Nascleanúint
RGCS (GDPR) > Aithris 36
Íoslódáil PDF

Aithris 36

Recital 36

(36) Ba cheart gurb é an áit a bhfuil a riarachán lárnach san Aontas ag rialaitheoir príomhbhunaíocht an rialaitheora san Aontas, murar i mbunaíocht eile de chuid an rialaitheora san Aontas a ghlactar na cinntí maidir le críocha agus modhanna phróiseáil na sonraí pearsanta, agus sa chás sin ba cheart an bhunaíocht eile sin a mheas mar an phríomhbhunaíocht.

Ba cheart príomhbhunaíocht de chuid rialaitheora san Aontas a chinneadh de réir critéir oibiachtúla agus, tríd an gcinneadh sin, ba cheart a thabhairt le tuiscint gur inti a dhéantar feidhmiú éifeachtach agus iarbhír na ngníomhaíochtaí bainistíochta lena ndéantar na príomhchinntí maidir le críocha agus modhanna na próiseála trí shocruithe cobhsaí.

Níor cheart don chritéar sin a bheith ag brath ar cibé an ndéantar an phróiseáil ar shonraí pearsanta ag an áit sin.

Má tá modhanna teicniúla agus teicneolaíochtaí ann agus in úsáid chun sonraí pearsanta a phróiseáil nó chun gníomhaíochtaí próiseála a dhéanamh, ní hionann sin is a rá gur príomhbhunaíocht an áit sin agus, dá bhrí sin, ní critéir chinntitheacha iad sin maidir le príomhbhunaíocht.

Ba cheart an áit ina bhfuil a riarachán lárnach san Aontas príomhbhunaíocht an phróiseálaí nó, mura bhfuil aon riarachán lárnach aige san Aontas, ba cheart gurbh í an áit ina ndéantar na príomhghníomhaíochtaí próiseála san Aontas.

I gcásanna a bhaineann leis an rialaitheoir agus leis an bpróiseálaí araon, ba cheart gurb é an príomhúdarás inniúil maoirseachta i gcónaí údarás maoirseachta an Bhallstáit ina bhfuil a phríomhbhunaíocht ag an rialaitheoir, ach ba cheart údarás maoirseachta an phróiseálaí a mheas mar údarás maoirseachta lena mbaineann agus ba cheart don údarás maoirseachta sin a bheith rannpháirteach sa nós imeachta comhair dá bhforáiltear sa Rialachán seo.

In aon chás, níor cheart údaráis mhaoirseachta an Bhallstáit nó na mBallstát ina bhfuil bunaíocht amháin nó níos mó ag an bpróiseálaí a mheas mar na húdaráis mhaoirseachta lena mbaineann.

I gcás inar leis an rialaitheoir amháin a bhaineann an dréachtchinneadh.

I gcás ina ndéanann grúpa gnóthas an phróiseáil, ba cheart príomhbhunaíocht an ghnóthais rialaithigh a mheas mar phríomhbhunaíocht an ghrúpa gnóthas, seachas i gcás ina gcinneann gnóthas eile na críocha agus na modhanna próiseála.

(36) The main establishment of a controller in the Union should be the place of its central administration in the Union, unless the decisions on the purposes and means of the processing of personal data are taken in another establishment of the controller in the Union, in which case that other establishment should be considered to be the main establishment.

The main establishment of a controller in the Union should be determined according to objective criteria and should imply the effective and real exercise of management activities determining the main decisions as to the purposes and means of processing through stable arrangements.

That criterion should not depend on whether the processing of personal data is carried out at that location.

The presence and use of technical means and technologies for processing personal data or processing activities do not, in themselves, constitute a main establishment and are therefore not determining criteria for a main establishment.

The main establishment of the processor should be the place of its central administration in the Union or, if it has no central administration in the Union, the place where the main processing activities take place in the Union.

In cases involving both the controller and the processor, the competent lead supervisory authority should remain the supervisory authority of the Member State where the controller has its main establishment, but the supervisory authority of the processor should be considered to be a supervisory authority concerned and that supervisory authority should participate in the cooperation procedure provided for by this Regulation.

In any case, the supervisory authorities of the Member State or Member States where the processor has one or more establishments should not be considered to be supervisory authorities concerned where the draft decision concerns only the controller.

Where the processing is carried out by a group of undertakings, the main establishment of the controlling undertaking should be considered to be the main establishment of the group of undertakings, except where the purposes and means of processing are determined by another undertaking.