Resolutions, opinions and reports search tool

It resolves to sanction the City Council as responsible for three infringements: 1) lack of contract for the processor or equivalent document, 2) lack of information on the ends provided for in art.

It is decided to admonise the Department of Justice, Rights and Memory since, as of 02/02/2023, when the Organic Law 7/2021, on the protection of personal data processed in the enforcement of criminal sanctions, was already fully applicable, the Department did not provide the prison population with all the information provided for in art. In this regard, no corrective measures are required since, in the letter of allegations that the Department has submitted to the Authority, it claims to have updated the right of information it provides to the prison population when entering a prison, in accordance with the IT 7/2021. In this regard, the entity has provided a copy of the right of information signed by persons who have entered prison during February and March 2023, and it is noted that these are already adapted to the IT 7/2021.

The form of the application in paper format did not include all the information in Article 13 GDPR. The online application form included all the ends of Article 13 of the GDPR, although through a chain of links that made it unreachable and transparent.

The complaint is filed by the municipal police officer who complained that the City Council had not reported the video surveillance system installed in the City Hall and in the police station located inside it, and that images captured by the cameras were later used to open a disciplinary file. It has been noted that the City Council had installed the posters in the city hall and the police station's accesses, and that they reported on the purpose of the facility's safety. In this regard, the denouncing person's behaviour, captured by video surveillance cameras and leading to the initiation of a disciplinary file, is considered to imply a breach of his or her surveillance functions, and consequently to affect the security of the building.

The right to information of the users of the entity, due to lack of documentary accreditation at the time of collection (Articles 12, 13, and 14 GDPR); and due to violation of the principle of application, due to the improper use of the data, which consists of subjective and negative comments on a group of members who wish to submit their candidature.

It is decided to admonise the City Council of Tarragona since, in a call made by the person denouncing the Urban Guard of this City Council, he was collected personal data (name, surnames, DNI number and voice) and was not informed of the content provided in Article 13 GDPR. In addition, the city council is also credited with violating the principle of confidentiality since the Guardia Urbana informed the House denouncing that the "Seva Más" would have called, from the same home, to denounce the same facts. With regard to the collection of personal data, which the complainant considers excessive, it is appropriate to archive the facts since, according to the rules of administrative procedure, when a citizen submits a complaint, it must be identified.

The installation of a video surveillance system inside the classrooms of municipal kindergartens could be proportionate in the face of reasonable indications of the possible commission of a serious illegal act by a person working any of the children, exceptionally and for a limited time, and provided that information is provided in accordance with article 89 of the LOPDGDD. The person in charge, however, would not have sufficient legitimacy to install this system so that parents and/or legal guardians can view live images of the activities carried out by their children.

Asking why you are asking to use the diaper collection service is excessive. If the legal basis is consent, when providing the information to the data subject, information must be informed about the right to withdraw it at any time.

Dept. EDU, as the controller of the treatment, did not enforce the right of information when it collected the data of the relatives or legal tutors of the pupils attended at the UEC Girona of the Oscobe Foundation.

The processing of images by cameras for safety purposes is not based on the consent of the person concerned, but on the fulfilment of a mission in the public interest. Camera location should not be reported. The right to information is made effective by means of information posters on the existence of cameras, which must be supplemented by other means.