Search results

Category:Article 97 GDPR Kühling, Raab, in Kühling, Buchner, GVO BDSG, Article 97 GDPR, margin numbers 1-3 (C. H. Beck 2020, 3rd edition). In the latter case

enforcement of the GDPR. → You can find all related decisions in Category:Article 59 GDPR Selmayr, in Ehmann, Selmayr, DS-GVO Kommentar, Article 59 GDPR, margin number

Regulation (GDPR), Article 68 GDPR, p. 1059 (Oxford University Press 2020); Brink, Wilhelm, in Wolff, Brink, DS-GVO, Article 69 GDPR, margin numbers 4-6 (C.H

edition). Körffer in Paal, Pauly, DS-GVO BDSG, Article 71 GDPR, margin numbers 4 (C.H. Beck 2021, 3rd edition). Dix in Kühling, Buchner, GDPR BDSG, Article

under the GDPR. → You can find all related decisions in Category:Article 94 GDPR Kühling, Raab, in Kühling, Buchner, GVO BDSG, Article 94 GDPR, margin numbers

all related decisions in Category:Article 31 GDPR Hartung, in Kühling, Buchner, DS-GVO BDSG, Article 31 GDPR, margin numbers 1-4 (Beck 2020, 3rd edition)

as profiling (see also Article 4(4) GDPR); Restriction (marking for limited further processing, see also Article 4(3) GDPR), such as deactivation of information

Member State law under Article 6(4) GDPR; further processing based on the data subject's consent under Article 6(4) GDPR and further processing for a compatible

which violates the GDPR. Article 4(12) of the GDPR clarifies that the regulation applies specifically in cases of personal data breaches. In such breaches,

compatible with the eliminated purpose” under Article 6(4) GDPR. Art 6(4) GDPR establishes that, in order for the controller to determine whether processing

to Article 60 GDPR, Article 61 GDPR, Article 62 GDPR, Article 63 GDPR, Article 64 GDPR, Article 65 GDPR, Article 66 GDPR and Article 56 GDPR. The SA is also

Article 32 GDPR, margin numbers 23 (Manz 2022). Pollirer, in Knyrim, DatKomm, Article 32 GDPR, margin numbers 23 (Manz 2022). Pollirer, in Knyrim, DatKomm

(available here). Bygrave, in Kuner, Bygrave, Docksey, The EU General Data Protection Regulation (GDPR): A Commentary, Article 25 GDPR, p. 576 (Oxford University

Regulation. National identification numbers (NIN) or identifiers of general application as understood in Article 87 GDPR are numbers used by public authorities

is intended to be, stored in a filing system. The term 'processing' is defined, and further discussed, in Article 4(2) GDPR. In general, processing includes

specialis in relation to the GDPR - usually in the form of a Restriction under Article 23 GDPR - these other rights exist in parallel to the GDPR. This means

(Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction (Article 18 GDPR), notification (Article 19 GDPR) or data portability

on Article 6(1)(e) and (f) GDPR, “including profiling based on those provisions.” Profiling is defined in Article 4(4) GDPR as a form of automated processing

80 sentence 5 GDPR. Ziebarth, in Sydow, Europäische Datenschutzgrundverordnung, Article 4 GDPR, margin number 204 (Nomos 2018). Klabunde, in Ehmann, Selmayr

toimisto in Finnish or Dataombudsmannens byrå in Swedish) is the national Data Protection Authority for Finland. It resides in Helsinki and is in charge

Article 6(1)(4) GDPR, as illustrated by the rules in Articles 4(11), 7 or 8 GDPR, as well as Recital 43. If consent is "freely given" under the GDPR requires

please refer to Article 51(1) GDPR and Article 52 GDPR in this Commentary. Article 54(1)(b) GDPR echoes Article 53(2) GDPR, which outlines the qualificatory

categories of data established in Article 9(2)(a) GDPR, Article 9(2)(c) GDPR, Article 9(2)(g) GDPR and Article 9(2)(i) GDPR directly correlate with a specific

related decisions in Category:Article 95 GDPR Costa de Oliveira in Kuner et al., The EU General Data Protection Regulation (GDPR), Article 95 GDPR, p. 1296 (Oxford

exclude all sanctions mentioned in Chapter VIII GDPR, i.e. the damages under Article 82 GDPR and fines under Article 83 GDPR. In any case, should fines for

decisions in Category:Article 78 GDPR Tambou, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 78 GDPR, margin numbers 3 and 7 (C

n Recital 121 GDPR. Hijmans, in Kuner, Bygrave, Docksey, The EU General Data Protection Regulation (GDPR): A Commentary, Article 53 GDPR, p. 888 (Oxford

listed in Article 83(4), (5) and (6) GDPR. This specifically refers to violations of Articles 8, 11, 25 to 39, 41(4), 42, 43 of the GDPR (paragraph 4), Articles

of the GDPR enforcement across the Member States. → You can find all related decisions in Category:Article 64 GDPR Caspar in Kühling, Buchner, GDPR Article

requirements set forth in Article 12 GDPR. Dix in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 34 GDPR, margin numbers 8-9 (C.H. Beck 2019)

from any of the GDPR’s protections. → You can find all related decisions in Category:Article 39 GDPR Just as Article 38 GDPR, Article 39 GDPR also shows similarities

all related decisions in Category:Article 70 GDPR Schiedermair in Simitis et al., Data Protection Law, Article 70 GDPR, margin numbers 6-8 (C.H. Beck 2019

under Article 65(3)(1) GDPR and for consistency decisions in the urgency procedure under Article 66(4) GDPR is necessary, as these are in this respect backward

Belisario, GDPR e normativa privacy – Commentario, Article 90 GDPR, p. 662 (Wolters Kluwer 2018). Piltz in Gola DS-GVO, Article 90 GDPR, margin numbers 6-7 (C

controller (as defined under Article 4(7) GDPR) and a processor (as defined under Article 4(8) GDPR). As noted above, Article 79 GDPR imposes a two-stage cumulative

activity in question. → You can find all related decisions in Category:Article 80 GDPR Leupold, Schrems in Knyrim, Der Datkomm, Article 80 GDPR, margin

(Article 52(4)(5)(6) GDPR). Elements of SAs' complete independence are also addressed in Article 53 GDPR and Article 54 GDPR. The CJEU in the Case of Commission

response under Article 12(4) GDPR. There is no definition of the term “manifestly ... excessive” in the GDPR. The example in the law “in particular because of

19 GDPR. → You can find all related decisions in Category:Article 18 GDPR The right to restriction of processing was introduced in 2016 by the GDPR although

decisions in Category:Article 55 GDPR Hijmans, in Kuner, Bygrave, Docksey, The EU General Data Protection Regulation (GDPR): A Commentary, Article 55 GDPR, p

established in 2001. It resides in Riga and is in charge of enforcing GDPR in Latvia.  The DVI is functionally independent institution. Besides GDPR, the regulation

BDSG, Article 75 GDPR, margin number 6 (C.H. Beck 2020, 3rd edition). Brink, Wilhelm, in BeckOK DatenschutzR, Article 75 GDPR, margin numbers 8-9 (C.H. Beck

of the GDPR. Article 10 GDPR is intended to extend the protection of the GDPR to the processing of certain criminal data that is not included in the scope

66(1)-(2) GDPR is the CSA within the meaning of Article 4(22) GDPR. In contrast, Article 66(3) refers to “any supervisory authority” (Article 4(21) GDPR) and

decisions in Category:Article 93 GDPR Herbst in Kühling, Buchner, DS-GVO BDSG, Article 93 GDPR, margin number 1 (C.H. Beck 2020, 3rd Edition). Ehmann, in Ehman

of Article 4(7) and (8) GDPR can be liable for compensation. A claim for damages first requires an infringement of the GDPR. Article 82 GDPR does not contain

to damage referred to in Article 62(4) GDPR. According to Article 62(7) GDPR, if the lead SA does not invite the SA to take part in the joint operations

is subject, under Article 6(1)(c) GDPR. In line with the general objectives of the GDPR, as outlined in Article 1 GDPR Article 16 TFEU, SAs are also required

as listed in Articles 13 GDPR. In certain cases, Article 23 GDPR may be used by Member States to exempt certain duties under Article 13 GDPR in certain situations

Article 14 GDPR gives expression to the principle of transparency enshrined in Article 5(1)(a) GDPR and further defined in Article 12 GDPR. While Article

business 'in accordance with community law' - not in violation of community law (such as the GDPR). While there is no general balancing test, the GDPR foresees

guidance on Article 85 GDPR can be found in the case-law of the ECtHR. See, Tinnefeld in Kühling, Buchner, GDPR BDSG, Article 85 GDPR, margin number 9 (C

access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), notification obligation

mentioned in paragraph 1. In other words, the examples provided in paragraph 3 are helpful in understanding the relevant risk indicators for the GDPR, which

Article 4(7) GDPR (definition of controller), Article 4(8) GDPR (definition of processor), Article 4(16) GDPR (definition of main establishment), Article

carried out in compliance with the GDPR. Article 28(3)(h) GDPR enables such a task in case processors are used. According to Article 28(3)(h) GDPR, the processor

controller qualifies as controller (Article 4(7) GDPR) and Google LLC as processor (Article 4(8) GDPR) for data processing in connection with Google Analytics. Furthermore

Lit a GDPR or Article 6 GDPR or GDPR Article 6, Sec 1(a) Recitals are also not shortened. Example: Recital 47 Example: Not R 47 or Recital 47 GDPR Other

protection authorities (Art. 78.1 GDPR), as well as by the possibility to bring actions directly in court (Art. 79 GDPR). Against the decisions that put

In the opinion of AG Bobek, data such as phone number and car chassis number must be considered as personal data in the sense of Article 4(1) GDPR when

(i.e. the differentiation of the numbers existed, in these cases, in the last two digits of the calling numbers). In one case, the complaint concerned

meaning of Article 4(7) GDPR. Furthermore, the erasure or destruction of personal data is a form of processing based on Article 4(2) GDPR. The DPA has the

GCP in in combination with article 83 par. 5 of the GCC, and with article 21 par. 1 lit. b 'of Law 2472/1997, in combination with article 13 par. 4 of law

even pseudonymised data (Art. 4 Para. 5 GDPR) from the term personal data are recorded in accordance with Art. 4 Para. 1 GDPR. It is undeniable that the MB

protection of Art. 82 GDPR does not cover violations of Art. 13, 14, 15, 24, 25 and Art. 34 GDPR. In addition, there is no breach of the GDPR by the defendant

juris; Klar/Kühling: in: Kühling/Buchner, DS-GVO/BDSG, 2nd ed., Art. 4 DS-GVO marginal 8; Ernst, in: Paal/Pauly, DS-GVO/BDSG, 2nd ed., Art. 4 marginal 14). 39

the GEOPORTAL2 was not in line with the principle of lawfulness in Article 5(1)(a) GDPR, as none of the conditions of Article 6 GDPR were satisfied. The data

6(1)(a) and 4(11) GDPR in a case concerning the requirements of consent). Always use the most specific sub-paragraph (e.g. Article 6(1)(a) GDPR for consent

relative numbers were included in the Company's denial black list; e) in the black list used by the partner XX Srl there were almost 200,000 numbers that did

Article 28(1) GDPR by allowing 84 Danish municipalities to wrongfully gain access to the social security numbers and employment information of 4.2 million

Article 32 GDPR in ten cases. Meanwhile, Zitatel was found to be in violation of Article 5(1) GDPR and Article 32 GDPR in two cases. With regards to Teleraise

things. (6) In the situation in question, children's personal identification numbers are not intended to be used for the purposes listed in paragraph 38

referred to in Section 29.4 of the Data Protection Act, in which the personal identification number should not be entered unnecessarily. In addition to

account numbers. As a result, the DPA issued a reprimand to the controller in accordance with Article 58(2)(b) GDPR. Pursuant to Article 58(2)(d) GDPR, the

by e-mail. 1.4.4. With reference to the disputes referred to in points 4) and 5), in the initiation of the procedure it was noted that, in relation to the

checked whether the calling numbers indicated by the claimant in his claim are recorded in our database of telephone numbers that use our collaborators

calls to be made to the numbers included in the list of ADHD as well as in the internal Robinson List. In view of the above, my client understands that

awarded to an attorney at law salary. 4 The decision The court 4.1. Declares [the applicant]'s application inadmissible; 4.2. orders [the applicant] to pay

protection breach resulting in the need to notify the authority and the data subjects, according to Article 33(1) GDPR and Article 34(1) GDPR? The PUODO held that

November 2017 for complete numbers (i.e. for more than 13 months) and since 9 July 2014 for truncated numbers (i.e. for more than 4 years). However, the registration

of facts in a number of respects. In so far as relevant, the Court of Appeal will take this into account in the following. In this case - in so far as

persons responsible or in charge listed in paragraph 1 commit any of the offences referred to in Articles 72 to 74 of this Organic Law. In the present case,

personal data (health data under Article 4(15 GDPR) and consisted of the patients' names and social security numbers, excerpts from patient letters, medical

institutions) in this specific case outweigh the interests or the fundamental rights and freedoms of the data subject (recital 69 GDPR ). 4.4. This assessment

following sanctions, resulting in a record fine of € 8 125 000: - A € 4 000 000 fine for the infringement of Article 28 GDPR: due to the hiring of processors

obligation mentioned in the Art. 14 GDPR. 4) No, in the assessment of the President of UODO, sending out information related to Art. 14 GDPR by regular mail

obligations under Articles 24 and 32 of the GDPR which led to the personal data breach, as per Article 4(12) of the GDPR, including with regards to the complainant’s

purposes? 4) Is the data subjects’ consent valid? The HDPA found that: 1) The telephone number constitutes personal data according to Article 4(1) GDPR as the

complainant contained in a procedural document; in particular, a page of the procedural documents is taken up in which the claimant appears in a frontal position

Misdemeanor Court in Zagreb ruled that municipal wardens have a valid legal basis under Article 6 GDPR to collect and process vehicle registration numbers. The legal

mobile phone numbers of contacts who do not use the app. In order to do so, it must first assess whether the holders of the mobile phone numbers in the address

Article 48(1) LGT, Article 21 GDPR in link with Article 23 LOPDGDD and Article 28 GDPR? The Spanish DPA (AEPD) held that the facts in question indicated a breach

000 under Article 58(2) GDPR and Article 83(4) GDPR for the breach of Article 32(2), Article 32(4) GDPR and Article 28(3) GDPR. As for the controller,

provider, was processing personal data, in line with the definition of Article 4(1) GDPR. In accordance with Article 5(3) GDPR, the controller had an obligation

control with reference number [...], in order to prevent its implementation in the scope indicated in points 1-5 and in point 6 (with regard to technical

04/25/2018 in which he makes these declarations: - That in a bank account of which he is the owner in the entity CAIXABANK, (number ended in the digits

[plaintiff] states - in brief - that, in view of the current facts, ABN AMRO's interests in maintaining the coding do not outweigh its interest in removing it.

privacy. In addition, the excel files contained social security numbers 4 which are considered to be particularly personal data. The information in e- the

which the agent contacted in a personal capacity the complainant does not belong to VODAFONE, i.e. it is not listed in the numbers assigned to the ATENTO

to secrecy in accordance with Section 1 Paragraph 1 of the GDPR by not observing the principles in accordance with Articles 5 and 6 of the GDPR. The complaint