search

… / 4 Recitals 16 and 20 of / state: ‘(16) This Regulation does not apply to issues of protection of fundamental rights and freedoms or the free flow of personal data related to activities which fall outside the scope of Union law, such as activities concerning national security. …

… the meaning of Article 4(7) of / and consequently, Article 15 of that regulation is, in this instance, applicable. 74 It follows from all the foregoing that Article 4(7) of / must be interpreted as meaning that, in so far as a Petitions Committee of the parliament of a Federated State of a Member State determines, alone or with others, the purposes and means of the processing of personal data, that committee must be categorised as a ‘controller’, within the meaning …

… /], in particular [its] Article 15, [headed “Right of access by the data subject”], applicable to the committee of a parliament of a Federated State of a Member State that is responsible for dealing with the petitions of citizens - in this case the Petitions Committee of the Parliament of Land Hessen - and is that committee to be regarded in that connection as a public authority within the meaning of Article 4(7) of /? …

… Where there is a justified objection, the processing in question may no longer involve those data; …’ (EU) / 4 Article 21 of (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ 2016 L 119, p. 1), headed ‘Right to object’, provides, in paragraph 1 thereof …

… / and, more generally, the right of every individual to the protection of personal data concerning them, enshrined in Article 8 of the Charter, his second request, dated 6 September 2018, was based on four legal bases, namely (i) the right to object provided for in Article 21(1) of /, or its equivalent provided for in Article 18(a) of Regulation No 45/2001, (ii) the principle of equal treatment, enshrined in Article 20 of the Charter, (iii) Article 8(2) of the Charter, which …

… two incorrect premisses. 21 In the first place, the appellant claims that paragraphs 12 and 13 of the order under appeal are based on the premiss that his emails of 6 January 2017 and of 6 September 2018 asking the Court of Justice of the European Union to act had the same legal basis, namely Article 8 of the Charter, which is incorrect. 22 The appellant claims, in this regard, that, while the legal basis of his first request, dated 6 January 2017, was the right to object under Article 21(1) of …

… In the context of the case in the main proceedings, the data requested by Constantin Film Verleih are, by definition, personal data within the meaning of Article 2(a) of Directive 95/46/EC, (16) now Article 4(a) of (EU) /, (17) since they must enable Constantin Film Verleih to identify the persons concerned. (18) 56. …

… /. 10 See Article 94(1) of /. 11 See judgment of 1 October 2019, Planet49 (C-673/17, EU:C:2019:801, paragraphs 38 to 43) for a similar approach in a comparable situation and my Opinion in the same case (C-673/17, EU:C:2019:246, points 44 to 49). …

… Article 7(1) of / is clear and leaves no room for doubt: when processing is based on consent, it is for the controller to demonstrate that the data subject has consented to processing of his or her data (30). This provision constitutes a specification of the principle of accountability, enshrined in Article 5(2) of /. …

… In other words, that criterion of an unambiguous indication has simply been moved to the more general provision in /. 40. Secondly, Article 4(11) of / specifies that the data subject manifest himself ‘by a statement or by a clear affirmative action’. This clarification is indeed new to the regulation and is not semantically mirrored in Directive 95/46. 41. …

… Directive 95/46 was repealed with effect from 25 May 2018 by /. Consequently, in so far as Directive 2002/58 refers to Directive 95/46 or does not lay down rules of its own, account must be taken of the provisions of that regulation (see Article 94(1) and (2) of /). 17 Judgment in Tele2 Sverige and Watson, paragraphs 82 and 83. 18 Ibidem, paragraph 85 and the case-law cited. 19 Ibidem, paragraph 87. …

… . 124. …

… It differs from the latter, however, with respect to the objectives pursued by the national legislation, which, in this instance, are not only the fight against terrorism and the most serious forms of crime and the safeguarding of national security, but also ‘defence of the territory, public security [and] the investigation, detection and prosecution of offences other than serious crime’, as well as, generally, any of the objectives provided for in Article 23(1) of /. 23. …

… Article 23 of No / makes provision - in line with Article 15(1) of Directive 2002/58- for restricting, by way of a legislative measure, the rights and obligations established by the regulation, where necessary in order to safeguard, among other objectives, national security, defence or public security. …

… Once again, if the protection of those objectives were sufficient grounds for exemption from the scope of application of No /, there would be no need to invoke national security as grounds for introducing legislative measures to restrict the rights guaranteed by that regulation.’ 3. The consequences of applying the Tele2 Sverige and Watson judgment to this case 35. …

… Once again, if the protection of those objectives were sufficient grounds for exemption from the scope of application of /, there would be no need to invoke national security as grounds for introducing legislative measures to restrict the rights guaranteed by that regulation. 90. …

… Article 23 of / makes provision - in line with Article 15(1) of Directive 2002/58 - for restricting, by way of a legislative measure, the rights and obligations established by the regulation, where necessary in order to safeguard, among other objectives, national security, defence or public security. …

… (EU) / (13) 12. In accordance with Article 2 (‘Material scope’): ‘1. This Regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system. 2. …

… Article 4(1) of (EU) / (57) provides that ‘an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person’. 129. …

… ., Digitaleurope (request for a preliminary ruling from the High Court, Ireland) (Reference for a preliminary ruling - Protection of natural persons with regard to the processing of personal data - (EU) / - Article 2(2) - Scope - Transfer of personal data for commercial purposes to the United States of America - Processing by the United States of America’s public authorities for national security purposes of the data transferred - Article 45 - Assessment of the adequacy of the level …

… Legal context EU law 3 Directive 95/46 was repealed and replaced, with effect from 25 May 2018, by (EU) / of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (OJ 2016 L 119, p. 1). …