0A4F4F9BD490A749D5437F821CF06DF1
General Privacy/Data Protection Guidelines
https://www.cpdp.bg/index.php?p=element&aid=1163
http://leaux.net/URLS/ConvertAPI Text Files/43C437351DF2CB15D7FEDA5525AA6222.en.txt
Examining the file media/Synopses/43C437351DF2CB15D7FEDA5525AA6222.html:
This file was generated: 2020-07-14 08:00:55
| Indicators in focus are typically shown highlighted in yellow; |
Peer Indicators (that share the same Vulnerability association) are shown highlighted in pink; |
"Outside" Indicators (those that do NOT share the same Vulnerability association) are shown highlighted in green; |
Trigger Words/Phrases are shown highlighted in gray. |
Link to Orphaned Trigger Words (Appendix (Indicator List, Indicator Peers, Trigger Words, Type/Vulnerability/Indicator Overlay)
Applicable Type / Vulnerability / Indicator Overlay for this Input
Political / political affiliation
Searching for indicator party:
(return to top)
p.(None): Menu ≡
p.(None): Home »CPDP Practical Guidelines in Which Cases No Consent Is Required for the Processing of Personal Data
p.(None): CPDP Practical Guidelines in which cases consent to the processing of personal data is not required
p.(None): The processing of personal data by data controllers, both in the public and in the private sphere, is legal, if any legal information is available.
p.(None): the grounds, exhaustively listed in Art. 6 (1) of Regulation (EU) 2016/679 (General Data Protection Regulation, CPD, GDPR):
p.(None): (a) the data subject has consented to the processing of his personal data for one or more specific purposes;
p.(None): (b) processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject
p.(None): before the conclusion of the contract;
p.(None): (c) processing is necessary to comply with a legal obligation that applies to the controller;
p.(None): (d) processing is necessary to protect the vital interests of the data subject or of another individual;
p.(None): (e) processing is necessary for the fulfillment of a public interest task or for the exercise of official powers conferred on
p.(None): the administrator;
p.(None): (f) processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests have an advantage
p.(None): the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular when the data subject is a child.
p.(None): Consent is one of the reasons for collecting and processing personal data. Despite the fact that it is mentioned in the first place, it is important to know that everyone
p.(None): the legal bases are alternative and equal and they are not hierarchically dependent. The presence of any of them makes the processing
p.(None): legally, provided that the other requirements of the Regulation are complied with.
p.(None): Where a data controller decides whether to process personal data on the basis of consent, he or she must investigate the circumstance.
p.(None): whether there is another legal basis for processing them, such as a legal obligation or contract, and what would be the consequences for
p.(None): the relevant activity upon withdrawal of consent from the person.
p.(None): Some of the most common situations where the controller should not seek the consent of the person to process his or her personal data are the following:
p.(None): 1. Administrator - public or private, collects a certain amount of personal data in the performance of a duty under a law, e.g.
p.(None): by virtue of the Health Act, the Accountancy Act, the Administrative Offenses and Sanctions Act, the Labor Code,
p.(None): The Social Security Code, the Ministry of the Interior Act, the Civil Registration Act, the Law on Social Security
...
p.(None): In these cases, the legislator did not leave the discretion of the controller or the data subject, resulting in the possible consent of the person
p.(None): will not be freely given, respectively, will not be valid. This is especially true for public administrators, as well as for sectors where there is a detailed legal framework
p.(None): regulation, such as healthcare, education, banking, etc.
p.(None): 2. Personal data shall be collected in connection with the provision of various administrative services by public authorities or bodies
p.(None): local government.
p.(None): In these cases, the legal basis is the fulfillment of a public interest task or the exercise of official powers and the requisite consent of the persons
p.(None): is unnecessary.
p.(None): 3. Personal data shall be collected and processed for employment purposes.
p.(None): In these cases, the employee has no genuine free choice and is unable to refuse or withdraw his / her consent without leading to
p.(None): its adverse effects due to the apparent inequality between the two countries. In addition, the relationships between data subjects and theirs
p.(None): employers or appointing authorities, including with regard to the processing of personal data, are fully regulated by the employment
p.(None): legislation, individual and / or collective agreements. In these circumstances, the condition for the lawfulness of the processing of personal data is
p.(None): a legal obligation and / or performance of a contract (depending on the hypothesis).
p.(None): 4. Personal data are necessary for the conclusion and performance of a contract to which the data subject is a party.
p.(None): Insofar as the main object and purpose of the contract cannot be objectively achieved without providing a certain amount of personal data, in these cases it is sufficient
p.(None): the willingness of the parties to enter into contractual or pre-contractual relations and, accordingly, no separate consent is required for the processing of personal data.
p.(None): This does not preclude the consent being used as a legal basis for the processing of personal information (contact details, etc.) for additional purposes,
p.(None): such as marketing and advertising, unless a regulation provides a justification for it. In these cases, the requirement to obtain consent may be waived,
p.(None): if the requirements laid down in the relevant regulatory act are fulfilled. It's important to know that the administrator has no right to bind the performance of a contract,
p.(None): including the provision of a service, with the consent to the processing of personal data, where this is not necessary for the performance of the contract, such as
p.(None): such as receiving promotional messages. In these cases, consent will not be given freely as the person has no real free choice and is not able to
p.(None): refuse or withdraw its consent without adversely affecting it.
p.(None): 5. Personal data are necessary to protect the legitimate interests of the controller or of a third party, if such interests have
p.(None): an advantage over the interests and / or fundamental rights and freedoms of the person.
p.(None): Such hypotheses in practice are the taking of security and security measures, including through video surveillance, verification of persons and registration of access to
p.(None): buildings, actions to ensure information and network security, etc.
p.(None): There is also a legitimate interest in the processing of personal data for the protection of the rights of the controller through a judicial or non-judicial procedure, for example, filing a claim for
p.(None): failure to perform a contract or claim liability for damages.
p.(None): 6. Personal data are transferred from one controller to another as a result of transfer of receivables (cession).
p.(None): In these cases, the legal basis for the processing of personal data is the fulfillment of the legal obligation under Art. 99, para 3 of the Law on Obligations and Contracts.
p.(None): The law obliges the previous lender to submit to the new lender the documents in his possession establishing the claim. This circumstance also determines
p.(None): the transmission of personal data insofar as they are contained in the relevant documents. Upon receipt of the claim, the new creditor may process the data of
p.(None): grounds its legitimate interest in collecting the amount due, including in the order of enforcement. The assignment should not be overlooked
p.(None): to the previous creditor to notify the debtor of the transfer, which also corresponds to the obligation of transparency and to provide information within the meaning of
p.(None): The general regulation.
p.(None): 7. Personal data shall be transmitted by the controller of the processing personal data.
...
Searching for indicator political:
(return to top)
p.(None): occupational medicine, debt collection companies, IT companies that maintain information systems of companies and agencies, etc.
p.(None): In all these cases, the General Regulation does not require the consent of the data subject to the processing of personal data, such as
p.(None): the discretion is left entirely to the administrator.
p.(None): 8. Specific hypothesis of processing personal data without requiring the consent of the data subject
p.(None): video recording of persons in a public place.
p.(None): If it is carried out by an individual in the course of purely personal pursuits, then the General Regulation shall not apply at all. In case the recording is part of
p.(None): professional activity, then the exceptions and reliefs for academic, artistic or literary expression under Art. 85 of the Armed Forces.
p.(None): The provision of Art. 13 of the Copyright and Related Rights Act, according to which the photographer (videographer) does not require consent
p.(None): by the depicted person, if the image was taken in the course of the public activity of the depicted person or in a public or public place, the image
p.(None): the face is just a detail in a work showing an assembly, procession, or landscape, or the depicted person has been paid to pose.
p.(None): 9. In cases where special categories of (sensitive) personal data, such as ethnic origin, are processed,
p.(None): political views, religious beliefs, union membership, biometrics, health status, sexual
p.(None): orientation, etc., the grounds for legality are specified in Art. 9 (2) of the CPD.
p.(None): In this regard, the processing of health data is legal, if carried out for the purposes of preventive or occupational medicine, for
p.(None): assessment of the employee's work capacity, medical diagnosis, provision of health and social care, treatment, management of healthcare systems
p.(None): or social care, in the field of public health, to protect against serious cross-border threats to health, etc. Therefore, if the processing is
p.(None): necessary for any of these purposes, the hospital, laboratory or pharmacy concerned has neither the obligation nor the right to request additional express
p.(None): consent of the person (patient). The opposite would mean that the hospital would refuse treatment or the drug store if the person did not consent. Like
p.(None): conduct would constitute a direct violation of the General Regulation, which may be penalized by a fine or a pecuniary penalty.
p.(None): Example non-exhaustive list of cases where consent is not required:
p.(None): In accordance with these criteria, as a rule, no separate consent is required from persons, including the signing of any form of declaration, for
p.(None): the processing of their personal data by the administrators listed below in the course of their normal professional activities. This does not include personal processing
p.(None): direct marketing data, where consent should be the leading ground.
p.(None): - doctors, dentists and pharmacists;
p.(None): - lawyers;
p.(None): - employers;
p.(None): - public authorities (state and municipal);
p.(None): - educational establishments (kindergartens, schools and higher education institutions);
p.(None): - banks and other credit institutions;
p.(None): - insurers;
p.(None): - undertakings providing public electronic communications networks and / or services;
p.(None): - courier companies and other postal operators;
p.(None): - utilities providing utilities (electricity distribution companies, plumbing, district heating);
p.(None): - processing personal data (accountants, occupational health services, etc.);
p.(None): - hoteliers and travel agencies;
p.(None): - condominium managers (homeowners);
p.(None): - copying services;
p.(None): - translators;
p.(None): - journalists, photographers and videographers;
p.(None): - religious, political, social and trade union organizations;
p.(None): - and other.
p.(None): print
p.(None): Links Sitemap Accessibility
p.(None): Personal Data Protection Commission, Sofia 1592, “Prof. Tsvetan Lazarov ”№ 2
...
Health / Drug Usage
Searching for indicator drug:
(return to top)
p.(None): by the depicted person, if the image was taken in the course of the public activity of the depicted person or in a public or public place, the image
p.(None): the face is just a detail in a work showing an assembly, procession, or landscape, or the depicted person has been paid to pose.
p.(None): 9. In cases where special categories of (sensitive) personal data, such as ethnic origin, are processed,
p.(None): political views, religious beliefs, union membership, biometrics, health status, sexual
p.(None): orientation, etc., the grounds for legality are specified in Art. 9 (2) of the CPD.
p.(None): In this regard, the processing of health data is legal, if carried out for the purposes of preventive or occupational medicine, for
p.(None): assessment of the employee's work capacity, medical diagnosis, provision of health and social care, treatment, management of healthcare systems
p.(None): or social care, in the field of public health, to protect against serious cross-border threats to health, etc. Therefore, if the processing is
p.(None): necessary for any of these purposes, the hospital, laboratory or pharmacy concerned has neither the obligation nor the right to request additional express
p.(None): consent of the person (patient). The opposite would mean that the hospital would refuse treatment or the drug store if the person did not consent. Like
p.(None): conduct would constitute a direct violation of the General Regulation, which may be penalized by a fine or a pecuniary penalty.
p.(None): Example non-exhaustive list of cases where consent is not required:
p.(None): In accordance with these criteria, as a rule, no separate consent is required from persons, including the signing of any form of declaration, for
p.(None): the processing of their personal data by the administrators listed below in the course of their normal professional activities. This does not include personal processing
p.(None): direct marketing data, where consent should be the leading ground.
p.(None): - doctors, dentists and pharmacists;
p.(None): - lawyers;
p.(None): - employers;
p.(None): - public authorities (state and municipal);
p.(None): - educational establishments (kindergartens, schools and higher education institutions);
p.(None): - banks and other credit institutions;
p.(None): - insurers;
p.(None): - undertakings providing public electronic communications networks and / or services;
p.(None): - courier companies and other postal operators;
p.(None): - utilities providing utilities (electricity distribution companies, plumbing, district heating);
p.(None): - processing personal data (accountants, occupational health services, etc.);
p.(None): - hoteliers and travel agencies;
p.(None): - condominium managers (homeowners);
p.(None): - copying services;
p.(None): - translators;
p.(None): - journalists, photographers and videographers;
...
Social / Access to Social Goods
Searching for indicator access:
(return to top)
p.(None): This does not preclude the consent being used as a legal basis for the processing of personal information (contact details, etc.) for additional purposes,
p.(None): such as marketing and advertising, unless a regulation provides a justification for it. In these cases, the requirement to obtain consent may be waived,
p.(None): if the requirements laid down in the relevant regulatory act are fulfilled. It's important to know that the administrator has no right to bind the performance of a contract,
p.(None): including the provision of a service, with the consent to the processing of personal data, where this is not necessary for the performance of the contract, such as
p.(None): such as receiving promotional messages. In these cases, consent will not be given freely as the person has no real free choice and is not able to
p.(None): refuse or withdraw its consent without adversely affecting it.
p.(None): 5. Personal data are necessary to protect the legitimate interests of the controller or of a third party, if such interests have
p.(None): an advantage over the interests and / or fundamental rights and freedoms of the person.
p.(None): Such hypotheses in practice are the taking of security and security measures, including through video surveillance, verification of persons and registration of access to
p.(None): buildings, actions to ensure information and network security, etc.
p.(None): There is also a legitimate interest in the processing of personal data for the protection of the rights of the controller through a judicial or non-judicial procedure, for example, filing a claim for
p.(None): failure to perform a contract or claim liability for damages.
p.(None): 6. Personal data are transferred from one controller to another as a result of transfer of receivables (cession).
p.(None): In these cases, the legal basis for the processing of personal data is the fulfillment of the legal obligation under Art. 99, para 3 of the Law on Obligations and Contracts.
p.(None): The law obliges the previous lender to submit to the new lender the documents in his possession establishing the claim. This circumstance also determines
p.(None): the transmission of personal data insofar as they are contained in the relevant documents. Upon receipt of the claim, the new creditor may process the data of
p.(None): grounds its legitimate interest in collecting the amount due, including in the order of enforcement. The assignment should not be overlooked
p.(None): to the previous creditor to notify the debtor of the transfer, which also corresponds to the obligation of transparency and to provide information within the meaning of
p.(None): The general regulation.
p.(None): 7. Personal data shall be transmitted by the controller of the processing personal data.
p.(None): The general regulation allows controllers to attract a "data processor" - natural or legal person, public body, agency or other
p.(None): a structure that processes personal data on behalf of the controller. One of the most common hypotheses of personal data processing is accounting firms,
...
Social / Child
Searching for indicator child:
(return to top)
p.(None): CPDP Practical Guidelines in which cases consent to the processing of personal data is not required
p.(None): The processing of personal data by data controllers, both in the public and in the private sphere, is legal, if any legal information is available.
p.(None): the grounds, exhaustively listed in Art. 6 (1) of Regulation (EU) 2016/679 (General Data Protection Regulation, CPD, GDPR):
p.(None): (a) the data subject has consented to the processing of his personal data for one or more specific purposes;
p.(None): (b) processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject
p.(None): before the conclusion of the contract;
p.(None): (c) processing is necessary to comply with a legal obligation that applies to the controller;
p.(None): (d) processing is necessary to protect the vital interests of the data subject or of another individual;
p.(None): (e) processing is necessary for the fulfillment of a public interest task or for the exercise of official powers conferred on
p.(None): the administrator;
p.(None): (f) processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests have an advantage
p.(None): the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular when the data subject is a child.
p.(None): Consent is one of the reasons for collecting and processing personal data. Despite the fact that it is mentioned in the first place, it is important to know that everyone
p.(None): the legal bases are alternative and equal and they are not hierarchically dependent. The presence of any of them makes the processing
p.(None): legally, provided that the other requirements of the Regulation are complied with.
p.(None): Where a data controller decides whether to process personal data on the basis of consent, he or she must investigate the circumstance.
p.(None): whether there is another legal basis for processing them, such as a legal obligation or contract, and what would be the consequences for
p.(None): the relevant activity upon withdrawal of consent from the person.
p.(None): Some of the most common situations where the controller should not seek the consent of the person to process his or her personal data are the following:
p.(None): 1. Administrator - public or private, collects a certain amount of personal data in the performance of a duty under a law, e.g.
p.(None): by virtue of the Health Act, the Accountancy Act, the Administrative Offenses and Sanctions Act, the Labor Code,
p.(None): The Social Security Code, the Ministry of the Interior Act, the Civil Registration Act, the Law on Social Security
p.(None): tourism, the Pre-school and School Education Act, etc.
p.(None): In these cases, the legislator did not leave the discretion of the controller or the data subject, resulting in the possible consent of the person
...
Social / Ethnicity
Searching for indicator ethnic:
(return to top)
p.(None): a structure that processes personal data on behalf of the controller. One of the most common hypotheses of personal data processing is accounting firms,
p.(None): occupational medicine, debt collection companies, IT companies that maintain information systems of companies and agencies, etc.
p.(None): In all these cases, the General Regulation does not require the consent of the data subject to the processing of personal data, such as
p.(None): the discretion is left entirely to the administrator.
p.(None): 8. Specific hypothesis of processing personal data without requiring the consent of the data subject
p.(None): video recording of persons in a public place.
p.(None): If it is carried out by an individual in the course of purely personal pursuits, then the General Regulation shall not apply at all. In case the recording is part of
p.(None): professional activity, then the exceptions and reliefs for academic, artistic or literary expression under Art. 85 of the Armed Forces.
p.(None): The provision of Art. 13 of the Copyright and Related Rights Act, according to which the photographer (videographer) does not require consent
p.(None): by the depicted person, if the image was taken in the course of the public activity of the depicted person or in a public or public place, the image
p.(None): the face is just a detail in a work showing an assembly, procession, or landscape, or the depicted person has been paid to pose.
p.(None): 9. In cases where special categories of (sensitive) personal data, such as ethnic origin, are processed,
p.(None): political views, religious beliefs, union membership, biometrics, health status, sexual
p.(None): orientation, etc., the grounds for legality are specified in Art. 9 (2) of the CPD.
p.(None): In this regard, the processing of health data is legal, if carried out for the purposes of preventive or occupational medicine, for
p.(None): assessment of the employee's work capacity, medical diagnosis, provision of health and social care, treatment, management of healthcare systems
p.(None): or social care, in the field of public health, to protect against serious cross-border threats to health, etc. Therefore, if the processing is
p.(None): necessary for any of these purposes, the hospital, laboratory or pharmacy concerned has neither the obligation nor the right to request additional express
p.(None): consent of the person (patient). The opposite would mean that the hospital would refuse treatment or the drug store if the person did not consent. Like
p.(None): conduct would constitute a direct violation of the General Regulation, which may be penalized by a fine or a pecuniary penalty.
p.(None): Example non-exhaustive list of cases where consent is not required:
p.(None): In accordance with these criteria, as a rule, no separate consent is required from persons, including the signing of any form of declaration, for
...
Social / Property Ownership
Searching for indicator home:
(return to top)
p.(None): Menu ≡
p.(None): Home »CPDP Practical Guidelines in Which Cases No Consent Is Required for the Processing of Personal Data
p.(None): CPDP Practical Guidelines in which cases consent to the processing of personal data is not required
p.(None): The processing of personal data by data controllers, both in the public and in the private sphere, is legal, if any legal information is available.
p.(None): the grounds, exhaustively listed in Art. 6 (1) of Regulation (EU) 2016/679 (General Data Protection Regulation, CPD, GDPR):
p.(None): (a) the data subject has consented to the processing of his personal data for one or more specific purposes;
p.(None): (b) processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject
p.(None): before the conclusion of the contract;
p.(None): (c) processing is necessary to comply with a legal obligation that applies to the controller;
p.(None): (d) processing is necessary to protect the vital interests of the data subject or of another individual;
p.(None): (e) processing is necessary for the fulfillment of a public interest task or for the exercise of official powers conferred on
p.(None): the administrator;
p.(None): (f) processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests have an advantage
...
Social / Religion
Searching for indicator religious:
(return to top)
p.(None): occupational medicine, debt collection companies, IT companies that maintain information systems of companies and agencies, etc.
p.(None): In all these cases, the General Regulation does not require the consent of the data subject to the processing of personal data, such as
p.(None): the discretion is left entirely to the administrator.
p.(None): 8. Specific hypothesis of processing personal data without requiring the consent of the data subject
p.(None): video recording of persons in a public place.
p.(None): If it is carried out by an individual in the course of purely personal pursuits, then the General Regulation shall not apply at all. In case the recording is part of
p.(None): professional activity, then the exceptions and reliefs for academic, artistic or literary expression under Art. 85 of the Armed Forces.
p.(None): The provision of Art. 13 of the Copyright and Related Rights Act, according to which the photographer (videographer) does not require consent
p.(None): by the depicted person, if the image was taken in the course of the public activity of the depicted person or in a public or public place, the image
p.(None): the face is just a detail in a work showing an assembly, procession, or landscape, or the depicted person has been paid to pose.
p.(None): 9. In cases where special categories of (sensitive) personal data, such as ethnic origin, are processed,
p.(None): political views, religious beliefs, union membership, biometrics, health status, sexual
p.(None): orientation, etc., the grounds for legality are specified in Art. 9 (2) of the CPD.
p.(None): In this regard, the processing of health data is legal, if carried out for the purposes of preventive or occupational medicine, for
p.(None): assessment of the employee's work capacity, medical diagnosis, provision of health and social care, treatment, management of healthcare systems
p.(None): or social care, in the field of public health, to protect against serious cross-border threats to health, etc. Therefore, if the processing is
p.(None): necessary for any of these purposes, the hospital, laboratory or pharmacy concerned has neither the obligation nor the right to request additional express
p.(None): consent of the person (patient). The opposite would mean that the hospital would refuse treatment or the drug store if the person did not consent. Like
p.(None): conduct would constitute a direct violation of the General Regulation, which may be penalized by a fine or a pecuniary penalty.
p.(None): Example non-exhaustive list of cases where consent is not required:
p.(None): In accordance with these criteria, as a rule, no separate consent is required from persons, including the signing of any form of declaration, for
p.(None): the processing of their personal data by the administrators listed below in the course of their normal professional activities. This does not include personal processing
p.(None): direct marketing data, where consent should be the leading ground.
p.(None): - doctors, dentists and pharmacists;
p.(None): - lawyers;
p.(None): - employers;
p.(None): - public authorities (state and municipal);
p.(None): - educational establishments (kindergartens, schools and higher education institutions);
p.(None): - banks and other credit institutions;
p.(None): - insurers;
p.(None): - undertakings providing public electronic communications networks and / or services;
p.(None): - courier companies and other postal operators;
p.(None): - utilities providing utilities (electricity distribution companies, plumbing, district heating);
p.(None): - processing personal data (accountants, occupational health services, etc.);
p.(None): - hoteliers and travel agencies;
p.(None): - condominium managers (homeowners);
p.(None): - copying services;
p.(None): - translators;
p.(None): - journalists, photographers and videographers;
p.(None): - religious, political, social and trade union organizations;
p.(None): - and other.
p.(None): print
p.(None): Links Sitemap Accessibility
p.(None): Personal Data Protection Commission, Sofia 1592, “Prof. Tsvetan Lazarov ”№ 2
...
Social / Soldier
Searching for indicator armedXforces:
(return to top)
p.(None): the transmission of personal data insofar as they are contained in the relevant documents. Upon receipt of the claim, the new creditor may process the data of
p.(None): grounds its legitimate interest in collecting the amount due, including in the order of enforcement. The assignment should not be overlooked
p.(None): to the previous creditor to notify the debtor of the transfer, which also corresponds to the obligation of transparency and to provide information within the meaning of
p.(None): The general regulation.
p.(None): 7. Personal data shall be transmitted by the controller of the processing personal data.
p.(None): The general regulation allows controllers to attract a "data processor" - natural or legal person, public body, agency or other
p.(None): a structure that processes personal data on behalf of the controller. One of the most common hypotheses of personal data processing is accounting firms,
p.(None): occupational medicine, debt collection companies, IT companies that maintain information systems of companies and agencies, etc.
p.(None): In all these cases, the General Regulation does not require the consent of the data subject to the processing of personal data, such as
p.(None): the discretion is left entirely to the administrator.
p.(None): 8. Specific hypothesis of processing personal data without requiring the consent of the data subject
p.(None): video recording of persons in a public place.
p.(None): If it is carried out by an individual in the course of purely personal pursuits, then the General Regulation shall not apply at all. In case the recording is part of
p.(None): professional activity, then the exceptions and reliefs for academic, artistic or literary expression under Art. 85 of the Armed Forces.
p.(None): The provision of Art. 13 of the Copyright and Related Rights Act, according to which the photographer (videographer) does not require consent
p.(None): by the depicted person, if the image was taken in the course of the public activity of the depicted person or in a public or public place, the image
p.(None): the face is just a detail in a work showing an assembly, procession, or landscape, or the depicted person has been paid to pose.
p.(None): 9. In cases where special categories of (sensitive) personal data, such as ethnic origin, are processed,
p.(None): political views, religious beliefs, union membership, biometrics, health status, sexual
p.(None): orientation, etc., the grounds for legality are specified in Art. 9 (2) of the CPD.
p.(None): In this regard, the processing of health data is legal, if carried out for the purposes of preventive or occupational medicine, for
p.(None): assessment of the employee's work capacity, medical diagnosis, provision of health and social care, treatment, management of healthcare systems
p.(None): or social care, in the field of public health, to protect against serious cross-border threats to health, etc. Therefore, if the processing is
p.(None): necessary for any of these purposes, the hospital, laboratory or pharmacy concerned has neither the obligation nor the right to request additional express
...
Social / Trade Union Membership
Searching for indicator union:
(return to top)
p.(None): In all these cases, the General Regulation does not require the consent of the data subject to the processing of personal data, such as
p.(None): the discretion is left entirely to the administrator.
p.(None): 8. Specific hypothesis of processing personal data without requiring the consent of the data subject
p.(None): video recording of persons in a public place.
p.(None): If it is carried out by an individual in the course of purely personal pursuits, then the General Regulation shall not apply at all. In case the recording is part of
p.(None): professional activity, then the exceptions and reliefs for academic, artistic or literary expression under Art. 85 of the Armed Forces.
p.(None): The provision of Art. 13 of the Copyright and Related Rights Act, according to which the photographer (videographer) does not require consent
p.(None): by the depicted person, if the image was taken in the course of the public activity of the depicted person or in a public or public place, the image
p.(None): the face is just a detail in a work showing an assembly, procession, or landscape, or the depicted person has been paid to pose.
p.(None): 9. In cases where special categories of (sensitive) personal data, such as ethnic origin, are processed,
p.(None): political views, religious beliefs, union membership, biometrics, health status, sexual
p.(None): orientation, etc., the grounds for legality are specified in Art. 9 (2) of the CPD.
p.(None): In this regard, the processing of health data is legal, if carried out for the purposes of preventive or occupational medicine, for
p.(None): assessment of the employee's work capacity, medical diagnosis, provision of health and social care, treatment, management of healthcare systems
p.(None): or social care, in the field of public health, to protect against serious cross-border threats to health, etc. Therefore, if the processing is
p.(None): necessary for any of these purposes, the hospital, laboratory or pharmacy concerned has neither the obligation nor the right to request additional express
p.(None): consent of the person (patient). The opposite would mean that the hospital would refuse treatment or the drug store if the person did not consent. Like
p.(None): conduct would constitute a direct violation of the General Regulation, which may be penalized by a fine or a pecuniary penalty.
p.(None): Example non-exhaustive list of cases where consent is not required:
p.(None): In accordance with these criteria, as a rule, no separate consent is required from persons, including the signing of any form of declaration, for
p.(None): the processing of their personal data by the administrators listed below in the course of their normal professional activities. This does not include personal processing
p.(None): direct marketing data, where consent should be the leading ground.
p.(None): - doctors, dentists and pharmacists;
p.(None): - lawyers;
p.(None): - employers;
p.(None): - public authorities (state and municipal);
p.(None): - educational establishments (kindergartens, schools and higher education institutions);
p.(None): - banks and other credit institutions;
p.(None): - insurers;
p.(None): - undertakings providing public electronic communications networks and / or services;
p.(None): - courier companies and other postal operators;
p.(None): - utilities providing utilities (electricity distribution companies, plumbing, district heating);
p.(None): - processing personal data (accountants, occupational health services, etc.);
p.(None): - hoteliers and travel agencies;
p.(None): - condominium managers (homeowners);
p.(None): - copying services;
p.(None): - translators;
p.(None): - journalists, photographers and videographers;
p.(None): - religious, political, social and trade union organizations;
p.(None): - and other.
p.(None): print
p.(None): Links Sitemap Accessibility
p.(None): Personal Data Protection Commission, Sofia 1592, “Prof. Tsvetan Lazarov ”№ 2
...
Social / education
Searching for indicator education:
(return to top)
p.(None): Consent is one of the reasons for collecting and processing personal data. Despite the fact that it is mentioned in the first place, it is important to know that everyone
p.(None): the legal bases are alternative and equal and they are not hierarchically dependent. The presence of any of them makes the processing
p.(None): legally, provided that the other requirements of the Regulation are complied with.
p.(None): Where a data controller decides whether to process personal data on the basis of consent, he or she must investigate the circumstance.
p.(None): whether there is another legal basis for processing them, such as a legal obligation or contract, and what would be the consequences for
p.(None): the relevant activity upon withdrawal of consent from the person.
p.(None): Some of the most common situations where the controller should not seek the consent of the person to process his or her personal data are the following:
p.(None): 1. Administrator - public or private, collects a certain amount of personal data in the performance of a duty under a law, e.g.
p.(None): by virtue of the Health Act, the Accountancy Act, the Administrative Offenses and Sanctions Act, the Labor Code,
p.(None): The Social Security Code, the Ministry of the Interior Act, the Civil Registration Act, the Law on Social Security
p.(None): tourism, the Pre-school and School Education Act, etc.
p.(None): In these cases, the legislator did not leave the discretion of the controller or the data subject, resulting in the possible consent of the person
p.(None): will not be freely given, respectively, will not be valid. This is especially true for public administrators, as well as for sectors where there is a detailed legal framework
p.(None): regulation, such as healthcare, education, banking, etc.
p.(None): 2. Personal data shall be collected in connection with the provision of various administrative services by public authorities or bodies
p.(None): local government.
p.(None): In these cases, the legal basis is the fulfillment of a public interest task or the exercise of official powers and the requisite consent of the persons
p.(None): is unnecessary.
p.(None): 3. Personal data shall be collected and processed for employment purposes.
p.(None): In these cases, the employee has no genuine free choice and is unable to refuse or withdraw his / her consent without leading to
p.(None): its adverse effects due to the apparent inequality between the two countries. In addition, the relationships between data subjects and theirs
p.(None): employers or appointing authorities, including with regard to the processing of personal data, are fully regulated by the employment
p.(None): legislation, individual and / or collective agreements. In these circumstances, the condition for the lawfulness of the processing of personal data is
p.(None): a legal obligation and / or performance of a contract (depending on the hypothesis).
p.(None): 4. Personal data are necessary for the conclusion and performance of a contract to which the data subject is a party.
p.(None): Insofar as the main object and purpose of the contract cannot be objectively achieved without providing a certain amount of personal data, in these cases it is sufficient
p.(None): the willingness of the parties to enter into contractual or pre-contractual relations and, accordingly, no separate consent is required for the processing of personal data.
...
p.(None): or social care, in the field of public health, to protect against serious cross-border threats to health, etc. Therefore, if the processing is
p.(None): necessary for any of these purposes, the hospital, laboratory or pharmacy concerned has neither the obligation nor the right to request additional express
p.(None): consent of the person (patient). The opposite would mean that the hospital would refuse treatment or the drug store if the person did not consent. Like
p.(None): conduct would constitute a direct violation of the General Regulation, which may be penalized by a fine or a pecuniary penalty.
p.(None): Example non-exhaustive list of cases where consent is not required:
p.(None): In accordance with these criteria, as a rule, no separate consent is required from persons, including the signing of any form of declaration, for
p.(None): the processing of their personal data by the administrators listed below in the course of their normal professional activities. This does not include personal processing
p.(None): direct marketing data, where consent should be the leading ground.
p.(None): - doctors, dentists and pharmacists;
p.(None): - lawyers;
p.(None): - employers;
p.(None): - public authorities (state and municipal);
p.(None): - educational establishments (kindergartens, schools and higher education institutions);
p.(None): - banks and other credit institutions;
p.(None): - insurers;
p.(None): - undertakings providing public electronic communications networks and / or services;
p.(None): - courier companies and other postal operators;
p.(None): - utilities providing utilities (electricity distribution companies, plumbing, district heating);
p.(None): - processing personal data (accountants, occupational health services, etc.);
p.(None): - hoteliers and travel agencies;
p.(None): - condominium managers (homeowners);
p.(None): - copying services;
p.(None): - translators;
p.(None): - journalists, photographers and videographers;
p.(None): - religious, political, social and trade union organizations;
p.(None): - and other.
p.(None): print
p.(None): Links Sitemap Accessibility
p.(None): Personal Data Protection Commission, Sofia 1592, “Prof. Tsvetan Lazarov ”№ 2
...
Searching for indicator educational:
(return to top)
p.(None): assessment of the employee's work capacity, medical diagnosis, provision of health and social care, treatment, management of healthcare systems
p.(None): or social care, in the field of public health, to protect against serious cross-border threats to health, etc. Therefore, if the processing is
p.(None): necessary for any of these purposes, the hospital, laboratory or pharmacy concerned has neither the obligation nor the right to request additional express
p.(None): consent of the person (patient). The opposite would mean that the hospital would refuse treatment or the drug store if the person did not consent. Like
p.(None): conduct would constitute a direct violation of the General Regulation, which may be penalized by a fine or a pecuniary penalty.
p.(None): Example non-exhaustive list of cases where consent is not required:
p.(None): In accordance with these criteria, as a rule, no separate consent is required from persons, including the signing of any form of declaration, for
p.(None): the processing of their personal data by the administrators listed below in the course of their normal professional activities. This does not include personal processing
p.(None): direct marketing data, where consent should be the leading ground.
p.(None): - doctors, dentists and pharmacists;
p.(None): - lawyers;
p.(None): - employers;
p.(None): - public authorities (state and municipal);
p.(None): - educational establishments (kindergartens, schools and higher education institutions);
p.(None): - banks and other credit institutions;
p.(None): - insurers;
p.(None): - undertakings providing public electronic communications networks and / or services;
p.(None): - courier companies and other postal operators;
p.(None): - utilities providing utilities (electricity distribution companies, plumbing, district heating);
p.(None): - processing personal data (accountants, occupational health services, etc.);
p.(None): - hoteliers and travel agencies;
p.(None): - condominium managers (homeowners);
p.(None): - copying services;
p.(None): - translators;
p.(None): - journalists, photographers and videographers;
p.(None): - religious, political, social and trade union organizations;
p.(None): - and other.
p.(None): print
p.(None): Links Sitemap Accessibility
p.(None): Personal Data Protection Commission, Sofia 1592, “Prof. Tsvetan Lazarov ”№ 2
...
General/Other / Dependent
Searching for indicator dependent:
(return to top)
p.(None): the grounds, exhaustively listed in Art. 6 (1) of Regulation (EU) 2016/679 (General Data Protection Regulation, CPD, GDPR):
p.(None): (a) the data subject has consented to the processing of his personal data for one or more specific purposes;
p.(None): (b) processing is necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject
p.(None): before the conclusion of the contract;
p.(None): (c) processing is necessary to comply with a legal obligation that applies to the controller;
p.(None): (d) processing is necessary to protect the vital interests of the data subject or of another individual;
p.(None): (e) processing is necessary for the fulfillment of a public interest task or for the exercise of official powers conferred on
p.(None): the administrator;
p.(None): (f) processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests have an advantage
p.(None): the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular when the data subject is a child.
p.(None): Consent is one of the reasons for collecting and processing personal data. Despite the fact that it is mentioned in the first place, it is important to know that everyone
p.(None): the legal bases are alternative and equal and they are not hierarchically dependent. The presence of any of them makes the processing
p.(None): legally, provided that the other requirements of the Regulation are complied with.
p.(None): Where a data controller decides whether to process personal data on the basis of consent, he or she must investigate the circumstance.
p.(None): whether there is another legal basis for processing them, such as a legal obligation or contract, and what would be the consequences for
p.(None): the relevant activity upon withdrawal of consent from the person.
p.(None): Some of the most common situations where the controller should not seek the consent of the person to process his or her personal data are the following:
p.(None): 1. Administrator - public or private, collects a certain amount of personal data in the performance of a duty under a law, e.g.
p.(None): by virtue of the Health Act, the Accountancy Act, the Administrative Offenses and Sanctions Act, the Labor Code,
p.(None): The Social Security Code, the Ministry of the Interior Act, the Civil Registration Act, the Law on Social Security
p.(None): tourism, the Pre-school and School Education Act, etc.
p.(None): In these cases, the legislator did not leave the discretion of the controller or the data subject, resulting in the possible consent of the person
p.(None): will not be freely given, respectively, will not be valid. This is especially true for public administrators, as well as for sectors where there is a detailed legal framework
p.(None): regulation, such as healthcare, education, banking, etc.
...
Orphaned Trigger Words
Appendix
Indicator List
| Indicator | Vulnerability |
|---|
| access | Access to Social Goods |
| armedXforces | Soldier |
| child | Child |
| dependent | Dependent |
| drug | Drug Usage |
| education | education |
| educational | education |
| ethnic | Ethnicity |
| home | Property Ownership |
| party | political affiliation |
| political | political affiliation |
| religious | Religion |
| union | Trade Union Membership |
Indicator Peers (Indicators in Same Vulnerability)
| Indicator | Peers |
|---|
| education | ['educational'] |
| educational | ['education'] |
| party | ['political'] |
| political | ['party'] |
Trigger Words
capacity
consent
protect
protection
sensitive
Applicable Type / Vulnerability / Indicator Overlay for this Input