EDPBI:IT:OSS:D:2024:1538
EDPBI:IT:OSS:D:2024:1538
- CSA
-
-
at
-
be
-
de
-
hu
-
ie
-
lu
-
pl
-
es
-
se
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 6 (Lawfulness of processing)
- Article 8 (Conditions applicable to child’s consent in relation to information society services)
- Article 20 (Right to data portability)
- Relevant topics
- Outcome
- Definitive ban on data processing
- Reprimand
EDPBI:LU:OSS:D:2025:3637
EDPBI:LU:OSS:D:2025:3637
- CSA
-
-
fr
-
- Main legal reference
- Article 15 (Right of access by the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Article 6 (Lawfulness of processing)
- Article 7 (Conditions for consent)
- Relevant topics
- Outcome
- Other
Arcadis N.V.
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
- Other third parties as part of the Group’s respective regular business activities
EDPBI:ES:OSS:D:2025:3595
EDPBI:ES:OSS:D:2025:3595
- CSA
-
-
fr
-
it
-
pl
-
pt
-
- Main legal reference
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Dismissal/Rejection of the case
HEWLETT PACKARD ENTERPRISE
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
- Other third parties as part of the Group’s respective regular business activities
EDPBI:EE:OSS:D:2023:971
EDPBI:EE:OSS:D:2023:971
- CSA
-
-
es
-
si
-
- Main legal reference
- Article 6 (Lawfulness of processing)
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 13 (Information to be provided where personal data are collected from the data subject)
- Article 14 (Information to be provided where personal data have not been obtained from the data subject)
- Article 15 (Right of access by the data subject)
- Article 18 (Right to restriction of processing)
- Relevant topics
- Outcome
- No violation
BCD Travel
- Type of BCR
- Controller
- Categories of data subjects
- Employees
- Contractors
- Clients, customers
- Suppliers
- Suppliers, service providers
- Other third parties as part of the Group’s regular business activities
If I want to store CVs of candidates for future recruitment procedures, do I need to ask for the candidates’ consent?
Go to If I want to store CVs of candidates for future recruitment procedures, do I need to ask for the candidates’ consent?
EDPBI:DE:OSS:D:2024:1135
EDPBI:DE:OSS:D:2024:1135
- CSA
-
-
pl
-
fr
-
si
-
ee
-
it
-
es
-
no
-
gr
-
dk
-
se
-
lv
-
DE SA (Rhineland-Palatinate)
-
DE/NI
-
DE SA (Bavaria)
-
- Main legal reference
- Article 5 (Principles relating to processing of personal data)
- Article 12 (Transparent information, communication and modalities for the exercise of the rights of the data subject)
- Article 17 (Right to erasure (‘right to be forgotten’))
- Relevant topics
- Outcome
- Compliance order
- Reprimand