BT Group Plc.
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
EDPBI:MT:OSS:D:2021:212
EDPBI:MT:OSS:D:2021:212
- CSA
-
-
es
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 24 (Responsibility of the controller)
- Relevant topics
- Outcome
- Compliance order
- Reprimand
Opinion 22/2023 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules for employee data of the UPS Group
Go to
Opinion 22/2023 on the draft decision of the Belgian Supervisory Authority regarding the Controller Binding Corporate Rules for employee data of the UPS Group
Coordinated Enforcement Framework
Go to Coordinated Enforcement Framework
EDPBI:IE:OSS:D:2024:1571
EDPBI:IE:OSS:D:2024:1571
- CSA
-
-
at
-
be
-
bg
-
hr
-
cy
-
cz
-
dk
-
ee
-
fi
-
fr
-
de
-
gr
-
hu
-
it
-
lv
-
lt
-
lu
-
mt
-
nl
-
pl
-
pt
-
ro
-
sk
-
si
-
se
-
no
-
is
-
li
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Article 7 (Conditions for consent)
- Article 8 (Conditions applicable to child’s consent in relation to information society services)
- Relevant topics
- Outcome
- Amicable settlement
Deutsche Telekom
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
- Other third parties as part of the Group’s respective regular business activities
Opinion 13/2019 on the draft list of the competent supervisory authority of France regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR)
Go to
Opinion 13/2019 on the draft list of the competent supervisory authority of France regarding the processing operations exempt from the requirement of a data protection impact assessment (Article 35(5) GDPR)
EDPBI:DK:OSS:D:2021:238
EDPBI:DK:OSS:D:2021:238
- CSA
-
-
no
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
Merck Sharp & Dohme (MSD)
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
- Other third parties as part of the Group’s respective regular business activities