Resolutions, opinions and reports search tool

The claimant cannot access the name of the natural persons holding a tourist dwelling activity license associated with the registration number in the Tourism Register of Catalonia, but could be presented with anonymized information with a territorial aggregation level guaranteeing the non-identification of the persons concerned.

The principle of application is imposed. The transfer of the resolution involved communicating the identity of persons who were allegedly harassed and harassed; and, furthermore, some health data of the person who was harassed to the president of the trade union. Article 5.1.a) and 6.1 GDPR are being violated, as there is no legal basis for legitimisation. Furthermore, with regard to the communication of health data, Article 9.2 GDPR is also infringed.

From the perspective of data protection regulations, providing the information relating to the cases attended to the traffic units, aggregated by sex and age "year by year, and not by age ranges", offers sufficient guarantees to be able to an effective anonymization of the health data of the affected persons will be considered.

The communication of anonymized information from the Municipal Register to a public company for the development of a predictive tool in the field of social services would not require a legal basis to legitimize it, as the legislation does not apply in these cases of data protection. However, it is necessary to ensure that the anonymization process applied guarantees that the physical persons affected cannot be identified by third parties without disproportionate efforts, as well as to assess the risks of any subsequent re-identification of these persons and, where appropriate, adopt the appropriate measures to mitigate it.

The animal organization has the right to access the agreement that, if applicable, may have been established for the celebration of the event in which one of the participating equidae died; information on the veterinarians involved; the result of the research actions that have been carried out; and whether disciplinary proceedings have been instituted in respect of legal persons or, anonymously, in respect of natural persons. With regard to all the requested public information that does not contain personal data, there would be no inconvenience in delivering it.

The reasoned report examined may be in line with the concept of administrative resolution of public relevance for the sake of transparency. The LTC requires the anonymization of personal data in the publication and since, in this case, despite this, the affected persons could be identifiable, it would be acceptable to replace it with an anonymized summary of its purpose.

Given the regulatory provisions (art. 6.1.a), art. 9.2.a) RGPD, in connection with Additional Provision 17a of the LOPDGDD) the explicit consent of the data subjects could enable the processing of data. The study may also be carried out with pseudonymous data, in accordance with subparagraph (d) of the said Additional Provision 17a. In any case, the principles and guarantees established in the data protection regulations, the aforementioned additional provision 17 and, where applicable, the Biomedical Research Act must be complied with. The communication of anonymous and aggregated information on the results of the operation carried out by the Foundation to the business fabric of the region would not be contrary to data protection regulations.

The telephone number and e-mail address, as long as it can be directly or indirectly associated with an individual, are personal data whose processing must comply with the principles and guarantees of data protection regulations. The publication of data relating to the name of the establishment, the industrial address of the establishment, telephone number, e-mail address, website, direct link to the location on the map and geographical location coordinates of the companies registered in the RIAAC, may based on the consent of those affected. The dissemination of this data may also be based on the provisions of Articles 19.3 LOPDGDD and 6.4 RGPD, provided that the persons concerned are offered the possibility of requesting the exclusion of their company from the dissemination.

The proposed anonymization process would not guarantee the treatment of anonymous data within the Project to be developed by the University. However, the option of articulating the treatment on the basis of the explicit consent of the persons concerned could be considered, without prejudice to the adoption of appropriate measures to ensure that this treatment is in line with the RGPD, such as providing detailed and clear information in this regard, and applying the measures indicated in the opinion to make re-identification difficult.

Access to the images captured by the video surveillance system in relation to an accident at work by members of the Health and Safety Committee could be justified in certain cases, although, given the circumstances of the case analyzed, they should be facilitated. anonymized by being able to achieve in this way the purpose pursued. The person responsible for investigating the accident, however, could access it so that those affected are identifiable.