Resolutions, opinions and reports search tool

Data protection regulations do not regulate the processing of personal data relating to legal persons, therefore it would not prevent the person from being able to submit the requested information relating to legal persons. However, data protection regulations do not allow access to the name of the establishments where the actions have been carried out, by the requested body in the specified period or other information that allows the physical persons holding the actions to be identified, albeit indirectly, (including individual entrepreneurs).

The Agency is admonished as being responsible for a serious breach of security measures because its main website did not implement a secure website authentication protocol (HTTPS).

In accordance with the provisions of Law 13/2015, in relation to data protection regulations, the continuous recording of students' images in virtual training actions in order to be accredited to the Data Protection Service is not proportional. 'Occupation of Catalonia the assistance of the students to the formative actions realized in the frame of the system of employment of Catalonia. The recording of images and voices of teachers in training actions in order to have teaching materials in order to disseminate and use them in other training, could find authorization in article 6.1.b) of the RGPD if it were a treatment necessary for the execution of the contract they have signed. Otherwise, it will be necessary to have the specific consent of the teachers, or another of the legal bases established in article 6.1 of the RGPD. In any case, it will be necessary to adopt the appropriate technical and organizational measures taking into account the risks arising from the treatment.

It cannot be discarded that in this case the cession of data between two public administrations with competences on the subject of social services could be fitted out by the article 21 of the LOPD. However, the concurrent circumstances in the examined supposition and the suitable guarantee upward to the protection of data lead to considering as better option that the Department informs the persons with disability registered in the town of the possibility of taking part in the electoral process in the Ruling Council of the autonomous organization premises.

In the examined case, the access to the complete report of the selective process requested by a citizen could not be authorized, given the supposed purpose and the whole of personal information that could be evident there, between which, data related with the health of one of the participants. Yes, however, the headings of the made tests, the sheets of the answers considered correct, if they exist, as well as the three tests better appraised of every exercise could be facilitated. In this last case, it would be necessary to make it dissociation of the particulars of the candidates previous (identificatives and punctuation) and check that of the facilitated information it will not be possible to carry out an individualized identification of the author candidate of each test.

The adequacy of communicating to the representatives of the workers analyzes the information contained in the model of "Description of the job" subjected to consultation. Determined information can be part of the RLT, or refer to characteristics, circumstances or remunerations linked to the job, and not to the physical person and, therefore, to communicate. The information related to the "professional profile of the job" can mean, indirectly, the elaboration of a profile of the person who occupies a job in a determinate moment, so that it would be necessary to the information of this "profile" that can be known through the RLT to limit the communication. Regarding the "indicators about the environment of the job", if they allow, for its degree of concretion or detail, the elaboration of a profile of the person who occupies a job, it would be necessary to avoid the communication.