Blog

Spain: Hotel fined for using photos of the IDs of their guests

March 21, 2022Pablo Pérez LayaBDKnowledge, Blog, Data Protection and Privacy, European Union, Legal basis for processing, Proportionality

In a recent decision, the Spanish Data Protection Authority (Agencia Española de Protección de Datos – “AEPD“) fined Marins Playa, S.A. (“Marins Playa“), a provider...

Key points from EDPB’s guidelines on the right of access

March 9, 2022Pablo Pérez LayaBlog, Data Protection and Privacy, Data subject's rights, European Union

Arts. 12 and 15 of the EU Data Protection Regulation (EU) 2016/679 (“GDPR“) regulate the right of access (“RoA“). This right consists of three main...

Spain: Amazon Road Transport fined for requesting criminal records from job candidates

February 25, 2022Pablo Pérez LayaBackground checks, BDKnowledge, Blog, Data Protection and Privacy, Employment, European Union, Legal basis for processing, Proportionality

On 11 February 2022, the Spanish Data Protection Authority (Agencia Española de Protección de Datos) fined Amazon Road Transport Spain, S.L. (“Amazon RT“) EUR 2,000,000,...

Planning for merger control process in Serbia, Montenegro and Bosnia and Herzegovina

January 6, 2022Tijana KojovićBDKnowledge, Blog, Competition, Merger Control

Low notification thresholds Competition laws of Serbia, Montenegro and Bosnia and Herzegovina have notoriously low merger control notification thresholds. In all three jurisdictions, it is...

Serbian state aid watchdog issues its first recovery order

November 10, 2021Tijana KojovićBDKnowledge, Blog, Competition, State aid

The first recovery order since the enactment of the Serbian State Aid Control Act was issued on 1 November 2021. It directs the Ministry of...

Law firm as a data controller: careful with the disclosure of sensitive data

October 26, 2021Jelena BrajkovićBDKnowledge, Blog, Controller and processor, Data Protection and Privacy, Special categories of data

On 22 September 2021, the Icelandic data protection authority (“Persónuvernd“) issued a ruling against a law firm, Magna Lögmanna ehf (“Magna“), in which it determined...

CNIL refuses to let Monsanto off the hook

September 10, 2021Anja GligorevićBDKnowledge, Blog, Controller and processor, Data Protection and Privacy, Data subject's rights, European Union

On 26 July 2021, the French Data Protection Authority (“CNIL“) issued a fine of EUR 400,000 against Monsanto, leading company in the field of agricultural...

Supervisory authority and court disagree on freedom of expression vs. data protection

May 20, 2021Anja GligorevićBDKnowledge, Blog, Data Protection and Privacy

On 20 November 2020, the Austrian Federal Administrative Court issued a judgement. Contrary to the decision of the Data Protection Authority (“DPA“), the Court found...

How far can a data controller go in relying on “legal obligation” (GDPR Art. 6.1(c))?

April 13, 2021Bogdan Ivanišević and Stefan ĐurovićBDKnowledge, Blog, Data Protection and Privacy, Data subject's rights, European Union, Proportionality, Retention

The Arnhem-Leeuwarden Court of Appeal, in the Netherlands, recently issued a decision concerning compliance with a legal obligation as legal basis for data processing (Article...

1 … 3 4 5 6 7 … 25

Spain: Hotel fined for using photos of the IDs of their guests

Key points from EDPB’s guidelines on the right of access

Spain: Amazon Road Transport fined for requesting criminal records from job candidates

Planning for merger control process in Serbia, Montenegro and Bosnia and Herzegovina

Serbian state aid watchdog issues its first recovery order

Law firm as a data controller: careful with the disclosure of sensitive data

CNIL refuses to let Monsanto off the hook

Supervisory authority and court disagree on freedom of expression vs. data protection

How far can a data controller go in relying on “legal obligation” (GDPR Art. 6.1(c))?

ARCHIVE

BDK Serbia

BDK Montenegro

BDK Bosnia and Herzegovina