Search results

much broader under Article 6(1)(4) GDPR, as illustrated by the rules in Articles 4(11), 7 or 8 GDPR, as well as Recital 43. If consent is "freely given"

recognised, such as the data subjects' expectation of reasonable use of their data, and the right not be discriminated or exploited as a consequence of

The information can either be 'objective' such as unchangeable characteristics of a data subject as well as 'subjective' in the form of opinions or assessments

wording must be understood as indicating that the controller shall restore availability and access "as soon as possible". As the wording of this provision

information should be provided in as simple a manner as possible, avoiding to downplay or 'reframe' processing operations, as well as complex sentence and language

least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for

processor, such as access to documents, the examination of hardware and software used, networks, databases, applications, interfaces, as well as the testing

intended" and "as well as the legal basis for the processing") otherwise the paragraph could simple read "any purposes, any personal data, as well as any legal

of public health in accordance with points (h) and (i) of Article 9(2) as well as Article 9(3); (d) for archiving purposes in the public interest, scientific

taking into account the nature scope or purpose of the processing concerned as well as the number of data subjects affected and the level of damage suffered

or approval for political groups in social networks (such as the "Like" on Facebook) as long as they reflect a reliable conclusion on a political opinion

implementation and the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for rights and freedoms of

approved codes of conduct as referred to in Article 40 or approved certification mechanisms as referred to in Article 42 may be used as an element by which to

the purposes of the processing for which the personal data are intended as well as the legal basis for the processing; (d) the categories of personal data

the processing, such as "filming," "recording," "archiving of images," and so on, as well as the purpose of the processing, such as "detecting unlawful

outlined in Article 23(1)(a) to (j) GDPR (e.g. national and public security) as well as Recital 73 GDPR (e.g. protection of human life). In any case, the threshold

This withdrawal should be as easy as giving consent. Article 7(3) GDPR clarifies that the withdrawal of consent must be as simple as the granting of consent

factors such as the current state of technology, the implementation costs, the nature, scope, context, and purposes of processing, as well as the varying

35(10), as well as recitals 90 and 93 of the GDPR. This requirement is in line with the principles of data protection by design and by default, as outlined

economic or social disadvantage to the natural person concerned. Therefore, as soon as the controller becomes aware that a personal data breach has occurred