25 September 2025
… infringement of Articles 24(1), 25(1) and 32(1,2) of the GDPR.  In addition, the President of the Personal Data … the processing operations into line with the provisions of GDPR by:  implementing appropriate technical and … infringement of Articles 24(1), 25(1) and 32(1,2) of the GDPR.  In addition, the President of the Personal Data …
 
          1 July 2017
… of the Group’s respective regular business activities Pre-GDPR Yes … International Business Machines Corporation (IBM) …
 
          1 July 2011
… of the Group’s respective regular business activities Pre-GDPR Yes … Jacobs Douwe Egberts N.V. …
 
          1 July 2016
… of the Group’s respective regular business activities Pre-GDPR Yes … Merck Sharp & Dohme (MSD) …
 
          1 July 2016
… of the Group’s respective regular business activities. Pre-GDPR Yes … Merck & Co., Inc. (MSD) …
 
          1 July 2011
… of the Group’s respective regular business activities Pre-GDPR Yes … Fiserv, Inc. (First Data Corporation) …
 
          1 July 2011
… of the Group’s respective regular business activities Pre-GDPR Yes … Fiserv, Inc. (First Data Corporation) …
 
          1 July 2012
… of the Group’s respective regular business activities Pre-GDPR Yes … ABN AMRO Group N.V. …
 
          31 May 2022
… on the calculation of administrative fines under the GDPR 12 May 2022 Publication Type: Guidelines Topics: … of the Second Payment Services Directive (PSD2) and GDPR 30 May 2022 Publication Type: Letters Topics: Financial …
 
          1 July 2015
… of the Group’s respective regular business activities Pre-GDPR Yes … Simon-Kucher & Partners …
 
          1 July 2013
… of the Group’s respective regular business activities. Pre-GDPR Yes … ARDIAN(previously known as AXA PRIVATE EQUITY) …
 
          1 July 2017
… of the Group’s respective regular business activities. Pre-GDPR Yes … Marsh and McLennan Companies Inc. …
 
          1 July 2017
… of the Group’s respective regular business activities. Pre-GDPR Yes … Marsh and McLennan Companies Inc. …
 
          17 December 2021
… Legal basis (Article 6) Decision: Infringement of the GDPR, Order to establish procedures Key words: Credit Rating … Legal basis (Article 6) Decision: Infringement of the GDPR, Order to establish procedures Key words: Credit Rating …
 
          3 October 2022
… 32)                    Decision: in accordance with the GDPR Key words: sensitive data, health records, research   … 32)                    Decision: in accordance with the GDPR Key words: sensitive data, health records, research   …
 
          4 March 2022
… of personal data (Art. 5) Decision: Infringement of the GDPR and fine imposed Key words: Information Security, … of personal data (Art. 5) Decision: Infringement of the GDPR and fine imposed Key words: Information Security, …
 
          19 January 2022
… to support controllers to answer access requests in a GDPR compliant manner.” The Guidelines will be subject to … to support controllers to answer access requests in a GDPR compliant manner.” The Guidelines will be subject to …
 
          18 August 2020
… to processing for marketing purposes under Article 21 GDPR. However, the company did not comply with its … to processing for marketing purposes under Article 21 GDPR. However, the company did not comply with its …
 
          11 October 2024
… on issues relating to the request for an Art. 64(2) GDPR opinion on artificial intelligence ("AI") submitted to … on issues relating to the request for an Art. 64(2) GDPR opinion on artificial intelligence ("AI") submitted to …
 
          16 May 2019
… the relevant data breach as required by Art. 33 of the GDPR without providing a sufficient explanation of that …