The information on which the search is based has been translated by a computer system without human intervention. It may contain errors in vocabulary, syntax or grammar. The translation may also produce mistakes in the searches performed.
136 results were found for your search terms Data minimization principle
Participation in a university study.
PS 71/2020
Although the communication of student data carried out by the institute may be based on one of the legal bases that legitimize the treatment, it is necessary to respect the other principles provided for by the RGPD, such as the principle of minimization. In application of the minimization principle, student data can only be communicated to the research group if the data is necessary to achieve the intended research purpose.
22/02/2022
Participation in a university study
PS 70/2020
Although the data communication of the students made by the institute may be based on one of the legal bases that legitimize the treatment, the other principles provided by the GDPR, such as the principle of minimization, must be respected.
22/02/2022
Recordings with cameras on the outside of a microweapon.
PS 50/2021
A city council is admonished as responsible for 4 infringements: 1) to capture images of the public track through cameras installed outside the micro-weapon, disproportionately (the public pathway was captured beyond what is required); 2) to use images captured for security purposes to identify the person who had not correctly deposited a residue; 3) Because the RAT does not include all prescriptive information and contains inaccurate information; and 4) To not fully inform the persons concerned.
01/02/2022
Implementation of a doors to door system of waste collection
CNS 60/2021
Choosing the most appropriate selective collection model in the municipality requires an impact assessment on data protection. The City Council, in view of the powers it has been assigned in matters of waste management, would be entitled to carry out the processing of data arising from the implementation of the selective collection system. However, in the absence of a specific legal provision, the development of profiles that produce legal effects on the person using the service or that significantly affect them in a similar way, requires the explicit consent of the persons affected. The participation of third parties in the implementation of this system requires the formalization of a contract of manager and, where applicable, of sub-manager, as well as, where applicable, the fulfillment of the obligations established in this regard in the LCSP.
01/02/2022
Security and legal validity of a video call identification system in administrative procedures
CNS 59/2021
It is not for this Authority to define the means by which citizens can be identified by electronic means in administrative procedures, nor to determine whether an identification system can reliably guarantee the identity of the applicant. A system of identification of the interested parties that collects together with the data of the DNI or identification document of the interested party his image and voice, can have like legal base the exercise of public powers conferred to the person in charge of the treatment in relation to the functions identification of those interested in the procedure provided for in the administrative procedure regulations. If specific technical means are used that allow the unambiguous identification or authentication of an individual, it will involve the processing of biometric data and therefore special categories of data. In order for this data processing to be lawful and in accordance with data protection regulations, it must have the valid consent of the data subject and comply with the other principles of the RGPD, including the principle of minimization, so that, given the specific circumstances of the procedure or procedures in which it is intended to be applied, it passes the judgment of proportionality.
24/01/2022
Communication of information related to training activities
CNS 54/2021
The communication of information on the trainers to impart the formative action to companies and organizing entities, limited to the identifying data, of contact and of training or experience, would be lawful and would adjust to the principle of minimization of data, to be necessary both for the execution of the contract and for the fulfillment of legal obligations. In addition, the competent authorities may require the information related to the training action necessary to control the execution and application of the bonus by the companies. With the information available, it does not seem justified to communicate information relating to the data relating to the user and password for access to the virtual classroom assigned to students in the training activity, nor those relating to the professional situation of the training staff or responsible for the activity.
18/01/2022
Identification of the person presenting the COVID certificate
CNS 57/2021
The requirement of the COVID certificate in the terms set out and which have been authorized by the Superior Court of Justice of Catalonia, cannot be considered contrary to the regulations for the protection of personal data. Likewise, when this certificate is required, the requirement to show the front of the DNI for the purposes of verifying identity is compatible and provided in accordance with personal data protection regulations.
18/01/2022
Report in relation to the Project of decree about the official recognition of Catalan communities in the exterior
PD 15/2021
17/11/2021
Access the complaints writings of the working classmates of the person requesting access.
PT 45/2021
When the right of access is exercised, the person concerned has the right to obtain information about the origin of their data - which means access to the identity of the people who made the complaints - unless it is proven that opposition to access is based on a particular situation, which has not been proven here. Since the right of access cannot adversely affect the rights and freedoms of others, the claim regarding access to the claims, opinions or explanations made by these people, linked or related to their own working situation, or to their mood, psychological or physical.
13/09/2021
Possibility to publish the telephones and the addresses of electronic mail in the web of the Department
CNS 36/2021
The telephone number and e-mail address, as long as it can be directly or indirectly associated with an individual, are personal data whose processing must comply with the principles and guarantees of data protection regulations. The publication of data relating to the name of the establishment, the industrial address of the establishment, telephone number, e-mail address, website, direct link to the location on the map and geographical location coordinates of the companies registered in the RIAAC, may based on the consent of those affected. The dissemination of this data may also be based on the provisions of Articles 19.3 LOPDGDD and 6.4 RGPD, provided that the persons concerned are offered the possibility of requesting the exclusion of their company from the dissemination.
06/09/2021
- SECTORIAL AREA
- Agriculture
- TRANSFER OR DISCLOSURE OF DATA
- Public administration
- Autonomous community administration
- PERSONAL DATA
- Anonymised data
- Identification data
- Pseudonomized data
- Data of the representative of a legal entity
- ENTITIES
- Public administration
- Autonomous community administration
- PRINCIPLES
- Accurate principle
- Lawfulness principle
- Consent
- Legitimate interest
- In the public interest or in the exercise of official authority
- Legal obligation
- Data minimization principle
Total number of pages: 14