Search results

margin number 14 (C.H. Beck 2020, 3rd Edition). Buchner/Petri, in Kühling, Buchner, DS-GVO BDSG, Article 6 GDPR, margin number 23 (C.H. Beck 2020, 3rd Edition)

margin number 11 (2nd Edition, C.H. Beck 2018). Boehm, in Kühling, Buchner, DS-GVO BDSG, Article 58 GDPR, margin number 14 (C.H. Beck 2020, 3rd Edition). Ziebarth

margin number 8 (C.H. Beck 2020, 3rd Edition). See e.g. Herbst, in Kühling, Buchner, DS-GVO BDSG, Article 5, margin number 16 (C.H. Beck 2020, 3rd Edition)

to suitable safeguards, so as to protect personal data and other fundamental rights, where it is in the public interest to do so, in particular processing

the infringement; (h) the manner in which the infringement became known to the supervisory authority, in particular whether, and if so to what extent, the

GDPR, margin number 15 (C.H. Beck 2018). Klar/Kühling, in Kühling, Buchner, DS-GVO BDSG, Article 4 1 GDPR, margin number 14 (C.H. Beck 2020); Eßer, in Auernhammer

12, margin number 11 (C.H. Beck 2020, 3rd Edition). Bäcker, in Kühling, Buchner, DS-GVO BDSG, Article 12, margin number 12 (C.H. Beck 2020, 3rd Edition)

number 35 (C.H. Beck 2018, 2nd Edition). Kamann, Braun in Ehmann, Selmayr, Datenschutz-Grundverordnung, Article 17 GDPR, margin numbers 31-32 (C.H. Beck 2018

number 8 (C.H. Beck 2018, 2nd Edition). Hansen, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 32 GDPR, margin number 37 (C.H. Beck 2019)

margin numbers 18 (C.H. Beck 2022, 3rd edition). Bäcker, in Kühling, Buchner, DS-GVO BDSG, Article 15 GDPR, margin number 29 (C.H. Beck 2020, 3rd Edition)

margin number 13 (C.H. Beck 2019, 3rd Edition); Schulz, in Gola, Datenschutz-Grundverordnung, Article 21 GDPR, margin number 8 (C.H. Beck 2018, 2nd Edition)

number 20 (C.H. Beck 2020, 3rd Edition). Dix, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 13 GDPR, margin number 5 (C.H. Beck 2019)

compliance with the GDPR. Article 28(3)(h) GDPR enables such a task in case processors are used. According to Article 28(3)(h) GDPR, the processor should provide

additional measures to demonstrate the effectiveness of their choices. EDPB: To do so, the controller may determine appropriate key performance indicators (KPI)

request is given appropriate prominence so to reduce the risk of consent being inadvertently given or overlooked. To do so, Article 7(2) GDPR sets out certain

monitoring and enforcement activities (points a, f, h and g), investigation and audit activities ( points f and h), advisory activities (points c, d, e and l)

23, margin number 33 (C.H.Beck 2021, 3rd Edition) and Bäcker, in Kühling, Buchner, DS-GVO BDSG, Article 23, margin number 25 (C.H.Beck 2020, 3rd Edition)

number 61 (C.H. Beck 2021, 39th edition). Baumgartner in Ehman, Selmayr, Datenschutz-Grundverordnung, Article 35 GDPR, margin numbers 70-71 (C.H. Beck 2018

GDPR, margin number 3 (C.H. Beck 2020, 36th edition). Bergt, in Kühling, Buchner, DS-GVO BDSG, Article 82 GDPR, margin number 15 (C.H. Beck 2020, 3rd edition)

data subjects that it is doing so in accordance with the law, unless there's a legal prohibition preventing them from doing so. Finally, Member States may

prevention of threats to public security, so that the processing of personal data for those other purposes, in so far as it is within the scope of Union law

margin number 8 (C.H. Beck 2020, 36th edition); Körffer in Paal, Pauly, DS-GVO BDSG, Article 78 GDPR, margin number 2, C.H. (C.H. Beck 2021, 3rd edition)

margin number 6 (C.H. Beck 2020, 3rd edition). Karg in Wolff, Brink, BeckOK DatenschutzR, Article 80 GDPR, margin number 10 (C.H. Beck 2021, 36th edition)

number 8 (C.H. Beck 2021, 36th edition); Boehm in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 81 GDPR, margin number 18 (C.H. Beck 2019);

determined period of time, issue an opinion, if a majority of its members so decides or if so requested by any supervisory authority concerned or the Commission

determined period of time, issue an opinion, if a majority of its members so decides or if so requested by any supervisory authority concerned or the Commission

number 6 (C.H. Beck 2018, 2nd Edition). Kamann, Braun, in Ehmann, Selmayr, Datenschutz-Grundverordnung, Article 16 GDPR, margin number 18 (C.H. Beck 2018

margin number 6 (C.H. Beck 2018, 2nd Edition). Zerdick, in Ehmann, Selmayr, Datenschutz-Grundverordnung, Article 45 GDPR, margin number 6 (C.H. Beck 2018, 2nd

number 30 (C.H. Beck 2020, 3rd Edition). Dix, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 17 GDPR, margin number 6 (C.H. Beck 2019)

30 GDPR, margin number 14 (C.H. Beck 2019). Hartung, in Kühling, Buchner, DS-GVO BDSG, Article 30, margin number 17 (C.H.Beck 2020, 3rd Edition). Bertermann

GDPR, margin number 1 (C.H. Beck 2018, 2nd edition); Brink, Wilhelm, in BeckOK DatenschutzR, Article 73 GDPR, margin number 2 (C.H. Beck 2020, 36th edition)

GDPR, margin number 1 (C.H. Beck 2020, 3rd Edition). Boehm, in Kühling, Buchner, DS-GVO BDSG, Article 54 GDPR, margin number 2 (C.H. Beck 2020, 3rd Edition)

GDPR, margin number 3 (C.H. Beck 2023, 1st edition). Albrecht in Ehmann, Selmayr, Article 68 GDPR, margin number 1 (C.H. C.H. Beck 2018, 2nd edition).

margin number 4 (C.H. Beck 2018, 2nd Edition). Raum, in Ehmann, Selmayr, Datenschutz-Grundverordnung, Article 31 GDPR, margin number 5 (C.H. Beck 2018, 2nd

determined period of time, issue an opinion, if a majority of its members so decides or if so requested by any supervisory authority concerned or the Commission

prevention of threats to public security, so that the processing of personal data for those other purposes, in so far as it is within the scope of Union law

appropriate, measures to mitigate its possible adverse effects. 4. Where, and in so far as, it is not possible to provide the information at the same time, the

role of directing and coordinating the decision-making procedure. In doing so, the LSA has to cooperate with the other CSA in accordance with the principles

reason to consider a joint appointment as contrary to Article 53(1) GDPR, so long as one of the bodies mentioned above is involved and can effectively

margin number 1 (C.H. Beck 2020, 3rd Edition). Ehmann, in Ehman, Selmayr, Datenschutz-Grundverordnung, Article 93 GDPR, margin number 1 (C. H. Beck 2018, 2nd

10 (C.H. Beck 2020, 3rd edition). Drewes, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 39 GDPR, margin numbers 7-15 (C.H. Beck

number 15 (C.H. Beck 2020, 3rd Edition). Dix, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 34 GDPR, margin number 16 (C.H. Beck 2019)

paragraph is provided to the data subjects in addition to Articles 13 and 14; (h) the tasks of any data protection officer designated in accordance with Article

number 8 (C.H. Beck, 2018, 2nd edition). AG Kokott, Opinion in Case -73/07. Pötters in Gola, DS-GVO, Article 85 GDPR, margin number 9 (C.H. Beck, 2018

margin number 3a (C.H. Beck 2020, 3rd Edition). Bergt, Pesch, in Kühling, Buchner, DS-GVO BDSG, Article 42 GDPR, margin number 3a (C.H. Beck 2020, 3rd Edition)

number 7 (C.H. Beck 2018, 2nd Edition). For this and other examles, see Gola, Datenschutz-Grund-verordnung, Article 11 GDPR, margin number 2 (C.H. Beck 2018

GDPR, margin number 7 (C.H. Beck 2018). Selmayr, in Ehmann, Selmayr, DS-GVO Kommentar, Article 56 GDPR, margin number 8 (C.H. Beck 2018). Guidelines 8/2022

the conditions and safeguards referred to in paragraph 1 of this Article in so far as such rights are likely to render impossible or seriously impair the

instances such as these, a form of prior compliance can be envisaged, not so much with respect to political or governmental bodies, but rather with respect

Union or Member State law should provide for specific and suitable measures so as to protect the fundamental rights and the personal data of natural persons

specific situations of data processing for which the GDPR is not applicable. So the GDPR is the applicable law if there is no more specific rule in the HmbDSG

consent has been given is in line with the conditions of this Regulation, so as to allow the controller to continue such processing after the date of application

margin number 4 (C.H. Beck 2019). Schantz, in Simitis, Hornung, Spiecker gen. Döhmann, Datenschutzrecht, Article 46 GDPR, margin number 10 (C.H. Beck 2019).

This information must be structured in an accessible and intelligible manner, so that both the data subject themselves and any controllers who may receive

to safeguard the professional or other equivalent secrecy obligations, in so far as necessary to reconcile the right to the protection of personal data

Conversely, in high-risk cases, it may be appropriate to ask for more proof, so that the controller is able to verify and retain the information pursuant

supervisory authority in order to allow it to exercise its powers pursuant to point (h) of Article 58(2) where necessary, issue and renew certification. Member States

assist each other in performing their tasks and provide mutual assistance, so as to ensure the consistent application and enforcement of this Regulation

Articles 13 and 14, by means of an arrangement between them unless, and in so far as, the respective responsibilities of the controllers are determined

it is related to the monitoring of the behaviour of such data subjects in so far as their behaviour takes place within the Union. In order to determine

of the holders of parental responsibility over children is to be obtained; (h) the measures and procedures referred to in Articles 24 and 25 and the measures

or a combination of the aforementioned, to halt its sharing of data where so required. In consequence, Grindr failed to control and take responsibility

reading Article 5(3) of the ePrivacy directive in conjunction with Article 2(h) of Directive 95/46/EC, and noting that active consent is now regulated under

is not the first language for most readers. Provide the necessary context, so that a foreign reader (that may not know the local procedure or facts) can

including, in addition, the information referred to in Article 15(1)(a) to (h) of the GDPR? b. If question 4.a. is also answered in the negative: Is the

the case of processing based on subparagraph (h). However, there is no reason to assume that subparagraph (h) is limited to cases of processing by independent

are being processed and, if so, the right to obtain access to those personal data and the following information: [...] (h) the existence of automated decision-making

discretion. So got - what on factual level is undisputed - the C.bank AG with inquiries from 22.07.2019 in the plaintiff's database the sh H. AG requested

(hereinafter LOPDGDD), Said claim was transferred to the claimed party on 12/23/2021, so that it could proceed to its analysis and inform this Agency within a period

generated by a system of cameras or camcorders are data of personal nature, so its treatment is subject to the protection regulations of data. It is, therefore

capturing images of the data subject's home, without being authorized to do so. The controller affirmed that the cameras were installed in his own property

Internet was encrypted. The CNIL reminds that the medical records concerned are so-called sensitive data within the meaning of article Article 9 GDPR. This data

subject in the context of an access requests, to comply with Article 15(1)(h) GDPR. The Datatilsynet conducted some investigations at Udbetaling Danmark

That on August 4, 2019, Mr. H.H.H. contacted me. of the fraudulent transfer department of my bank EVO BANC. The Mr. H.H.H. informed me that in the early

C/EX/3906-1/11-07-2019 (for complaints under (g) and (h)) and C/EX/4560-1/27-07-2020 (for complaints under (g) and (h))). i' and j' complaints), requesting its views

protection violations in H&M's service centre 01.10.2020 - H&M In the case of the monitoring of several hundred employees of the H&M service centre in Nuremberg

for the measures contemplated in the Article 58, paragraph 2, letters a) to h) and j). When deciding to impose a fine administration and its amount in each

digital rights (in forward LOPDGDD), said claim was transferred to Holaluz, so that proceed to its analysis and inform this Agency within a month of the

these advertising cookies, the CNIL has issued an injunction under penalty so that the companies proceed to inform people in accordance with Article 82

that the facts presented do not comply with the provisions of article 6.1, so it could involve the commission of the infraction classified in article 83

lieu of the measures contemplated in Article 58, paragraph 2, letters a) to h) and j). When deciding to impose a fine administration and its amount in each

&cv=11&fst=1672747200000&bg=fffff&guid=ON&async=1&gtm=2oabu0&u_w=1920 &u_h=1080&frm=0&url=https%3A%2F%2Fwww.telekom.de%2Fstart &tiba=Telekom%20%7C%20

the registrar, the call records contain the personal data of the employees, so it does not send the records to the data subject in order to protect the privacy

party requests to know the entire range of data processed by the owner (so much so that art. paragraph 3 of the Regulations provides for the extension of

the DSB went on to assert a violation of Article 12 GDPR and Article 15(1)(h) GDPR, acting beyond the scope of Article 77 GDPR. Hence, the BVwG annulled

LOPDGDD), on 02/11/2022 said claim was communicated to the party claimed, so that it could proceed with its analysis and inform this Agency within the

councilors C.E. du Perron, M.J. Kroeze, H. M. Wattendorff and G. C. Makkink, and pronounced in public by Counsel H.M. Wattendorff on December 3, 2021. 1

information about processing of personal data. The controller failed to do so and shared with him only a general data protection notice. The DPA found out

art. 24 sec. 1, art. 25 sec. 1, art. art. 28 sec. 1, art. 28 sec. 3 lit. h, 32 sec. 1 lit. b and lit. d, art. 32 sec. 2, art. 33 paragraph. 1, art. 34

inadmissible C. Concerning the alleged lack of formal reasoning for t h e opening of t h e investigation on the merits Mayen 2: The "decision to deal with

address, which however, due to an administrative error, the so-called campaign management system so that the Applicant again received newsletters to his old

green, military with a background image of a hangar with an airplane (photo H hereinafter), three different ones, up close inside a vehicle dressed for the

6(1)(b) GDPR as the lawful basis for processing of personal data. In order to do so, the controller has to demonstrate that such “processing is necessary for

noticeboards so that everyone can use the recorded personal data . 10. In the conducted procedure, it was determined that the residential building in A.V.H. 12

they send her the full report of new??" - Sent by "Prevention" to "G.G.G., H.H.H., Human Resources..." on 19/11/2018: "As A.A.A. comments in the mail, it

use of the electronic mail system by the Applicant was not regulated, so the so-called “corporate e-mail account” used by the Applicant In the event that

LOPDGDD), on October 5, 2021, said claim was transferred to the party claimed, so that it proceeded to its analysis and inform this Agency in the period of

security of the data processed by the processor under Article 28(3)(a) and (h) GDPR. For these reasons, the responsibility of the security incident cannot

claimants 6). B.B.B. (hereinafter claimant 7). G.G.G. (hereinafter claimant 8). H.H.H. (hereinafter claimant 9). I.I.I. *** CHARGE.1 (hereinafter claimant 10)

change in address. The employer claimed that the complainant had failed to do so until he filed the complaint before the Hungarian DPA. Any requests by email