GDPR-CARPA
- Scheme owner
- LU SA
- Scope
Any type of processing except:
personal data processing operations specifically targeting minors under 16 years old,
processing operations in the context of a joint controllership,
processing operations in the context of article 10 GDPR, except those that are clearly defined and regulated by Luxembourgish or European Laws and for which the CNPD is the competent supervisory authority (e.g. Loi du 1er août 2018 relative à la protection des personnes physiques à l’égard du traitement des données à caractère personnel en matière pénale ainsi qu’en matière de sécurité nationale),
processing operations of entities that have not officially designated a DPO* (article 37 GDPR). - Type of criteria
- National certification criteria
- Certification as tool for transfers
- No
- List of documents assessed by the EDPB
- LU SA – GDPR-CARPA Certification criteria-1.docx
EDPBI:SE:OSS:D:2023:710
EDPBI:SE:OSS:D:2023:710
- CSA
-
-
dk
-
fi
-
no
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Relevant topics
- Outcome
- Reprimand
Opinion 17/2018 Poland SAs DPIA List
Go to
Opinion 17/2018 Poland SAs DPIA List
Computers, Privacy and Data Protection - CPDP Brussels
Go to Computers, Privacy and Data Protection - CPDP Brussels
EDPBI:SE:OSS:D:2022:429
EDPBI:SE:OSS:D:2022:429
- CSA
-
-
ie
-
at
-
fi
-
ee
-
cz
-
dk
-
fr
-
de
-
hu
-
it
-
nl
-
pl
-
es
-
no
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Relevant topics
- Outcome
- Reprimand
Opinion 23/2023 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules for customer data of the UPS Group
Go to
Opinion 23/2023 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules for customer data of the UPS Group
EDPBI:AT:OSS:D:2020:121
EDPBI:AT:OSS:D:2020:121
- CSA
-
-
DE/BE
-
- Main legal reference
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 21 (Right to object)
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
EDPBI:SE:OSS:D:2022:366
EDPBI:SE:OSS:D:2022:366
- CSA
-
-
at
-
dk
-
de
-
it
-
fi
-
pl
-
- Main legal reference
- Article 15 (Right of access by the data subject)
- Relevant topics
- Outcome
- Reprimand
Jacobs Douwe Egberts N.V.
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
- Other third parties as part of the Group’s respective regular business activities