Resolutions, opinions and reports search tool

The data protection regulations do not prevent the complainant from communicating the information he requests, regarding access to his clinical history, including the identity of the professionals, rank and professional category, who have accessed it.

Consent may be a legal basis for the processing of biometric data for the purpose of time control, provided that it constitutes a manifestation of free, specific, informed and unambiguous will on the part of the data subject to accept the processing, in the terms stated. In any case, before processing such as that provided for in the consultation, an impact assessment on data protection must be carried out in view of the specific circumstances in which the processing is carried out where, among other things, the application of the processing is analysed.

On the basis of the information that the city council has provided for consultation, data protection regulations would not prevent access to the number of disciplinary files initiated in 2022. However, in the event that the applicant is interested in accessing other information that exceeds the number of disciplinary proceedings initiated, the City Council must analyse the possibility of access according to the categories of personal data concerned, taking into consideration the grounds that have been set out.

Data protection regulations would not allow the trade union delegate to access a copy of the payrolls of the work staff affected by the application for access. However, it is possible to communicate the information contained in payrolls in an aggregate way, so as to ensure that they are not identified.

El tratamiento de los datos necesarios para la realización de las pruebas de los procesos de selección de personal, incluidas los datos de salud de los participantes, tiene como base jurídica el cumplimiento de una misión en interés público y el cumplimiento de obligaciones específicas de las administraciones competentes establecidas por la normativa de función pública. La grabación de las pruebas psicotécnicas requiere, además de su previsión en las correspondientes bases de las convocatorias (con la concreción y determinación de las garantías específicas necesarias), la realización previa de una AIPD. No parece que la base jurídica del consentimiento sea adecuado para legitimar el tratamiento de los datos de los aspirantes a un proceso selectivo con la finalidad descrita, dado que no se puede considerar que en el caso planteado pudiera haber un consentimiento realmente libre, ni la posibilidad de establecer medios alternativos que garantizaran el principio de igualdad que tiene que regir los procedimientos selectivos.

The Foundation could send an e-mail reporting on the training it will give this summer to its pupils on the legal basis of legitimate interest, provided that the information is limited to the training programme examined and is addressed exclusively to the pupils of up to 35 years of vocational training cycles, who should be given the option of opposing receiving communications of this kind.

Data protection regulations do not prevent access to purely identifying data from professionals who have drafted the reports, or appear in the documentation requested for the performance of their duties. However, in accordance with the fundamentals that have been laid down, with regard to information relating to categories of data that are especially protected, in particular data relating to the health of residents, access must be provided through an extract or summary of the reports issued by the primary care centre, so that the physical persons concerned are not identifiable.

Access by the bodies representing public workers to the remuneration information of these people on a case-by-case basis will be conditional upon the applicable legislative provisions and concurrent circumstances in the specific case. University workers' committee members on the negotiating Commission for the Equality Plan must be able to access the information in the Retributive Register, which must comply with the terms of Article 28.2 of the ET, despite having professional categories with a small number of workers, while remaining those obliged to respect the confidentiality of the information obtained, as well as the principle of purpose.

The claimant, as holder of parental authority, exercised the right of access to the documentation presented by his underage daughter, which contained data from third parties affected who opposed the processing of data derived from the application for access, which is why the Department dismissed the request for access made by the claimant. The complaint is partially estimated as the Department responded to the request in an extemporaneous manner.

The complaint is partially appreciated, since the Directorate General of Police of the Department of the Interior did not respond in time to the request of the complainant, without it being appropriate to require any action, insofar as the DGP gave a reply adjusted to the right of request, albeit temporarily.