The information on which the search is based has been translated by a computer system without human intervention. It may contain errors in vocabulary, syntax or grammar. The translation may also produce mistakes in the searches performed.
597 results were found
Communication on the outcome of an antigen test, for the detection of COVID-19, in the educational center where the complainant provides his services.
IP 164/2021
A private center communicated the result of an antigen test to the Health Department and this one, provided the said information to the educational center where the complainant provided his services. In this regard, Article 23 of Law 2/2021 of 29 March, on urgent measures for prevention, containment and coordination to deal with the health crisis caused by Covid-19 obliges establishments that carry out COVID-19 diagnostic tests to submit, on a daily basis, the results of the tests they carry out to the health authority and, in turn, Article 8.4 of Decree Law 41/2020, on extraordinary measures in the field of education to deal with the consequences of Covid-19, determines that the Health Department must communicate to the directors of educational centres, the health data corresponding to the results of the diagnostic tests. This being the case, it is appropriate to file the facts indicted since the communications concerned were carried out under Article 6.1 of the GDPR, in compliance with a legal obligation (in the case of the private laboratory), and in the exercise of public powers (in the case of the Ministry of Health). It should also be noted that, despite the notification of health data, the exceptions provided for in Article 9(2) and (i) of the GDPR would apply, which would allow the lifting of the ban on Article 9(1) of the GDPR.
07/02/2023
Access to municipal files containing personal data by a local elected person.
IP 133/2022
The City Council of Argentona reported that a councillor of the All per Argentona Municipal Group would have accessed the personal data contained in the pre-enrolment and enrolment files of the municipal nursery schools for the 2021-2022 year, would have collected the contact details of the families who would not have obtained a place for their children, and would have contacted them via Whatsapp with the aim of asking them for personal data and summoning them to a meeting and then submitting an application to the City Council. For its part, the Municipal Group refused to contact the families on the basis of the consultation of the file, and stated that contacts were initiated earlier and based on personal acquaintances and relationships. In this respect, since the Authority does not have evidence that the denounced municipal group collected the personal data of the controversial file and used it to contact different families, it is necessary to archive the facts that are involved here.
02/02/2023
Principle Request
IP 500/2021
The file of the complaint is agreed, since a rail agent, when detecting an infringement by tram users, can collect from the traveller the data relating to his or her DNI number, in order to extend a minimum perception bulletin. This is a lawful treatment, provided for in the rail regulations, which grants the status of agents of the authority to railway operators (Railway Law 4/2006).
02/02/2023
One school applied for the COVID-19 vaccination certificate of underage pupils.
IP 352/2021
Una madre denunció que la escuela había pedido que el primer día del curso escolar 2021-2022 aportaran el certificado de vacunación de covid-19 de su hijo menor de edad (de 12 años o más); que el dedo certificado también se pedía al personal de la escuela, y que la escuela tenía acceso a la aplicación informática Traçacovid. La denuncia se archiva porque, si bien se cierto que inicialmente la escuela se lo pidió, antes de iniciar el curso escolar comunicó a las madres y padres de alumnos que no lo aportaran (en base a una modificación de última hora del Plan de actuación para el curso 2021‐2022 para centros educativos en el marco de la pandemia); por otro lado, también se archiva porque no hay constancia que la escuela hubiera recogido ningún certificado de vacunación, y que la escuela negó tanto que requiriera el certificado a su personal, como haber accedido a la Traçacovid, y tampoco constan indicios. Además de los motivos de archivo, se concluye que el tratamiento de datos de salud por parte de los centros educativos por motivo de la gestión de los casos positivos de covid-19, estaría amparada por los 6.1.e) y 9.2.g) y y) del RGPD.
25/01/2023
Publish known data.
IP 268/2021
The complaint is archived, since the only personal data contained in the document published by the municipal government councillor through the Facebook wall on neighbourhood issues was the name and surname of the complainant as representative of a municipality entity. Information that the people’s neighbours, users of that social network, knew. In addition, this same information was accessible via the Internet, where it is published that the complainant is the president of that entity.
17/01/2023
Identification of the person denouncing by an agent of the urban guard of Lleida.
IP 331/2021
The complainant complained about the fact that certain GU agents asked him to identify, without this action - according to the complainant - being enabled by any rule. However, the police report provided by the City Council, signed by three agents, describes the events that occurred and justifies identification for the prevention of a major conflict on the road. In this respect, it should be concluded that the processing was necessary for the exercise of public powers conferred on the controller (art. 6.1 e) GDPR) in accordance with the Organic Law for the Protection of Citizen Safety, and therefore the file of the complaint proceeds. The complainant also complained that the Lleida City Council has a register of social activists. However, in the absence of sufficient indications, and given that the accused entity has denied these facts, his file is proceeded.
03/01/2023
Communication to the occupational risk prevention services of a private company, of people who did not have the full pattern of vaccination against COVID-19.
IP 267/2021
The Public Health Agency of Catalonia communicated to the Labour Risk Prevention Services of the Catalan company in which it provides services denouncing the list of staff who did not have the complete pattern of vaccination against COVID-19. This communication was carried out within the framework of a vaccination campaign by the Health Department. In this respect, the communication in question does not contravene data protection regulations, insofar as both occupational risk prevention regulations and public health regulations empower health authorities to establish mechanisms for collaboration with the occupational risk prevention services of private companies.
29/12/2022
Access to information on a worker's covid-19 vaccination status.
IP 329/2021
The Human Resources unit of a City Council ended up accessing, through its Occupational Risk Prevention Service, information on whether one of its workers had been inoculated with the 2nd dose of covid19.
16/12/2022
Access to information concerning the complainant to her sister, within the framework of a custody file for minors.
IP 236/2022
The complainant complained that Social Services would have provided her sister with information as part of a case for custody of minor children. It is dictated RA since the City Council acted in compliance with a mission of public interest, such as the protection of children, regulated by Law 12/2007, of Social Services. Specifically, as a risk situation had been detected, the complainant's sister was agreed to attend telephonely with the aim of exploiting the support that the family could offer and taking measures to reduce or eliminate the risk situation.
16/12/2022
Publication of the list of admitted to the selective internal promotion process.
IP 410/2021
The City Council published the list of admitted and excluded persons with identification of accepted candidates (name and surnames) in accordance with the applicable regulations and during the indispensable period to satisfy the purpose of advertising and notification, no violation of the data protection regulations is seen.
16/12/2022
Total number of pages: 60