ISS Group
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
EDPBI:EE:OSS:D:2025:3470
EDPBI:EE:OSS:D:2025:3470
- CSA
-
-
fi
-
fr
-
hu
-
lv
-
pl
-
pt
-
sk
-
es
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
EDPBI:FR:OSS:D:2022:479
EDPBI:FR:OSS:D:2022:479
- CSA
-
-
de
-
ie
-
be
-
pt
-
se
-
no
-
it
-
ro
-
dk
-
pl
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Relevant topics
- Outcome
- Reprimand
EDPBI:DE:OSS:D:2020:87
EDPBI:DE:OSS:D:2020:87
- CSA
-
-
at
-
be
-
es
-
fr
-
ie
-
pl
-
pt
-
gb
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Reprimand
EDPBI:SE:OSS:D:2025:3682
EDPBI:SE:OSS:D:2025:3682
- CSA
-
-
at
-
dk
-
ee
-
fi
-
fr
-
hu
-
ie
-
it
-
nl
-
pl
-
es
-
no
-
de
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Reprimand
France SAs list of the kind of processing operations which are subject to the requirement for a Data Protection Impact Assessment under Article 35(4) of the General Data Protection Regulation (EU) 2016/679 (GDPR)
EDPBI:IE:OSS:D:2023:745
EDPBI:IE:OSS:D:2023:745
- CSA
-
-
at
-
be
-
bg
-
hr
-
cy
-
cz
-
dk
-
ee
-
fi
-
fr
-
de
-
gr
-
hu
-
it
-
lv
-
lt
-
lu
-
mt
-
nl
-
pl
-
pt
-
ro
-
sk
-
si
-
es
-
se
-
no
-
is
-
li
-
- Main legal reference
- Article 17 (Right to erasure (‘right to be forgotten’))
- Outcome
- Amicable settlement
EDPBI:IE:OSS:D:2022:548
EDPBI:IE:OSS:D:2022:548
- CSA
-
-
at
-
be
-
bg
-
hr
-
cy
-
cz
-
dk
-
ee
-
fi
-
fr
-
de
-
gr
-
hu
-
it
-
lv
-
lt
-
lu
-
mt
-
nl
-
pl
-
pt
-
ro
-
sk
-
si
-
es
-
se
-
no
-
is
-
li
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 15 (Right of access by the data subject)
- Article 16 (Right to rectification)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing)
- Relevant topics
- Outcome
- Amicable settlement
Equinor (previously known as Statoil ASA)
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Clients, customers