6 KB (692 words) - 13:15, 24 August 2022
- that it had an interest in secrecy that justified its refusal to provide a copy under Article 15(4) GDPR. Unsatisfied, the data subject brought an action with5 KB (498 words) - 07:16, 7 June 2023
- personal data consists of obtaining: An increase in the contracting of its services; Greater customer acquisition; An increase in visibility in the competitive84 KB (13,036 words) - 13:26, 13 December 2023
- Disputes Chamber concludes that this case does not concern an assessment of a data processing by an authority in accordance with article 10/1, §1 of the decree84 KB (12,933 words) - 16:46, 12 December 2023
- did not show any CV to the Administrator, nor did they ask for an explanation of why an entity other than SHANA, has such documents.4)In the CVs provided25 KB (3,933 words) - 14:37, 13 December 2023
- to the report, an alternative way would be to change the service so that the user must identify himself to the service before booking an appointment, either25 KB (3,734 words) - 19:37, 27 March 2024
- request after the one-month deadline. On 23 March 2023, an employee of the controller consulted an extract of the data subject's personal data stored in26 KB (3,856 words) - 08:51, 19 March 2024
- documents public. It is illegal to do an act prohibited by the legislature solely on the basis of the fact that ever such an act was permissible. The Data State90 KB (14,351 words) - 16:10, 6 December 2023
- Although this practice was carried out at least since 2012, and up until 2021 (as an internal database of the Municipality showed), the decision focuses on cases11 KB (1,491 words) - 16:54, 6 December 2023
- condition”. In this context, the nurse's conduct indeed caused an explicit correlation, by an unauthorised third party, between the data subject and a specific10 KB (1,206 words) - 15:54, 6 December 2023
- registration on the Robinson List. Furthermore they provided a screenshot of an SMS received as evidence. The complaint was transferred to the controller12 KB (1,685 words) - 12:41, 13 December 2023
- personal data are all data relating to an identified or identifiable individual, and an identifiable individual is an identifiable person. directly or indirectly18 KB (2,722 words) - 15:26, 30 October 2023
- Nules S. Coop. Credit of the Valencian Community, with NIF F12013140, for an infringement of Article 5.1.f) of the RGPD, typified in Article 83.5 of the28 KB (4,619 words) - 13:53, 13 December 2023
- respondent. In the course of this, an employee of the respondent requested that the complainant be presented with an ID, which was also presented by the28 KB (4,228 words) - 14:00, 12 May 2023
- 's lawyer is also listed as a creditor, with an acknowledged claim of € 881.03. - x) [appellant] saved an amount of approximately € 16,000 during the debt43 KB (7,297 words) - 12:26, 4 October 2021
- of the LOPDGDD is configured as an optional procedure in the opinion of the Agency Spanish Data Protection Agency in an attempt to inform the responsible50 KB (7,524 words) - 13:44, 13 December 2023
- order to solve an issue of an inheritance. In carrying out this management, the BANKIA office has informed you that being a client, with an internal number8 KB (1,137 words) - 13:56, 13 December 2023
- transferred several tens of thousands of personal data of club members to an external service provider between 2016 and 2017. This included data of underage8 KB (1,137 words) - 10:22, 17 November 2023
- of the Austrian Armed Forces in order to asses the member in the context of an "extended reliability check" which is foreseen in national law. The Respondent28 KB (3,418 words) - 13:49, 12 May 2023
- Articles 112 and 123 of the LPACAP, the interested parties may, on an optional basis, lodge an appeal for reconsideration with the Director of the Spanish Agency22 KB (3,514 words) - 13:58, 13 December 2023
- the person responsible for thesystem, an aspect verified by the acting force displaced to the scene.Third. It is an established fact that there is no information22 KB (3,421 words) - 14:27, 13 December 2023
- sending a letter to require an end consumer of an energy distributor to get in touch with regards to a unpaid invoice when an intermediary was set up communicate129 KB (21,793 words) - 14:09, 13 December 2023
- for not responding to an access request for 5 months following complaints filed with DPAs in Germany and Austria. The DPA opened an investigation into Klarna18 KB (2,003 words) - 15:22, 6 December 2023
- The extracts of the assignment answers are stored in an electronic copy, which is stored on an independent and closed medium, which does not have access14 KB (2,119 words) - 16:36, 6 December 2023
- decision on an administrative remedy may be suspended as a precautionary measure if the person concerned indicates his intention to bring an administrative14 KB (2,140 words) - 14:39, 13 December 2023
- Article 14 GDPR? The CNIL orders PERFORMECLIC to pay an administrative fine of €7300. It also issued an injunction to bring the processing into compliance12 KB (1,602 words) - 17:10, 6 December 2023
- do not always reflect an actual risk condition (false "positives"); - Allow users to temporarily deactivate the app it through an easily accessible function;71 KB (11,426 words) - 15:49, 6 December 2023
- decision, there is no place for an administrative appeal, but within 30 days of the notification, it can be challenged in an administrative lawsuit by a petition67 KB (10,815 words) - 10:11, 17 November 2023
- of an incident. related to personal data- them. report the situation internally without delay, communicating it to the management team tive. 2.- An internal33 KB (5,338 words) - 14:09, 13 December 2023
- Adherence to an approved code of conduct pursuant to article 40 or to a certification mechanism approved under article 42 may serve as an element to demonstrate36 KB (5,485 words) - 13:19, 13 December 2023
- The Hellenic DPA imposed an administrative fine of €10,000 on Bank for failing to comply with a data subject access request, violating GDPR Article 12(3)7 KB (890 words) - 15:02, 15 January 2024
- Religious Affairs for not conducting a Data Protection Impact Assessment (DPIA) in an appropriate manner before implementing a method of distance learning after5 KB (548 words) - 09:23, 12 October 2022
- form containing personal data to the data subject's neighbour, resulting in an unauthorized disclosure of personal data to a third party. The Cyprus electricity6 KB (664 words) - 09:41, 30 November 2022
- authority, and Article 56(2) GDPR offering an exception to this rule, in cases where "the subject matter relates only to an establishment in its Member State or6 KB (760 words) - 15:52, 28 February 2023
- foreign controller, an entity within the jurisdiction on which the GDPR could bite with legal force to ensure data subjects have an effective remedy for4 KB (474 words) - 08:41, 22 February 2022
- OP Financial Group (OP Ryhmä) from an applicant requesting comprehensive access to OP bonus account information in an account held by his wife. The Tietosuojavaltuutetun7 KB (883 words) - 09:47, 17 November 2023
- Public Administrations, the The corresponding sanction would be an administrative fine for an amount of € 60,000 (sixty thousand euros) without prejudice to37 KB (5,785 words) - 14:11, 13 December 2023
- considered that the claimant had a video surveillance system with an excessive orientation to an area out of its property, and without due cause: two of the18 KB (2,749 words) - 13:57, 13 December 2023
- surveillance cameras in public spaces without a lawful basis under Article 6 GDPR. An individual lodged a complaint with the Spanish DPA (AEPD) arguing that the18 KB (2,721 words) - 14:11, 13 December 2023
- The data subject submitted an access request and the controller did not comply with it. The DPA ordered the controller to provide the requested data or18 KB (2,786 words) - 12:38, 13 December 2023
- after an examination of the submitted insights cases, the authority has found that in five of the cases the citizens have been the subject of an automatic17 KB (2,639 words) - 16:27, 6 December 2023
- in the National Register dated May 11, 2018 by an employee of the respondent. On June 27, 2019, she sent an email to the Helpdesk Belpic (Inner SPF – Directorate-General39 KB (6,246 words) - 16:55, 12 December 2023
- this case - no more than a simple subsidiaryor an establishment of GOOGLE LLC.An administrative fine, an injunction and publicity are coercive measures37 KB (5,919 words) - 08:54, 20 August 2021
- administration but if I had not gone to court, this matter would be involved in an unresolved drawer, and my personal and professional dignity questioned in40 KB (6,508 words) - 14:39, 13 December 2023
- the requester sent a letter with an explanation of why the signatures were not matching together with the copies of an ID card and a bank card. The Municipality21 KB (3,337 words) - 10:08, 16 December 2020
- DPA (AEPD) sent a request to the Town Hall to remove such lists or to offer an explanation why the lists were published, but it was not answered. If there21 KB (3,254 words) - 14:02, 13 December 2023
- camera and the presence of an informative poster where the information about the presence of it. Examining the photographs provided, an excessive uptake of public22 KB (3,380 words) - 13:02, 13 December 2023
- The Romanian DPA (ANSPDCP) fined an energy company EUR 3,000 for violation of the security and confidentiality of personal data. The energy company Enel4 KB (410 words) - 15:18, 13 December 2023
- the illegal sharing of her data with other telephone directories. Following an appeal by the telecom operator, the Court of Appeal of Brussels referred several67 KB (10,544 words) - 09:24, 10 September 2021
- corrective measures different, as well as to impose on the controlled an administrative fine of an amount of 3,700 euros. The ability to submit written observations82 KB (11,472 words) - 16:58, 6 December 2023
- not take into account the context in which persons were at the time an exposure to an infected person was recorded. For example, a health professional or43 KB (6,847 words) - 17:11, 6 December 2023
- indirectly, in particular by means of an identifier, such as a name, an identification number, location data, an online identifier or one or more elements49 KB (7,579 words) - 13:15, 13 December 2023
- Such an appeal can be lodged by means of an inter partes petition must contain information listed in Article 1034ter of the Judicial Code16. It an objection46 KB (7,313 words) - 10:11, 16 May 2024
- legality, requires that the fact that allegedly has an illegal character is expressly found foreseen as an infraction in some precept of the legal system administrative195 KB (30,495 words) - 12:40, 13 December 2023
- holder requests a duplicate SIM card in a store due to theft or loss, opening an incident number the claimed The claimant provides the following with her claim24 KB (3,766 words) - 14:21, 13 December 2023
- are dealing with an unintentional but significant negligent action identified (section 83.2b). - Basic personal identifiers (name, an identification number22 KB (3,523 words) - 13:45, 13 December 2023
- matters, in an intelligible and easily accessible way and using clear and simple language. Any part of the declaration that constitutes an infringement24 KB (3,893 words) - 14:22, 13 December 2023
- Spanish DPA holds that the refusal by an airline to send the telephone recordings to a customer infringes the right of access provided for in Article 1523 KB (3,695 words) - 13:53, 13 December 2023
- Appeals Board for an assessment. In its decision, the Norwegian Privacy Appeals Board clarified that Article 17(3)(b) GDPR makes an exception to the right23 KB (3,547 words) - 10:05, 17 November 2023
- obligation, gal, informs an administrative body of the existence of a certain fact that could justify the ex officio initiation of an administrative procedure25 KB (3,876 words) - 13:48, 13 December 2023
- kind of information regarding the data that they process. After launching an investigation, the AEPD found that the one of the websites did have a privacy52 KB (8,471 words) - 14:33, 13 December 2023
- with an access request. This request did not receive any reply. After examining the defense notes provided by the company, the Italian DPA opened an administrative49 KB (7,758 words) - 15:44, 6 December 2023
- complaint before the Spanish DPA, which started an investigation and notified the controller about an alleged violation of Articles 6(1) and 15 in connection51 KB (7,867 words) - 13:10, 13 December 2023
- infringement is punishable by a fine of up to €20,000,000 or, in the case of an undertaking, an amount equivalent to a maximum of 4 % of the total annual aggregate52 KB (8,416 words) - 12:59, 13 December 2023
- 689/1981; this is because "the security incident [...] caused, in an accidental manner, an unauthorized disclosure of the data entered by the participants50 KB (8,001 words) - 15:52, 6 December 2023
- purpose. There was an additional breach in Article 2(4) GDPR and Article 24 GDPR, which relates to the principle of liability. This puts an obligation on the14 KB (1,883 words) - 16:59, 20 March 2023
- account and the tribunal assumes that he will be given an overview of activities if he directs an inquiry to Microsoft Corporation. However, it will not12 KB (1,874 words) - 19:04, 5 March 2022
- Transformation and Public Service (the Ministry of Transformation) regarding an email sent on 26 January 2023 to the civil service sector, containing a short27 KB (4,166 words) - 17:06, 6 December 2023
- blocked the requested URLs, exceeding the one month time limit for responding to an access or erasure request. The DPA recalled the controller's obligation to29 KB (4,648 words) - 12:38, 13 December 2023
- at Brobizz A / S. Brobizz A / S and customer A have entered into an agreement to issue an Autobizz which can be used to pay for ferry crossings. In connection27 KB (4,231 words) - 16:38, 6 December 2023
- B14851612:A) For an infringement of article 21.1 of the LSSI, typified in Article 38.4.d) of theLSSI, a sanction of warning.B) For an infringement of article29 KB (4,402 words) - 14:00, 13 December 2023
- a sanctioning procedure against the A.A.A for an alleged violation of article 6 of the GDPR typified as an infringement of basic principles for processing26 KB (4,235 words) - 14:33, 13 December 2023
- Municipality of Manduria for unlawfully communicating the personal data of an employee to four newspapers. The DPA held that the Municipality could not24 KB (3,852 words) - 15:50, 6 December 2023
- the provision), an assessment of whether the processing operations are necessary and moderate compared to their purpose (paragraph b), an assessment of the142 KB (22,881 words) - 12:42, 16 January 2024
- 32 GDPR) after an employee recorded video surveillance footage with their mobile phone and shared it on social media. The controller is an supermarket chain6 KB (730 words) - 15:49, 30 October 2023
- The Croatian DPA (AZOP) imposed a fine of approximately €120,000 against an energy company for a violation of Article 15(3) GDPR by failing to provide7 KB (957 words) - 15:49, 30 October 2023
- and Article 13 GDPR. On 14 February 2019, the Luxembourg DPA decided to open an investigation into the companies of Group A and particularly into Company8 KB (1,024 words) - 16:57, 6 December 2023
- data of 1300 data subjects to incorrect email addresses. In the context of an online event that it was organising, the data controller erroneously sent4 KB (422 words) - 15:20, 13 December 2023
- this case, the Cypriot DPA reviewed one of its previous decisions, following an order by the Administrative Court. In September and October 2018, four articles31 KB (4,973 words) - 16:50, 6 December 2023
- receive their contract, the controller sent an email containing contract of another customer as well as an audio recording of that customer's data. The31 KB (4,578 words) - 12:11, 6 March 2024
- Article 123 of the LPACAP, the interested parties may lodge, on an optional basis, an appeal for a reversal to the Director of the Spanish Data Protection31 KB (4,909 words) - 13:56, 13 December 2023
- Seguridad del Estado) in November 2019. In addition, the system does not have an informational poster indicating the responsible person for data processing15 KB (2,366 words) - 14:41, 13 December 2023
- Assembly meeting. The notification document included the claimant's name and an outstanding debt of €286,81 in his name. The defendant claimed that notifying17 KB (2,578 words) - 14:05, 13 December 2023
- key card as an employee or as a private person. The error only affected people with NemID key cards who logged in as an employee, which is an unknown proportion16 KB (2,496 words) - 15:23, 24 March 2022
- ("Gedragscode Verwerking Persoonsgegevens Financiële Instellingen"); 2) IVR is an internal register of ING, appellant failed to demonstrate that the record16 KB (2,462 words) - 12:29, 4 October 2021
- welfare service's handling of confidential personal data in an e-mail on 7 December 2021. In an email to A on 23 February 2022, the Norwegian Data Protection17 KB (2,399 words) - 16:20, 6 December 2023
- SL despite being on the "Robinson List". Raise Marketing has entered into an agency contract for teleshopping with Factor Energía SA. In this contract16 KB (2,544 words) - 14:25, 13 December 2023
- "Any person taken care of by a health professional, an establishment or service, a professional or an organization contributing to prevention or treatment35 KB (5,153 words) - 16:29, 20 May 2021
- due to the voluntary and early payment of €3000. The respondent company sent an e-mail to the claimant requesting the return of a credit. To facilitate payment34 KB (5,427 words) - 14:30, 13 December 2023
- including photo inserts, GZ. PAD/[...]/VStV, an official company register query on FN [...] dated 28.08.2018, an official online search at the Internet address:31 KB (5,161 words) - 14:02, 12 May 2023
- in accordance with Articles 6 and 7 GDPR. The Spanish DPA (AEPD) launched an investigation on Orange's marketing practices after several complainants lodged11 KB (1,490 words) - 13:58, 13 December 2023
- the monitoring activity for which an accreditation was granted , in fact cannot be exercised. Likewise, in this case, an effective interaction of the respective19 KB (2,799 words) - 13:52, 12 May 2023
- factors (Article 83 (2) GDPR) to determine the level of the sanction: It is an intentional negligent action (art. 83 (2) (b) GDPR). The AEPD became aware19 KB (2,957 words) - 14:45, 13 December 2023
- of this body may be considered an administrative offence in accordance with the provisions of the RGPD, classified as an infringement in its Article 8318 KB (2,741 words) - 14:34, 13 December 2023
- The Spanish DPA dismissed a complaint about an unauthorised publication of nude photos of a minor on a pornographic website due to the lack of evidence20 KB (3,035 words) - 10:33, 13 December 2023
- Spanish DPA (AEPD) fined an accommodation services company €6000 for signing a contract on behalf of the claimant without their consent. An action for breach18 KB (2,736 words) - 14:28, 13 December 2023
- although in its historical file, there was an informed dischargeby Evo Finance on January 13, 2019, for an unpaid amount of € 738.76,which was terminated20 KB (3,078 words) - 14:10, 13 December 2023
- year is a sufficient storage period. Statement received from the registrar An explanation has been requested from the registrar on May 27, 2020. The registrar19 KB (2,951 words) - 12:30, 23 April 2024
- assignment of points in an evaluation of the organizational behavior of directors and executive personnel of an Italian municipality may cause an “unjustified and16 KB (2,430 words) - 15:51, 6 December 2023
- Adherence to an approved code of conduct pursuant to article 40 or to a certification mechanism approved under article 42 may serve as an element to demonstrate40 KB (6,014 words) - 13:24, 13 December 2023
- Regulation, the Sanctions Board has assessed the imposition of an administrative fine as an effective, proportionate and warning sanction based on Article39 KB (6,038 words) - 17:39, 29 April 2024
- cookies and tracers, an adaptation period of six months during which the Commission announced that the continuation of navigation as an expression of consent42 KB (6,800 words) - 09:50, 10 September 2021
- the activities of his office, which can be qualified as an SME. Said breaches only concern an employee in a specific, punctual context, marked by loss43 KB (6,670 words) - 16:58, 12 December 2023
- fined electronics and appliance company EUR 3,000 because it kept contacting an individual for commercial purposes, although the individual had objected to4 KB (414 words) - 11:04, 6 February 2024
- of €3000 on GTL for a breach of art. 12 and 15 of the GDPR in relation to an access request from a former employer. In particular, the Garante specified3 KB (342 words) - 15:51, 6 December 2023
- considerations: “Indeed, current criminal law sets an age below which per- sona is unimputable (14 years old), and establishes an age range from 14 and under 18 years47 KB (7,616 words) - 14:35, 13 December 2023
- had an impact on the privacy consents reported in the customer data sheets. In this regard, during the inspections, it was found that there was an inconsistency144 KB (23,155 words) - 15:46, 6 December 2023
- Administrative Courts. For example, Administrative Courts are competent to deal with an action for misuse of powers against a national decree which allows uninterrupted10 KB (1,108 words) - 09:37, 29 September 2021
- Garante held the following: The use of the mandatory tick of the box constituted an infringement of the fairness, lawfulness and transparency principle under58 KB (9,448 words) - 15:50, 6 December 2023
- failing to properly respond to an access request, in violation of Articles 15(3) and 33 GDPR. The data subject made an access request to the controller9 KB (1,251 words) - 12:15, 8 May 2023
- (CTR) and the General Data Protection regulation (GDPR) also does not provide an answer on that question. According to the Information Commissioner, the sponsor8 KB (1,029 words) - 11:07, 13 January 2021
- any of the risks referred to in that article. On 5 December 2019, WM brought an action before the tribunal d’arrondissement de Luxembourg (Luxembourg District8 KB (983 words) - 15:16, 27 March 2024
- Wiesbaden held a data subject could not make a claim for injunctive relief for an alleged violation of his data subject rights because the GDPR does not allow8 KB (1,078 words) - 15:36, 14 February 2023
- access an official computer and whether the permission of an employee is required for the Head of Service to use any of the computers belonging to an agency8 KB (1,087 words) - 16:32, 15 November 2022
- of appeal within 30 days of notification An appeal addressed to the Metropolitan Court may be challenged in an administrative lawsuit within one day. THE60 KB (9,820 words) - 10:08, 17 November 2023
- The Slovenian Supervisory Authority (IP) issued an opinion as foreseen under Article 58(3) GDPR on the issue of the validity of consent to access digital10 KB (1,406 words) - 15:25, 17 March 2022
- Helenic DPA (HDPA) caused by an external cyber attack. The starting point of the breach was a server of the OTE group, which has an annual turnover of €3,25811 KB (1,274 words) - 10:37, 23 February 2022
- denounced that the respondent had installed a video surveillance system with an alleged focus on the complainant's house, infringing article 5(3) GDPR which12 KB (1,686 words) - 14:09, 13 December 2023
- Authority in password-protected ZIP format with an online download option via a channel protected by an https SSL 3.1 certificate. 3. During the analysis140 KB (23,189 words) - 08:25, 20 February 2024
- the amount of HRK 9,375.00. The data subject filed an appeal against the first instance verdict due to an incorrectly established factual situation, incorrect15 KB (2,261 words) - 15:55, 30 October 2023
- The Spanish DPA issued a warning to an events organiser whose website did not provide clear information on cookies nor allowed users to reject cookies15 KB (2,246 words) - 14:26, 13 December 2023
- video surveillance system, which is for security reasons. -It does not provide an impression of what in your case is captured with the camera(s) installed on15 KB (2,275 words) - 14:29, 13 December 2023
- address of theclaimant was already on an internal list of persons who were notthey send communications, but due to an error they sent you a communication18 KB (2,591 words) - 14:47, 13 December 2023
- with administrative fines of up to EUR 10 000 000 or in the case of an enterprise, an amount equivalent to a maximum of 2 % of total annual turnover for18 KB (2,737 words) - 14:23, 13 December 2023
- debit or credit card and the abolition of cash payments on the bus and to take an enforcement action against this measure under the GDPR. The DPA rejected the17 KB (2,610 words) - 16:18, 10 March 2022
- September 9, September 2020, an access to an available network drive is also detected in the equipment, locating information of an apparently sensitive nature18 KB (2,698 words) - 13:41, 13 December 2023
- Articles 5(1)(c) and 5(1)(f) GDPR. The AEPD examined a complaint submitted by an anonymous citizen against the Regional Government of Andalucía (Department18 KB (2,711 words) - 13:43, 13 December 2023
- tested for inconveniences. As a result of an error in the setup of a particular data filter in FLIS, there had been an unlawful disclosure of information, which18 KB (2,710 words) - 16:34, 6 December 2023
- Summary In 2019, the Danish Data Protectioncarried out a planned audit at an office community of law firms. The audit focused on processing security, including18 KB (2,699 words) - 16:25, 6 December 2023
- granularity"). Finally, the Datatilsynet reiterated that "consent must be an expression of an unequivocal expression of will on the part of the data subject." As20 KB (3,151 words) - 16:38, 6 December 2023
- the case. After an unsuccessful appeal to the Higher Regional Court Vienna (Oberlandesgericht Wien - OLG Wien), the claimant flied an appeal with the Austrian22 KB (3,310 words) - 07:44, 5 October 2021
- of this process, on April 8, 2020, the claimed states: That they have sent an email in response to the claim of the claimant. They attach a copy of the21 KB (3,154 words) - 14:07, 13 December 2023
- as an addition to or substitute for the measures contemplated in article Article 58, section 2, letters a) to h) and j). When deciding to impose an administrative26 KB (3,867 words) - 10:44, 13 December 2023
- Article 21 GDPR in conjunction with Article 23(4) LOPDGDD. Avilon Center SL made an voluntary, early and guilty payment of €12,000. The complainant filed a complaint23 KB (3,590 words) - 14:45, 13 December 2023
- (AEPD) rejects A.A.A's claims against Google Spain, SL. The complaint concerned an alleged violation of the applicant's right of erasure (Article 17 GDPR). However23 KB (3,780 words) - 14:49, 13 December 2023
- Article 123 of the LPACAP, the interested parties may lodge, on an optional basis, an appeal for reversal to the Director of the Spanish Data Protection24 KB (3,939 words) - 14:03, 13 December 2023
- Italian DPA found that the violation of personal data was due to the lack of an adequate security framework in line with art. 5(1)(f) and 32 GDPR. More specifically:24 KB (3,672 words) - 15:54, 6 December 2023
- designation of an obligation to cease and desist can - also taking into account the principles of effectiveness and equivalence - only include an obligation130 KB (21,874 words) - 09:43, 15 February 2024
- indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic24 KB (3,697 words) - 15:52, 6 December 2023
- of the Chamber, the problem that an employer collects a large amount of personal data about employees in the course of an employment relationship can only28 KB (4,527 words) - 15:58, 26 April 2022
- notice of receipt in the file. FOURTH: On June 15, 2021, the claimant files an appeal optional replacement (***EXP.1) through the Electronic Registry of30 KB (4,551 words) - 11:51, 9 February 2023
- with the sanction consisting of an administrative fine.1.c) of the GDPR, and could therefore entail the commission of an offence under Article 83.5 of the28 KB (4,371 words) - 14:33, 13 December 2023
- until 22 April 2022. On August 8 2022, the controller responded that there was an error in the profile name. On August 29, the DPA made the same request as28 KB (4,608 words) - 13:27, 13 December 2023
- However, the personal data collected in the specific case was for an article under an established newspaper with editorial control and with a clear public29 KB (4,480 words) - 16:15, 6 December 2023
- Madridsedeagpd.gob.es Page 5 5/14as an ultimate object, avoid incidents such as those that occur and try at all times topromote an environment that advocates respect31 KB (4,757 words) - 13:52, 13 December 2023
- the circulation of a report among other employees detailing the reasons for an employee's temporary assignment, and why they failed to meet the conditions30 KB (4,761 words) - 14:24, 13 December 2023
- with Article 123 of the LPACAP, the interested parties may, on an optional basis, file an appeal for replacement to the Director of the Spanish Data Protection31 KB (4,819 words) - 14:34, 13 December 2023
- Ombudsman (EOAK / 945/2016) that if an obligation to pay has been reasonably challenged in court in a way that may have an effect, the entry is in principle29 KB (4,701 words) - 13:03, 3 March 2024
- controller under the GDPR. The data controller did not process personal data with an appropriate level of security, as required by article 32, read in conjunction34 KB (4,967 words) - 15:46, 6 December 2023
- "calls for tenders and contracts"; - "the act of summons was considered an annex and an integral part of the resolution"; - "in relation to the publication31 KB (5,041 words) - 15:49, 6 December 2023
- submitted a claim against their former employer company (the controller) for an illegal communication of their previous trade union membership data. Specifically36 KB (5,608 words) - 13:01, 13 December 2023
- Authority has ruled in a case in which an attempt was made to refuse the National Commissioner of Police to provide an individual with certain information39 KB (6,351 words) - 09:52, 6 May 2021
- The Romanian DPA (ANSPDCP) fined an eCommerce company €5000 for making available on its website a document containing detailed records of transactions5 KB (547 words) - 15:18, 13 December 2023
- d'Oglio for having published the full text of the judgment involving Mrs. XXX - an employee of the Municipality - on its official website. The data controller6 KB (398 words) - 15:47, 6 December 2023
- The HDPA issued an order to the Greek company managing dry bulk and container vessels, ALLSEAS MARINE S.A., to bring its processing operations with regard5 KB (459 words) - 15:39, 6 December 2023
- that audio is personal data when it is stored and it is possible to identify an individual. As such, companies must inform data subjects when they collect41 KB (6,220 words) - 09:48, 17 November 2023
- decide to submit an objection digitally or on paper to the Data Protection Authority article 38 of the UAVG suspends the submission of an objection to the49 KB (7,201 words) - 17:06, 12 December 2023
- entered by the user, an unauthorized use of the app by from other users could lead to the leaking of this data). They publish an information page in the58 KB (8,665 words) - 16:10, 1 February 2022
- this body may be considered as an administrative offense in accordance with the provisions of the GDPR, classified as an infraction in its article 83.556 KB (9,356 words) - 10:43, 13 December 2023
- carry out an audit of the data importer, and any sub-processor, who has the same scope and is subject to the same conditions that would apply to an audit of83 KB (12,999 words) - 15:30, 6 March 2024
- includes a list of the "Group companies" and an annex with details of the consent collection process (corresponds to an extract of the training given to employees566 KB (93,179 words) - 13:43, 13 December 2023
- concluded that the municipality had not sufficiently demonstrated that it had an ongoing legal obligation to process the data. The court set aside the municipality's23 KB (3,225 words) - 11:52, 4 October 2021
- directly or indirectly, in particular using an identifier, such as a name, an identification number, location data, an online identifier or one or more elements22 KB (3,422 words) - 14:50, 13 December 2023
- The Spanish DPA decided that, in light of an access request, the controller needs to inform the data subject about whether it has transferred their data22 KB (3,544 words) - 14:48, 13 December 2023
- not affect common areas. Also, it must have an approved sign, indicating the controller's identity and an effective address to which it can be directed22 KB (3,438 words) - 14:24, 13 December 2023
- Article 123 of the LPACAP, the interested parties may lodge, on an optional basis, an appeal for reversal to the Director of the Spanish Data Protection19 KB (3,100 words) - 14:50, 13 December 2023
- until 28 December 2044 by virtue of an agreement with the National Civil Aviation Authority (ENAC) - has adopted an organization, management and control115 KB (18,595 words) - 11:30, 16 August 2022
- The Spanish DAP ordered Google to delist an article based on the "right to be forgotten". The AEPD issued a decision related to the right to be forgotten17 KB (2,620 words) - 14:51, 13 December 2023
- Disputes Chamber concludes that this case does not concern an assessment of a data processing by an authority in accordance with article 10/1, §1 of the decree102 KB (15,787 words) - 07:39, 6 September 2023
- consent. Consequently, after considering some circumstances [(i) there is an unintended negligent conduct by the defendant, and (ii) basic personal data14 KB (2,075 words) - 13:48, 13 December 2023
- Knuddels' favour: The transfer of user data to an unauthorized third party was not at Knuddels' instigation but by an external hacker attack. As a result of this13 KB (1,926 words) - 10:22, 17 November 2023
- the laptop and external hard drives and in the form of paper documents in an appropriate manner, and whether the data controller's procedure was in accordance14 KB (1,978 words) - 16:09, 21 February 2024
- appellant complained that the company, in response to his access request, provided an incomplete dataset in English. The DPA found that much of the data that the4 KB (423 words) - 10:30, 13 December 2023
- on the Bundesanstalt’s website. The site was provided with a search tool. An agricultural undertaking, in the legal form of a partnership, and a full-time5 KB (707 words) - 13:18, 1 June 2023
- a fine for an amount of 70,000 euros (seventy thousand euros). TENTH: Once the proposed resolution was notified, the defendant requested an extension of55 KB (9,017 words) - 10:46, 13 December 2023
- The French-speaking Tribunal of First Instance in Brussels issued an interim order declaring admissible but unfounded the action brought by Mrs. KAHN.3 KB (278 words) - 08:05, 4 October 2021
- obliged to correct an incorrect verdict and, if necessary, to make any missing determinations, it is not allowed to exchange the alleged act. An inadmissible47 KB (7,345 words) - 09:41, 10 September 2021
- delete the audio recordings, as they are included as an essential element in patient treatment and on an equal footing with the doctors' other medical records45 KB (7,151 words) - 16:24, 6 December 2023
- unauthorized persons. In this connection, the Family Court has entered into an agreement with an external auditing company to review the course of events and systems46 KB (7,343 words) - 16:39, 6 December 2023
- already submitted samples for scientific purposes. The Icelandic DPA launched an investigation regarding the lawfulness of the processing. The Icelandic DPA44 KB (7,044 words) - 08:42, 13 December 2021
- The Italian DPA decided on March 26th 2020 to impose on Cavauto srl., an appointed car dealer, a fine of € 10.000,00 as well as other measurements to ensure34 KB (5,420 words) - 15:51, 6 December 2023
- formation of an opinion public. In accordance with the jurisprudence of the Constitutional Court and the Court Supreme, all the information referring to an event40 KB (6,518 words) - 13:29, 13 December 2023
- days by submitting either: - an appeal under the Administrative Procedure Act to the Data Protection Inspectorate or - an appeal under the Administrative34 KB (5,305 words) - 08:40, 29 June 2023
- system, an arbitrated procedure where the affected develops its activity. In accordance with the evidence available for such conduct constitutes an infringement39 KB (5,912 words) - 14:02, 13 December 2023
- situation arose in the kindergarten's cloakroom where the boy in question had an outburst of anger. The incident was filmed by one of the staff. The recording34 KB (5,375 words) - 10:07, 17 November 2023
- entities informed the respondent about it, so the inclusion of the data implies an illegitimate processing of personal data. Share your comments here! Share36 KB (5,582 words) - 14:35, 13 December 2023
- List (advertising exclusion list). The Spanish DPA (AEPD) therefore began an investigation to clarify the facts at stake. This revealed that Vamavi Phone33 KB (5,185 words) - 13:48, 13 December 2023
- consent, the lack of an appropriate cookie banner and the extent of information provided in the Cookies Policy. The AEPD gave the controller an opportunity to31 KB (4,923 words) - 12:39, 13 December 2023
- opposition to data processing was available at an initial momentcial, by means of the communication of an e-mail address to which theinterested parties32 KB (4,992 words) - 14:00, 13 December 2023
- controller notified the DPA, who conducted an investigation. The DPA found out that the personal data was retrieved from an unprotected database backup BACPAC37 KB (4,319 words) - 09:20, 17 November 2023
- statement of consent or by taking an explicit consent. Article 6 of the General Data Protection Regulation contains an exhaustive list of situations in29 KB (4,610 words) - 13:07, 3 March 2024
- also appears, such as his name and address. work email. The complainant sent an email on January 22, 2021 to members of the staff meeting in which he requested30 KB (4,623 words) - 12:58, 13 December 2023
- the controller was informed of the complaint - the controller did not have an appropriate legal basis for the direct marketing and legitimate interests27 KB (4,363 words) - 16:56, 12 December 2023
- claimed party is considered responsible for an infringementtypified in article 83.5.a) of the RGPD , in an initial assessment, they are considered concurrentthe27 KB (4,106 words) - 13:55, 13 December 2023
- defendant was not at fault with regard to an alleged breach of the GDPR. Finally, there is no causality of an alleged breach of the GDPR for the alleged25 KB (4,028 words) - 07:10, 8 February 2022
- out in the public interest under Article 6(1)(e) GDPR does not constitute an appropriate and adequate legal basis for all the personal data processed.27 KB (4,289 words) - 07:57, 7 March 2022
- of some employees of an external commercial partner (the company Penta Finanziamenti Italia Srl, hereinafter "Penta") through an application called Speedy27 KB (4,203 words) - 15:49, 6 December 2023
- have been accredited the following: PROVEN FACTS FIRST: The 08/07/2020 has an entry in the AEPD police report bulletin FORAL DE NAVARRA (hereinafter, the29 KB (4,300 words) - 14:41, 13 December 2023
- for the infringement of Article 6(1) of the GDPR, as the defendant agreed to an early voluntary payment of the corresponding part (48,000 €) of the fine suggested27 KB (4,150 words) - 13:45, 13 December 2023
- impose on the claimed person as responsible for an offense typified in the Article 83.5.a) of the RGPD, in an initial assessment, they are considered concurrent30 KB (4,631 words) - 13:00, 13 December 2023
- without obtaining consent or a contract for doing so. The complainant filed an action against Alterna Operador Integral SL (Flip Energy). The complainant29 KB (4,386 words) - 14:20, 13 December 2023
- failed to pay the invoices issued on June 16, 2016, for an amount of 32.74 euros and July 19, 2016, for an amount of 20.32 euros, reason for which the claimant28 KB (4,295 words) - 14:11, 13 December 2023
- mother of the child, as an involved partyin the Y1 procedure, has the right to access the file.83. The Ethics Committee has issued an opinion on this matter81 KB (13,211 words) - 16:59, 12 December 2023
- sedeagpd.gob.es, 7/11 A65067332, as responsible for an offense classified in article 83.5.a) of the RGPD, in an initial assessment, they are considered concurrent26 KB (3,846 words) - 12:42, 13 December 2023
- competent to resolve this process. II The defendant is charged with committing an offense for violation of article 13 of the RGPD, regarding the information24 KB (3,838 words) - 13:51, 13 December 2023
- had to assess whether the culpability constitutes a requirement for imposing an administrative sanction under the GDPR. The AEPD ruled that by sending the23 KB (3,672 words) - 14:25, 13 December 2023
- such data and repealing Directive 95/46/EC (as regards (hereinafter GPRD), an offense under Article 83(5)(a) of the GPRD and described as very serious in25 KB (4,037 words) - 14:55, 13 December 2023
- this body may be considered as an administrative offense in accordance with the provisions of the GDPR, classified as an infraction in its article 83.524 KB (3,749 words) - 13:19, 13 December 2023
- deletion of the personal data held by the data controller in the context of an job application process. The DPA undertook a broader investigation. Could24 KB (3,843 words) - 16:51, 12 December 2023
- "ASOCIACIÓN DE VIGILANTES DE SEGURIDAD DEL AEROPUERTO DE BARCELONA" with €1800 for an infringement of the principle of confidentiality in the processing of data24 KB (3,907 words) - 14:08, 13 December 2023
- veterinarian unlawfully. He argued that his personal data was processed for an illegitimate purpose, knowing that the controller used the complainant’s personal24 KB (3,844 words) - 16:51, 12 December 2023
- controller had acknowledged this incident and had reported it as a data breach on an unspecified date. On 15 November 2019, the Dutch DPA decided that it would10 KB (1,351 words) - 17:05, 12 December 2023
- in their publications that they are an ‘organisation in receipt of support from abroad’. The Commission brought an action for failure to fulfil obligations11 KB (1,143 words) - 14:06, 11 August 2022
- The Croatian DPA imposed an administrative fine of €25,000 on Zagrebački Holding D.O.O., a public service company of the city of Zagreb, for violations9 KB (1,276 words) - 15:22, 30 October 2023
- for an executive position within the Ministry and asked via e-mail that all candidates are provided with the right of objection and the right for an internal4 KB (322 words) - 15:39, 6 December 2023
- "), while in Article 32 par. 2 GKP is provided in the context of an assessment of an appropriate level of security h taking into account the risk arising127 KB (21,184 words) - 15:39, 6 December 2023
- Data Protection Authority informed Varde Municipality that an employee who has been assigned an internal responsibility for the processing of personal data21 KB (3,119 words) - 16:22, 6 December 2023
- of an identifier, such as a name, an identification number, data from C / Jorge Juan, 6 www.aepd.es 28001 - Madrid sedeagpd.gob.es 3/7 location, an online21 KB (3,123 words) - 14:25, 13 December 2023
- indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic19 KB (2,989 words) - 15:51, 6 December 2023
- photograph of an arrested person - attributable to a "mugshot" or similar to the latter - not justified by proven need for justice and police constitutes an unlawful66 KB (10,708 words) - 11:29, 16 August 2022
- quarantine is not the same situation as an employee's sick leave. Compliying with quarantine is not the exercise of an employee's right, but observance of7 KB (1,028 words) - 11:05, 13 January 2021
- Prosecutor's Office has now filed an appeal against this decision, arguing that for the application of the GDPR the mere establishment of an infringement, without8 KB (965 words) - 16:38, 12 December 2023
- data where the data subject has not made an Article 17 GDPR request. The Hungarian DPA subsequently filed an action of unconstitutionality to set aside6 KB (683 words) - 15:27, 27 March 2024
- of a complaint alleging that Actamedica SRL from Târgu-Mureș sent an information to an individual regarding the loss of his biological samples and a sum7 KB (900 words) - 15:23, 13 December 2023
- personal data are not automatically, without the intervention of an individual, available to an unlimited number of individuals. The Budget Act (Official Gazette16 KB (2,373 words) - 15:31, 30 October 2023
- ref.: 11.17.001.009.232 7 September 2023 Decision Failure to Fully Comply to an Erasure Request by Freedom Finance Europe Ltd 1. A complaint was lodged with17 KB (2,515 words) - 11:17, 6 February 2024
- hereby returns to the case where users in a number of municipalities - due to an error in a planned release of a new version of Schultz Expose - have been18 KB (2,633 words) - 16:36, 6 December 2023
- are personal data all data relating to an individual whose identity has been determined or can be determined, a an individual whose identity can be established17 KB (2,660 words) - 15:35, 30 October 2023
- DPA warned that failure to comply with this decision will be sanctioned as an infringement of Article 58(2) GDPR. Share your comments here! Share blogs18 KB (2,693 words) - 13:31, 13 December 2023
- Article 83.5 of the GDPR. The sanction that must be imposed is an administrative fine for an amount of 300 euros (THREE HUNDRED EUROS) Therefore, in accordance17 KB (2,368 words) - 13:28, 13 December 2023
- as the main responsible B.B.B., with ***NIF.1. Third. The availability of an operating system for video cameras is accredited. deo-surveillance although16 KB (2,041 words) - 13:34, 13 December 2023
- owners of 03/12/2018, the claimant andThe rest of the community members adopt an agreement regarding the undertaking of works inthe covered areas of each of14 KB (2,163 words) - 14:10, 13 December 2023
- installation of video cameras are not necessarily illegal, so long as they have an information notice attached (Article 22(4) LOPDGDD). Conseguridad SL was fined15 KB (2,245 words) - 14:22, 13 December 2023
- present their point of view. As their response, the controller sent the DPA an answer to the request by the data subject. However, the controller still did14 KB (2,139 words) - 10:50, 13 December 2023
- June 8th, 2018, it created an internal data protection board with exactly the same role and functions as a DPO (and even an internal data protection sub-board16 KB (2,298 words) - 14:36, 13 December 2023
- sending telematic notifications for an incident in the application database, while that of 10/31/2019 consisted of an incorrect handling of exceptions in51 KB (7,770 words) - 14:08, 13 December 2023
- imposed an administrative fine in the amount of HRK 30,000 for the aforementioned violation. Precisely the corrective measure in the form of an administrative3 KB (336 words) - 15:30, 30 October 2023
- rating of a single-person enterprise with no legal basis for such processing. An individual company was subjected to a credit rating by Odin Flissenter, despite4 KB (498 words) - 18:55, 5 March 2022
- FRENCH PEOPLE Considering the following procedure: By a summary request and an additional memorandum, registered on January 21 and May 18, 2020 at the litigation13 KB (1,928 words) - 09:51, 10 September 2021
- for the Protection of In this case, the accused entity may, on an optional basis, lodge an appeal for reversal the director of the Catalan Data Protection38 KB (5,760 words) - 08:26, 8 September 2021
- administrative fines of 10,000,000 Eur as maximum or, in the case of an enterprise, an amount equivalent to 4% as maximum of the total annual overall turnover36 KB (6,022 words) - 13:59, 13 December 2023
- above, the Agency considers that it deserves a sanction for the commission of an infringement of Article 6.1 of the GDPR, the amount of said sanction should21 KB (3,335 words) - 14:25, 13 December 2023
- dati personali) imposed a fine of €2,000 on Poliambulatorio Talenti S.r.l., an outpatient clinic, for failing to respond to a data subject's access request21 KB (3,092 words) - 15:54, 6 December 2023
- However, an administrator who creates a fan page, consents to the use policy, cookies policy, defines the objectives and promotes its activities has an influence6 KB (466 words) - 09:52, 5 January 2024
- November of this year, the National Supervisory Authority completed an investigation at an Owners' Association in Iași, to which it imposed a fine and a warning4 KB (503 words) - 15:12, 13 December 2023
- to impose on the defendant as responsible for an infraction typified in article 83.5.b) of the RGPD, in an initial assessment, they are estimated to be63 KB (10,203 words) - 13:01, 13 December 2023
- BACKGROUND FIRST: The claim filed by Ms. A.A.A. (hereinafter the claimant), It has an entry dated 04/29/2019 in the Spanish Agency for Data Protection. The claim35 KB (5,363 words) - 14:02, 13 December 2023
- legal basis, connected to Article 6 of the GDPR—, as the defendant agreed to an early and guilty voluntary payment of the corresponding part (600 €) of the19 KB (2,795 words) - 14:06, 13 December 2023
- surveillance were facing the public road without any justified cause. Is it an offence to have cameras facing the public road? Does it constitute a breach20 KB (2,973 words) - 14:09, 13 December 2023
- LGBT-rights association lodged a complaint with the Spanish DPA, which launched an investigation. During this investigation, Hazte Oir withdrew the leaflets21 KB (3,099 words) - 13:59, 13 December 2023
- 1, *** GROUP.2 or *** GROUP.3 of said Association, all of them made up of an average of four hundred people. Likewise, the claimant certifies that she20 KB (3,047 words) - 14:35, 13 December 2023
- Following the publication of some press reports, this Authority has opened an investigation against the Ministry of Economic Development (MISE) regarding57 KB (9,144 words) - 15:55, 6 December 2023
- necessary purposes”, but also that marketing was an object of the processing. URL 1 also did not provide an option to reject cookies. URLs 2, 3 and 4 had55 KB (8,967 words) - 14:33, 13 December 2023
- Data Protection Commissioner has requested an explanation from the data controller on June 10, 2020, and an additional explanation on March 3, 2022. The61 KB (9,477 words) - 13:38, 12 January 2024
- Kabel TV A / S. The DPA found a basis for criticizing TDC A / S for answering an access request only 5 months after the request was made. According to Article33 KB (5,177 words) - 16:23, 6 December 2023
- and with the possibility of an advertising nature 5th We do not know the true intentions of this claimant who, based on an advertisement of November 201931 KB (4,862 words) - 14:28, 13 December 2023
- already requested the deletion of its data pursuant to Article 17 GDPR. On an undetermined date, a data subject issued a complaint to the Romanian DPA against5 KB (519 words) - 15:13, 13 December 2023
- of Article 5(1)(a) GDPR. The controller in this case is an online newspaper which published an article regarding the spending of public funds within a16 KB (2,411 words) - 15:44, 30 October 2023
- protection measures of the property, if necessary. The described facts suppose an affectation to the article 5.1 c) RGPD "The personal data will be: c) adequate16 KB (2,359 words) - 14:24, 13 December 2023
- defendant refused to receive the notices by the AEPD, the AEPD carried out an investigation procedure, and it discovered that the website did not offer16 KB (2,380 words) - 14:01, 13 December 2023
- indirectly, in particular by means of an identifier, such as a name, an identification number, data from location, an online identifier or one or more elements17 KB (2,544 words) - 13:39, 13 December 2023
- Appeals Board overruled the DPA's decision to close a complaint case with just an informational letter to the controller, mandating them to assess the lawfulness16 KB (2,363 words) - 19:27, 13 November 2023
- parents, siblings and those affected. • The Foundation is aware and has provided an e-mail in this regard, that the e-mail address has been used to send mail27 KB (4,243 words) - 14:06, 13 December 2023
- reclaimed and requested information on the measures that had been adopted to put an end to the denounced irregular situation. The certificate issued by the FNMT27 KB (4,517 words) - 13:44, 13 December 2023
- under Article 2(b) of Directive 95/46 includes any information relating to an identified or identifiable natural person. Hence, the term covers the name10 KB (1,172 words) - 06:16, 8 January 2023
- data prior to that date. The PTS disagreed with Tele2 conclusion and brought an action before the Stockholm Administrative Court. After the court dismissed8 KB (1,072 words) - 13:34, 11 August 2022
- question will be able to meet its obligations. Both lenders and borrowers have an interest in the information and data used to assess creditworthiness being26 KB (4,135 words) - 09:59, 6 May 2021
- mechanism was deemed to be not sufficient. The Court required an effective independent supervision by an institution which affords all appropriate technical means24 KB (3,729 words) - 09:50, 14 December 2023
- (related proceedings Zlen W214 2223914-1 and W214 2224398-1). To this end, an oral hearing was held before the BVwG on July 2, 2020, and witnesses were42 KB (6,592 words) - 13:58, 12 May 2023
- portals published by the controller do not contribute to the emergence of an important social debate. The data subject considered that the tax information44 KB (6,893 words) - 10:28, 25 March 2024
- The Icelandic DPA issued an advisory opinion clarifying the interplay between the Information Act and the Privacy Act which implements the GDPR in Iceland13 KB (1,930 words) - 09:33, 13 May 2022
- violating Articles 5, 13, 24, 32 and 35 GDPR. The Lithuanian DPA (VDAI) launched an investigation into the Lithuanian Quarantine App ("Karantinas") in May 202011 KB (1,573 words) - 09:18, 17 November 2023
- throughout the organisation. In December 2020, the Norwegian DPA initiated an audit of the Directorate of Norwegian Correctional Service (DCS, the controller)16 KB (2,010 words) - 14:32, 8 November 2022
- Council did not appoint a DPO, but carried out a contract of 10 months with an external company to receive data protection advise. Is this behaviour in line13 KB (2,002 words) - 14:29, 13 December 2023
- Personal Data Protection, through its procedural representative, expresses an opinion that the appealed decision is correct and there are no cassation grounds13 KB (1,908 words) - 13:41, 15 September 2021
- communication via email without the data subject's consent. The complainant received an SMS from the political candidate which was promoting the candidate’s participation3 KB (228 words) - 08:44, 23 November 2021
- freedoms of the data subject". Accordingly, an overall view of all measures and precautions taken - in the sense of an all-encompassing balancing of interests38 KB (5,821 words) - 13:39, 12 May 2023
- rational indications of the existence of an infringement of the data protection regulations. " Against the agreement, an appeal for replacement is filed with38 KB (6,303 words) - 13:50, 13 December 2023
- first contact was made on 19/06/2020 from telephone number 'T1' to promote an offer on electricity services, the claimant inquired about the call and was21 KB (3,137 words) - 14:33, 13 December 2023
- sent an eye examination invitation for the next examination, generally two years after the last visit. If the patient (registered) refuses to send an eye20 KB (3,108 words) - 13:02, 3 March 2024
- confidentiality principle specified at Article 5(1)(f) GDPR, as the defendant agreed to an early and guilty voluntary payment of the corresponding part (24,000 €) of21 KB (3,082 words) - 13:59, 13 December 2023
- Article 123 of the LPACAP, the interested parties may lodge, on an optional basis, an appeal for a reversal to the Director of the Spanish Data Protection20 KB (3,066 words) - 13:55, 13 December 2023
- alternatively makes an objection of excessiveness of the attorney's fees claimed. The defendant in the cassation appeal - G. Atanasova does not express an opinion20 KB (3,093 words) - 09:56, 14 December 2023
- interest of the controller (Article 6(1)(f) GDPR). The Italian DPA started an investigation and found that personalized advertisement would likely involve57 KB (9,084 words) - 15:11, 13 July 2022
- articles published by various news media in 2010, the subject of which was an arrest warrant against the data subject. After the controller refused to remove60 KB (9,713 words) - 13:07, 26 March 2024
- husband and made a transfer of an undisclosed amount. The data subject found out about the identity theft after receiving an SMS informing of the controller37 KB (5,914 words) - 10:42, 13 December 2023
- violation The National Supervisory Authority completed an investigation of a natural person, as an operator, during which it found a violation of some provisions5 KB (507 words) - 14:47, 5 October 2022
- less than that required by the GDPR, and the information was not provided in an intelligible and easily accessible form with clear and simple wording, especially6 KB (663 words) - 15:31, 6 December 2023
- GDPR. A fine of €1,000 was imposed. The controller, Tensa Art Design SA, was an optician and merchant for glasses, sunglasses as well as contact lenses. As6 KB (707 words) - 15:15, 13 December 2023
- considering examining his request. On which condition can the controller ask for an ID proof in order to respond to a deletion request? The Datatilsynet noted18 KB (2,773 words) - 16:22, 6 December 2023
- CGT's itself, but by an entity that is part of it and the has control only over the web and content of www.cgt-telemarketing. CGT is an Association of Trade17 KB (2,751 words) - 14:51, 13 December 2023
- Such an appeal can be lodged by means of an inter partes petition must contain information listed in Article 1034ter of the Judicial Code7 . It an objection17 KB (2,723 words) - 16:34, 26 January 2024
- out electoral propaganda, said requests may be made prior to the calling of an electoral process, in Municipalities, Consulates and Provincial Delegations18 KB (2,781 words) - 14:30, 13 December 2023
- treatment about their obligations, as well as dealing with claims submitted by an interested party and investigate the reason for them. Correlatively, article16 KB (2,362 words) - 13:37, 13 December 2023
- recording the employees is because a manager was threatened physically by an employee in the workplace. As there was no audio recording of the event, the33 KB (5,347 words) - 13:55, 13 December 2023
- against a private school because its director constantly attended and monitored an employee's online courses without adequately informing her of the legal basis46 KB (7,390 words) - 08:07, 1 April 2022
- appellant may challenge this decision within 30 days by submitting an appeal to an administrative court in accordance with the Code of Administrative Court28 KB (4,711 words) - 10:30, 13 December 2023
- Agency is competent to resolve this procedure. II The defendant is charged with an infringement of Article 13 of the RGPD, which states "1.Where personal data22 KB (3,480 words) - 14:28, 13 December 2023
- of the Spanish Telecommunications General Law, as the defendant agreed to an early voluntary payment of the corresponding part (4,000 €) of the fine suggested23 KB (3,481 words) - 14:42, 13 December 2023
- known facts are considered to be constitutive of an infraction, attributable to the respondent, for an alleged violation of article 6 of the RGPD, indicated21 KB (3,441 words) - 13:46, 13 December 2023
- consented to by the holders of the same. This duty of confidentiality is therefore an obligation incumbent not only on the controller and processor but also on22 KB (3,479 words) - 14:33, 13 December 2023
- providing the pertinent answer, the request for information was repeated, granting an additional period of five days which was not answered. FOURTH: In relation14 KB (2,123 words) - 14:40, 13 December 2023
- the fact that the parties made a settlement of their claims does not deprive an individual from their right of access when their personal data is processed13 KB (2,032 words) - 10:30, 13 December 2023
- intimidation which is exceptional, which is actually borne by the beneficial owner as an individual, and which is clear, real and present? 2. Should this be answered9 KB (1,176 words) - 13:29, 5 January 2024
- capacity of data controller, shall adopt rules and procedures for: (1) use of an infringement reporting system; (2) restrictions on the use of internal company10 KB (1,440 words) - 08:54, 17 January 2020
- Working with Children, according to which the municipality may only request an extract from the criminal record from the applicant. In light of this, the43 KB (6,678 words) - 08:41, 4 March 2024
- The Greek DPA fined an employer €15,000 for the illegal installation and operation of a video surveillance system. It held that a CCTV surveillance system7 KB (845 words) - 13:29, 14 July 2021