Konstatuojamoji dalis 22 📖 BDAR

Konstatuojamoji dalis 22

Recital 22

(22) bet koks asmens duomenų tvarkymas, kai asmens duomenis Sąjungoje vykdydama savo veiklą tvarko duomenų valdytojo arba duomenų tvarkytojo buveinė, turėtų vykti pagal šį reglamentą, neatsižvelgiant į tai, ar pati tvarkymo operacija atliekama Sąjungoje.

Buveinė reiškia, kad per stabilias struktūras vykdoma veiksminga ir reali veikla.

Teisinė tokių struktūrų forma, neatsižvelgiant į tai, ar tai filialas ar patronuojamoji bendrovė, turinti juridinio asmens statusą, tuo požiūriu nėra lemiamas veiksnys;

(22) Any processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union should be carried out in accordance with this Regulation, regardless of whether the processing itself takes place within the Union.

Establishment implies the effective and real exercise of activity through stable arrangements.

The legal form of such arrangements, whether through a branch or a subsidiary with a legal personality, is not the determining factor in that respect.

Europos Sąjungos Bendrasis duomenų apsaugos reglamentas (BDAR)

General Data Protection Regulation (EU GDPR)

The latest consolidated version of the Regulation with corrections by Corrigendum, OJ L 127, 23.5.2018, p. 2 ((EU) 2016/679). Source: EUR-lex.

Susijusių straipsnių Palikite komentarą

Susijusių straipsnių

3 straipsnis Teritorinė taikymo sritis

Article 3 Territorial scope

Jungtys

Guidelines 3/2018 on the territorial scope of the GDPR (Article 3)

“An establishment in the Union”

Before considering what is meant by “an establishment in the Union” it is first necessary to identify who is the controller or processor for a given processing activity. According to the definition in Article 4(7) of the GDPR, controller means “the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data”. A processor, according to Article 4(8) of the GDPR, is “a natural or legal person, public authority, 6 Adopted agency or other body which processes personal data on behalf of the controller”. As established by relevant CJEU case law and previous WP29 opinion, the determination of whether an entity is a controller or processor for the purposes of EU data protection law is a key element in the assessment of the application of the GDPR to the personal data processing in question.

Palikite komentarą

[js-disqus]