Shopify
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
- Other third parties as part of the Group’s respective regular business activities
EDPBI:DE:OSS:D:2024:1594
EDPBI:DE:OSS:D:2024:1594
- CSA
-
-
de
-
nl
-
pt
-
se
-
it
-
no
-
hu
-
fr
-
ie
-
ee
-
lu
-
dk
-
pl
-
hr
-
be
-
lt
-
ro
-
sk
-
fi
-
es
-
at
-
- Main legal reference
- Article 4 (Definitions)
- Article 6 (Lawfulness of processing)
- Article 9 (Processing of special categories of personal data)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- Compliance order
- Erasure order
- Reprimand
- Temporary ban on data processing
Cerner
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Clients, customers
- Other third parties as part of the Group’s respective regular business activities
Guidelines 02/2026 on Anonymisation
Go to Guidelines 02/2026 on Anonymisation
EDPBI:EE:OSS:D:2024:1324
EDPBI:EE:OSS:D:2024:1324
- CSA
-
-
es
-
no
-
se
-
fr
-
de
-
nl
-
- Main legal reference
- Article 6 (Lawfulness of processing)
- Article 13 (Information to be provided where personal data are collected from the data subject)
- Article 14 (Information to be provided where personal data have not been obtained from the data subject)
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
Mastercard
- Type of BCR
- Processor
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
Guidelines 07/2020 on the concepts of controller and processor in the GDPR
Go to Guidelines 07/2020 on the concepts of controller and processor in the GDPR
EDPBI:SE:OSS:D:2025:1757
EDPBI:SE:OSS:D:2025:1757
- CSA
-
-
fi
-
pt
-
de
-
pl
-
no
-
be
-
nl
-
it
-
lu
-
dk
-
fr
-
hu
-
at
-
sk
-
si
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 13 (Information to be provided where personal data are collected from the data subject)
- Article 15 (Right of access by the data subject)
- Article 21 (Right to object)
- Relevant topics
- Outcome
- Reprimand
EDPBI:SE:OSS:D:2025:1738
EDPBI:SE:OSS:D:2025:1738
- CSA
-
-
at
-
dk
-
it
-
- Main legal reference
- Article 6 (Lawfulness of processing)
- Relevant topics
- Outcome
- Reprimand