Search results

regulation, and see Article 6(3) as a clause that sets out concrete requirements for this regulation. Finally, another group of authors that does not see these requirements

Article 35 GDPR, margin number 14 (C.H. Beck, 36th edition). See Körffer, in Paal, Pauly, GDPR BDSG, Article 58 GDPR, margin number 14 (C.H. Beck 2021)

between states, see WP29, Opinion 4/2007 on the concept of personal data, 20 June 2007, p. 23 (available here). See Recital 27 sentence 1 GDPR. See Recital 27

the factual requirements are met and there are no grounds for exemptions (see below). The assessment must be conducted without delay and its outcome promptly

involved, which systems are used, etc.), and the purposes of the processing. See commentary on Article 24 GDPR. Finally, controllers and processors should

The provision lists a non-exhaustive set of criteria to carry out the task (see below). The SA must first decide whether to impose a fine at all. This follows

further details on the various legal bases for processing personal data please see the commentary on Article 6(1) GDPR. Example: The newly appointed data protection

In this sense, this agreement could not be concluded by email. See, Martini, in Paal, Pauly, DS-GVO BDSG, Article 27, margin numbers 17-20 (C.H.Beck 2021

teleological reading fulfils the requirements already stipulated by Article 47 CFR (see below for more on what constitutes an effective judicial remedy under Article

witness whistle-blower from retaliation, or conversely, the latter might see their right of access restricted to respect the privacy and data protection

3rd edition); Körffer in Paal, Pauly, DS-GVO BDSG, Article 78 GDPR, margin numbers 3-5, (C.H. Beck 2021, 3rd edition). See Recital 143, sentence 7 GDPR:

GDPR. The controller also has to consider the purposes of the processing. See the commentary on Article 5(1)(b) GDPR for more details on the purpose of

follows from Article 25(2). The addressee of the provision is the controller. See the commentary under paragraph 1 for more details on this point. To ensure

C‑673/17, para 47). See Bergt in Kühling, Buchner, DS-GVO BDSG, Article 81 GDPR, margin number 7 (C.H. Beck 2020, 3rd edition). See Bergt in Kühling, Buchner

individuals and their rights under the GDPR see also CJEU C-293/12 - Digital Rights Ireland, paragraph 68, available here. See Polenz, in Simitis, Hornung, Spiecker

requested SA to communicate the results of the request or, if not possible (see paragraph 2 above), at least an update on the progress of the procedure, in

number 4 (C.H. Beck 2020, 3rd edition). See, Articles 3(4) and 4 Collective Redress Directive (EU) 2020/1828. See Moos, Schefzig in Taeger, Gabel, DSGVO

information is still "intelligible". For unfounded or excessive request, see also paragraph 5 below. The requirement for clear and plain language means

security policy of the Union” is also excluded from the scope of the Regulation (see subsection (b) below). Article 2(2)(b) excludes the applicability of the GDPR

judicial review (see commentary to Article 78 GDPR). Handling of a complaint should be performed within a reasonable period of time (see also Article 77(2)