In the decision of August 8, 2018, GZ: DSBD084.133/0002-DSB/2018, the DPA had dealt with the conditions under which the data protection authority may require data controllers to submit a declaration pursuant to Art. 34 para. 1 of the GDPR, the data subject must be informed of this fact. The person in charge reported to the… […]
File inspection
According to the Supreme Court, the right to data protection must be observed in the assessment pursuant to Section 219 of the Code of Civil Procedure (inspection of files). If the protection of personal data of a natural person is affected, the scope of protection granted by the GDPR must be specifically considered. Specifically, it… […]
Customer bonus program: No right to delete certain data
In its decision dated July 23, 2019, GZ DSBD123.822/0005-DSB/2019, the Austrian data protection authority had to deal with the question of whether there is a right to have certain data deleted as part of a customer bonus program. The respondent is a retail company that operates a customer rewards program. The complainant participated in this… […]
Works councils must comply with data protection
According to the decision of the Federal Labor Court, works councils are obligated to data protection The employer is obliged to allow the works committee to inspect the non-anonymized gross remuneration lists. It is true that the inspection at issue is aimed at personal data. However, this is permissible. The court reasoned its decision as… […]
Right to information – The Federal Administrative Court has ruled
On December 10, 2018, the Federal Administrative Court issued a far-reaching decision regarding the right to information. The subject of the proceedings was the effort that companies have to make in order to comply with requests for data information from data subjects. The court’s decision will have far-reaching consequences for data processing companies. Previous story… […]