European Data Protection Board logo
Close menu

Rechercher

  • 845 results found for: ‘pay or consent’
Filter on
Filter on topic
Filter on type

EDPBI:SE:OSS:D:2025:3682

Final One Stop Shop Decision
se
CSA
  • at
  • dk
  • ee
  • fi
  • fr
  • hu
  • ie
  • it
  • nl
  • pl
  • es
  • no
  • de
Main legal reference
Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
Article 15 (Right of access by the data subject)
Article 17 (Right to erasure (‘right to be forgotten’))
Relevant topics
Outcome
Reprimand

France SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)

Black list
fr

EDPBI:IE:OSS:D:2023:745

Final One Stop Shop Decision
ie
CSA
  • at
  • be
  • bg
  • hr
  • cy
  • cz
  • dk
  • ee
  • fi
  • fr
  • de
  • gr
  • hu
  • it
  • lv
  • lt
  • lu
  • mt
  • nl
  • pl
  • pt
  • ro
  • sk
  • si
  • es
  • se
  • no
  • is
  • li
Main legal reference
Article 17 (Right to erasure (‘right to be forgotten’))
Outcome
Amicable settlement

Equinor (previously known as Statoil ASA)

Binding Corporate Rules
no
Type of BCR
Controller
Categories of data subjects
Employees
Clients, customers

EDPBI:SE:OSS:D:2025:3476

Final One Stop Shop Decision
se
CSA
  • dk
  • fi
  • it
  • pl
  • no
  • de
  • DE (Baden-Wüerttemberg)
  • DE SA (Bavaria)
  • DE/BE
  • DE/BB
  • DE/HB
  • DE/HH
  • DE SA (Hessen)
  • DE/NI
  • DE/MV
  • DE SA (North Rhine-Westphalia)
  • DE SA (Rhineland-Palatinate)
  • DE/SL
  • DE/SN
  • DE/ST
  • DE/SH
  • DE/TH
Main legal reference
Article 5 (Principles relating to processing of personal data)
Article 6 (Lawfulness of processing)
Relevant topics
Outcome
Dismissal/Rejection of the case

EDPBI:FR:OSS:D:2023:795

Final One Stop Shop Decision
fr
CSA
  • lu
Main legal reference
Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
Article 13 (Information to be provided where personal data are collected from the data subject)
Article 5 (Principles relating to processing of personal data)
Article 17 (Right to erasure (‘right to be forgotten’))
Article 28 (Processor)
Article 30 (Records of processing activities)
Article 32 (Security of processing)
Relevant topics
Outcome
Compliance order
Reprimand

Croatia SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)

Black list
hr
Related links
Opinion 25/2018 on the draft list of the competent supervisory authority of Cro…