Decision in the matter of TikTok Technology Limited made pursuant to Section 111 of the Data Protection Act, 2018 and Articles 60 and 65 of the General Data Protection Regulation
OSF Global Services
- Type of BCR
- Processor
- Categories of data subjects
- Employees and business contacts whose data are processed on-behalf of a controller
EDPBI:FR:OSS:D:2020:193
EDPBI:FR:OSS:D:2020:193
- CSA
-
-
de
-
fi
-
ie
-
it
-
hu
-
si
-
gb
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 13 (Information to be provided where personal data are collected from the data subject)
- Article 14 (Information to be provided where personal data have not been obtained from the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 32 (Security of processing)
- Relevant topics
- Outcome
- Compliance order
NOVARTIS
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
LEGRAND
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Suppliers
- Suppliers, service providers
EDPBI:AT:OSS:D:2022:424
EDPBI:AT:OSS:D:2022:424
- CSA
-
-
de
-
hu
-
- Main legal reference
- Article 6 (Lawfulness of processing)
- Article 7 (Conditions for consent)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 6 (Lawfulness of processing)
- Relevant topics
- Outcome
- Compliance order
- Dismissal/Rejection of the case
EDPBI:CY:OSS:D:2019:72
EDPBI:CY:OSS:D:2019:72
- CSA
-
-
DE/NI
-
DE SA (Rhineland-Palatinate)
-
es
-
fr
-
hu
-
no
-
- Main legal reference
- Article 13 (Information to be provided where personal data are collected from the data subject)
- Article 14 (Information to be provided where personal data have not been obtained from the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Compliance order
Guidelines 4/2019 on Article 25 Data Protection by Design and by Default
Go to Guidelines 4/2019 on Article 25 Data Protection by Design and by Default
Oregon Tool, Inc
- Type of BCR
- Processor
- Categories of data subjects
- Employees and business contacts whose data are processed on-behalf of a controller
Comcast Corporation Group
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Clients, customers
- Contractors
- Suppliers