Resolutions, opinions and reports search tool

It is appropriate to warn the City Council, since it did not duly inform about the treatment of images captured by video surveillance cameras installed in the control points of access to restricted traffic areas, since, apart from the information contained in the information posters, in the complementary information that was available on the website of the consistory, the City Council did not inform about the right to file a claim provided to this Authority, and all extremes

The City Council should be reprimanded for 1) capturing images of public roads through the video surveillance camera system located on container islands that were not closed or delimited; and 2) process the images captured by this video surveillance system located on public roads, to exercise the sanctioning power against residents of the municipality. There is a medial concurrence between both infractions, but only the main infraction should be sanctioned, which is the violation of the principle of legality regarding the installation of a video surveillance system on public roads.

A City Council is reprimanded as being responsible for an infraction due to violation of the principle of legality, for having sent to an inspector of the Generalitat-Mossos d'Esquadra police force two instances with personal data without legal basis, specifically, before the opening of confidential information against the reporting agent, and without there being a real danger to public safety or the investigation and prosecution of a crime.

The claim for disregard of the right to delete data contained in shared folders in the workplace, to which the claimant now has no access, and which include personal emails, is estimated.

The City Council of Sant Boi de Llobregat is admonished as responsible for an infringement provided for in Article 83.5.a in relation to Article 5.1.f, both of the GDPR, for sending an email to numerous people without using the hidden copy tool.

The right to data protection would not prevent the claimant from accessing the requested public information that only contains aggregated data. Likewise, in view of the concurrent circumstances in the specific case, it would be justified to release pseudonymized information on the distribution of cases among the lawyers assigned to the TOAD, with an indication of the associated incidences, as well as on the invoices presented by these lawyers, for the period between 2018 and 2022. However, the information on the persons assisted by the TOAD lawyers that may be included would have to be omitted, in any case.

There is no element that allows to accredit the commission of an infringement of the data protection regulations by the bar association, the only data of the address of the complainant who has registered, and that the bar association provided to the Consejo General de la Abogacía Espa'ola (CGAE) is the one that the same person denouncing them in the moment of registration, without any modification.

Data protection regulations do not prevent the claimant from having access to information concerning public employees who had intervened in the various previous research actions and disciplinary proceedings processed between 2020 and 2022, both of which have been resolved and who have not participated in the irregular conduct, unless there are exceptional circumstances. However, in accordance with the fundamentals that have been laid down, access to the files can be facilitated through the anonymisation mechanism or, where this measure is not effective, through a summary of the files, so that in no case are the natural persons concerned (people investigated and, if applicable, complainants or witnesses) identifiable.

The claimant requested the deletion of their data from the City Council's electronic headquarters, since it had already far exceeded the purpose for which they were initially authorized, collected and processed, and for this purpose requested the withdrawal of their data from any physical or digital support for which the entity was responsible. The claim of tutelage formulated by the claimant against the City Council is estimated, without making any other pronouncement or any requirement regarding the fund since the right of the claimant has been made effective.

It is resolved to declare that the City Council of Sant Andreu de Llavaneres has violated Article 83.4, in relation to Article 35; both of the RGPD, since it has not carried out the necessary impact assessment to assess the risks associated with the processing of personal data carried out within the framework of the provision of the waste collection service "port to door".