Data Protection in Luxembourg:
Saved in:
| Main Authors: | , , |
|---|---|
| Format: | Book |
| Language: | English German |
| Published: |
Frankfurt
Fachmedien Recht und Wirtschaft | dfv media group
[2019]
|
| Series: | Kommunikation & Recht
|
| Subjects: | |
| Online Access: | Inhaltsverzeichnis |
| Item Description: | Auf dem Umschlag: Handbook Auf dem Umschlag: Dury data protection |
| Physical Description: | XXII, 286 Seiten 21 cm x 14.8 cm, 400 g |
| ISBN: | 9783800516957 3800516950 |
Staff View
MARC
| LEADER | 00000nam a22000008c 4500 | ||
|---|---|---|---|
| 001 | BV045882460 | ||
| 003 | DE-604 | ||
| 005 | 20190925 | ||
| 007 | t | ||
| 008 | 190516s2019 gw |||| 00||| eng d | ||
| 015 | |a 19,N07 |2 dnb | ||
| 016 | 7 | |a 1177517868 |2 DE-101 | |
| 020 | |a 9783800516957 |c Broschur : circa EUR 129.00 (DE), circa EUR 132.70 (AT) |9 978-3-8005-1695-7 | ||
| 020 | |a 3800516950 |9 3-8005-1695-0 | ||
| 024 | 3 | |a 9783800516957 | |
| 035 | |a (DE-599)DNB1177517868 | ||
| 040 | |a DE-604 |b ger |e rda | ||
| 041 | 1 | |a eng |h ger | |
| 044 | |a gw |c XA-DE-HE | ||
| 049 | |a DE-M382 | ||
| 084 | |a 340 |2 sdnb | ||
| 100 | 1 | |a Dury, Marcus |e Verfasser |0 (DE-588)1112677690 |4 aut | |
| 245 | 1 | 0 | |a Data Protection in Luxembourg |c Sandra Dury, Marcus Dury and Martin Kerz |
| 263 | |a 201905 | ||
| 264 | 1 | |a Frankfurt |b Fachmedien Recht und Wirtschaft | dfv media group |c [2019] | |
| 300 | |a XXII, 286 Seiten |c 21 cm x 14.8 cm, 400 g | ||
| 336 | |b txt |2 rdacontent | ||
| 337 | |b n |2 rdamedia | ||
| 338 | |b nc |2 rdacarrier | ||
| 490 | 0 | |a Kommunikation & Recht | |
| 500 | |a Auf dem Umschlag: Handbook | ||
| 500 | |a Auf dem Umschlag: Dury data protection | ||
| 650 | 0 | 7 | |a Datenschutz |0 (DE-588)4011134-9 |2 gnd |9 rswk-swf |
| 651 | 7 | |a Luxemburg |0 (DE-588)4036728-9 |2 gnd |9 rswk-swf | |
| 653 | |a This practitioner's handbook is directed at anyone professionally involved with the issue of data protection in Luxembourg, e.g. data protection officers in companies or associations, consultants, executives and other IT controllers. | ||
| 653 | |a General Data Protection Regulation | ||
| 653 | |a Compliance | ||
| 653 | |a Luxembourg Data Protection Act | ||
| 689 | 0 | 0 | |a Luxemburg |0 (DE-588)4036728-9 |D g |
| 689 | 0 | 1 | |a Datenschutz |0 (DE-588)4011134-9 |D s |
| 689 | 0 | |5 DE-604 | |
| 700 | 1 | |a Dury, Sandra |e Verfasser |0 (DE-588)1185824928 |4 aut | |
| 700 | 1 | |a Kerz, Martin |e Verfasser |0 (DE-588)1185825231 |4 aut | |
| 772 | 0 | 8 | |i Enthalten in |z 978-3-8005-1699-5 |
| 775 | 0 | 8 | |i Deutschsprachige Ausgabe |z 978-3-8005-1694-0 |w (DE-604)BV045882474 |
| 775 | 0 | 8 | |i Französischsprachige Ausgabe |z 978-3-8005-1696-4 |w (DE-604)BV045882468 |
| 856 | 4 | 2 | |m DNB Datenaustausch |q application/pdf |u http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=031265596&sequence=000001&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA |3 Inhaltsverzeichnis |
| 999 | |a oai:aleph.bib-bvb.de:BVB01-031265596 | ||
Record in the Search Index
| _version_ | 1804180032611942400 |
|---|---|
| adam_text | FOREWORD
CNPD
.....................................................................................
V
FOREWORD
DURY
....................................................................................
VIII
TABLE
OF
CONTENTS
..................................................................................
XI
LIST
OF
ABBREVIATIONS
..............................................................................
XXI
1.
OVERVIEW
OF
DATA PROTECTION
...........................................................
1
1.1.
WHEN
MAY
PERSONAL
DATA
BE
PROCESSED?
............................
1
1.2.
WHAT
SHOULD
BE
DONE
IF
THE
PROCESSING
IS
JUSTIFIED
IN
ACCORDANCE
WITH
THE
GDPR?
................................................
2
1.2.1.
ENSURING
AN
ADEQUATE
LEVEL
OF
PROTECTION
.............
2
1.2.2.
WHAT
IS
DEEMED
ADEQUATE
PROTECTION
FOR
THE
PROCESSING
OF
PERSONAL
DATA?
................................
3
1.3.
DATA
PROTECTION
AS
A
COMPETITIVE
ADVANTAGE
......................
3
2.
TERMS,
ROLES
AND
AGENTS
IN
THE
GDPR
.........................................
5
2.1.
PERSONAL
DATA
AND
ITS
PROCESSING
ACCORDING
TO
ART.
4
GDPR
.....................................................................
5
2.1.1.
IDENTIFICATION
......................... ................................
6
2.1.2.
(LACK
OF)
REFERENCE
TO
THE
PERSON
..........................
8
2.1.3.
SUPPLEMENTARY
........................................................
8
2.2.
PROCESSING
..............................................................................
9
2.3.
ROLES
AND
AGENTS
...................................................................
11
2.3.1.
DATA
SUBJECTS
...........................................................
11
2.3.2.
THE
CONTROLLER
..........................................................
11
2.3.3.
THE
PROCESSOR
..........................................................
14
2.3.4.
CNPD
-
THE
SUPERVISORY
AUTHORITY
.......................
15
2.3.5.
THIRD
PARTIES
AND
RECIPIENTS
...................................
16
2.4.
HOW
TO
DEAL
WITH
THESE
TERMS
..............................................
16
3.
WORKING
WITH
THE
LAWS
...................................................................
18
3.1.
GENERAL
..................................................................................
18
3.2.
OBJECTIVES
OF
THE
GDPR
......................................................
18
3.3.
STRUCTURE
OF
THE
GDPR
........................................................
18
3.4.
OPENING
CLAUSES
...................................................................
19
3.5.
INTERPRETATION
OF
THE
GDPR
IN
PRACTICE
..............................
21
4.
WHAT
IS
NEW
IN
THE
LUXEMBOURG
DATA
PROTECTION
ACT
OF
1
AUGUST
2018?
...................................................................
23
4.1.
NEW
RESPONSIBILITIES
AND
POWERS
FOR
THE
CNPD
...............
23
4.2.
FINES
.......................................................................................
24
4.3.
FURTHER
AUTHORISATIONS
...........................................................
25
4.4.
SPECIAL
REGULATIONS
ON
THE
PROCESSING
OF
PERSONAL
DATA
IN
SPECIFIC
AREAS
...................................................................
26
4.5.
PARTICULARITIES
IN
THE
PROCESSING
FOR
JOURNALISTIC
OR
SCIENTIFIC,
ARTISTIC
OR
LITERARY
PURPOSES
ACCORDING
TO
ART.
85
(2)
GDPR
.................................................................
26
4.6.
PARTICULARITIES
IN
THE
PROCESSING
OF
PERSONAL
DATA
IN
THE
CONTEXT
OF
EMPLOYMENT
........................................................
27
4.7.
PARTICULARITIES
IN
THE
PROCESSING
OF
PERSONAL
DATA
FOR
SCIENTIFIC
OR
HISTORICAL
RESEARCH
PURPOSES
OR
FOR
STATISTICAL
PURPOSES
................................................................................
28
4.8.
TABULAR
OVERVIEW
.................................................................
28
5.
COLLABORATION
WITH
THE
CNPD:
PARTICULARITIES
IN
THE
LUXEMBOURG
DATA
PROTECTION
ACT
................................................
30
5.1.
TASKS
.......................................................................................
30
5.2.
MOST
IMPORTANT
CHANGE
AS
A
RESULT
OF
THE
LUXEMBOURG
DATA
PROTECTION
ACT
OF
1
AUGUST
2018
................................
31
5.3.
THE
CNPD
PROVIDES
INFORMATION,
INCREASES
AWARENESS
AND
OFFERS
GUIDANCE
...............................................................
32
5.4.
HOW
COLLABORATION
WITH
THE
CNPD
SHOULD
TAKE
PLACE
...
33
5.5.
NOTIFICATION
OF
THE
DATA
PROTECTION
OFFICER,
ART.
37
(7)
GDPR
.................................................................
34
5.6.
DATA
BREACH
NOTIFICATIONS
-
ACCORDING
TO
ART.
33
GDPR
34
5.7.
WHAT
IS
A
DATA
BREACH?
.........................................................
34
5.8.
A
REPORTING
REQUIREMENT
EXISTS,
ART.
33
GDPR
.................
35
5.9.
CONTENT
OF
THE
NOTIFICATION
OF
DATA
BREACHES
......................
35
5.10.
CONSULTATION
OBLIGATION
ACCORDING
TO
ART. 36
GDPR
....
36
5.11.
WHAT
IS
A
DATA
PROTECTION
IMPACT
ASSESSMENT?
...............
37
5.12.
EU
REPRESENTATIVE
ACCORDING
TO
ART.
27
GDPR
.................
39
5.13.
WHAT
KIND
OF
SUPPORT
DOES
THE
CNPD
OFFER?
....................
39
5.14.
DATA
PROTECTION
LABORATORY
(DAPRO
LAB)
....................
40
5.15.
CONTROLS
BY
THE
CNPD
........................................................
41
6.
THE
DATA
PROTECTION
OFFICER
.............................................................
44
6.1.
WHEN
DOES
A
DATA
PROTECTION
OFFICER
HAVE
TO
BE
DESIGNATED?
............................................................................
44
6.2.
WHO
SHOULD
BE
SELECTED
AS
DATA
PROTECTION
OFFICER
(INTERNAL
OR
EXTERNAL
DESIGNATION)?
.....................................
48
6.3.
A
DATA
PROTECTION
OFFICER
FOR
SEVERAL
COMPANIES,
ART.
37
(2
*
4)
GDPR
.............................................................
49
6.4.
WHICH
PROFESSIONAL
AND
PERSONAL
SKILLS
SHOULD
THE
DATA
PROTECTION
OFFICER
HAVE?
......................................................
50
6.5.
POSITION
OF
THE
DATA
PROTECTION
OFFICER
..............................
52
6.6.
FORM
AND
TERM
OF
THE
DESIGNATION
OF
THE
DATA
PROTECTION
OFFICER
....................................................................................
53
6.7.
NOTIFICATION
AND
PUBLICATION
OF
THE
DESIGNATION
OF
THE
DATA
PROTECTION
OFFICER,
ART.
37
(7)
GDPR
........................
54
6.8.
THE
TASKS
OF
THE
DATA
PROTECTION
OFFICER,
ART.
39
GDPR
.
.
55
6.8.1.
INFORMING
AND
ADVISING
THE
CONTROLLER
AND
PROCESSOR
(ART.
39
(L)(A)
GDPR)
............................
55
6.8.2.
MONITORING
COMPLIANCE
WITH
DATA
PROTECTION
(ART.
39
(L)(B)
GDPR)
...........................................
56
6.8.3.
THE
DATA
PROTECTION
OFFICER
NEEDS
INFORMATION,
SO
THAT
THEY
CAN
TAKE
ON
THIS
TASK
..........................
56
6.8.4.
ADVISORY
FUNCTION
IN
CONNECTION
WITH
THE
DATA
PROTECTION
IMPACT
ASSESSMENT
(ART.
39
(L)(C)
GDPR)
.....................................................................
57
6.8.5.
COLLABORATION
WITH
THE
CNPD,
ART.
39
(L)(D)
AND
(E)
GDPR
..........................................................
57
6.8.6.
OTHER
TASKS
OF
THE
DATA
PROTECTION
OFFICER
..............
58
6.9.
HOW
THE
DATA
PROTECTION
OFFICER
SHOULD
BE
PRESENTED
IN
THE
COMPANY
.....................................................................
59
6.10.
MANAGEMENT
AS
A
ROLE
MODEL
IN
DATA
PROTECTION
...............
60
7.
RECORD
OF
PROCESSING
ACTIVITIES
...................................................
62
7.1.
WHY
IS
A
RECORD
OF
PROCESSING
ACTIVITIES
NECESSARY?
.........
62
7.2.
WHO
HAS
TO
KEEP
A
RECORD
OF
PROCESSING
ACTIVITIES?
.........
64
7.3.
UPDATING
THE
RECORD
............................................................
65
7.4.
NECESSARY
CONTENT
AND
STRUCTURE
.........................................
66
7.5.
INFORMATION
RELATING
TO
THE
WHOLE
RECORD
..........................
68
7.6.
DESIGNATION
OF
PROCESSING
ACTIVITIES
...................................
69
7.7.
PRECISE
PURPOSE
DESCRIPTION
................................................
70
7.8.
CATEGORIES
OF
DATA
SUBJECTS
AND
PROCESSED
DATA
...............
71
7.9.
DISCLOSURE
(DATA
TRANSFER)
....................................................
72
7.10.
DATA
TRANSFER
TO
THIRD
COUNTRIES
...........................................
73
7.11.
ERASURE
PERIODS
AND
TECHNICAL
AND
ORGANISATIONAL
MEASURES
................................................................................
73
7.12.
TECHNICAL
AND
ORGANISATIONAL
MEASURES
............................
75
7.13.
THE
RECORD
OF
PROCESSING
ACTIVITIES
OF
THE
PROCESSOR
....
77
7.14.
COOPERATION
WITH
THE
DATA
PROTECTION
OFFICER
....................
78
8.
RIGHTS
OF
DATA
SUBJECTS
-
DEALING
WITH
ENQUIRIES
........................
80
8.1.
THE
RIGHT
TO
TRANSPARENT
INFORMATION
...................................
80
8.2.
FORMAL
REQUIREMENTS
..............................................................
83
8.3.
ART.
13
AND
14
GDPR:
PRO-ACTIVITY
......................................
84
8.3.1.
DOCUMENTATION
OF
THE
INFORMATION
REQUIREMENT.
.
85
8.3.2.
CONTENT
OF
THE
INFORMATION
REQUIREMENT
...............
85
8.3.3.
EXCEPTIONS
OF
THE
INFORMATION
REQUIREMENT
.........
87
8.3.4.
PARTICULAR
CHALLENGE
IN
THE
INFORMATION
REQUIREMENT
.............................................................
87
8.3.5.
FURTHER
INFORMATION
REQUIREMENTS
........................
88
8.4.
THE
RIGHT
TO
INFORMATION,
ART.
15
GDPR
............................
90
8.4.1.
EXTENSION
OF
THE
DEADLINE
.......................................
92
8.4.2.
REFUSAL
OF
INFORMATION
-
IDENTIFICATION
OF
THE
DATA
SUBJECT
...............................................................
93
8.4.3.
FREE
PROVISION
OF
INFORMATION
..............................
94
8.5.
THE
RIGHT
TO
RECTIFICATION
......................................................
95
8.6.
THE
RIGHT
TO
ERASURE
OF
DATA
(RIGHT
TO
BE
FORGOTTEN)
...........
95
8.7.
THE
RIGHT
TO
RESTRICTION
OF
PROCESSING
................................
97
8.8.
REPORTING
OBLIGATIONS
...........................................................
98
8.9.
THE
RIGHT
TO
DATA
PORTABILITY
................................................
99
8.10.
RIGHT
TO
OBJECT
.....................................................................
100
8.11.
AUTOMATED
DECISIONS
...........................................................
101
9.
DATA
BREACHES
AND
THEIR
CONSEQUENCES
.........................................
103
9.1.
RISK
ASSESSMENT
FOR
DATA
BREACHES
.....................................
105
9.2.
REPORTING
OBLIGATIONS
-
NOTIFYING
THE
CNPD
.................
109
9.3.
NOTIFICATION
OF
THE
DATA
SUBJECTS
THEMSELVES
....................
113
9.4.
THE
DOCUMENTATION
OF
DATA
BREACHES
.................................
113
9.5.
CONSEQUENCES
FOR
COMPANIES
IN
THE
EVENT
OF
DATA
BREACHES
........................................................................
114
10.
PROCESSOR
.........................................................................................
117
10.1.
OBLIGATIONS
FOR
THE
PROCESSOR
.............................................
118
10.2.
SELECTION
OF
PROCESSORS
BY
THE
CONTROLLERS
........................
120
10.3.
SELECTION
OF
A
SUITABLE
PROCESSOR
.......................................
121
10.4.
OBLIGATIONS
OF
THE
PROCESSOR
ACCORDING
TO
ART.
28
(3)
GDPR
.................................................................
123
10.5.
INVOLVEMENT
OF
SUBCONTRACTORS
...........................................
124
11.
DATA
FLOWS
WITHIN
THE
GROUP
........................................................
126
11.1.
WHEN
IS
A
DATA
TRANSFER
ALLOWED
WITHIN
THE
GROUP?
.........
128
11.2.
PROCESSING
BY
ORDER
IN
THE
GROUP,
ART.
28
GDPR
.............
129
11.3.
LEGITIMATE
INTERESTS
FOR
THE
DATA
TRANSFER
IN
THE
GROUP,
ART.
6
(L)(F)
GDPR
...............................................................
131
12.
DATA
PROTECTION
RELATING
TO
APPS,
WEBSITES,
ONLINE
SHOPS
AND
OTHER
INTERNET
SERVICES;
DATA
EXPORT
TO
THIRD
COUNTRIES
...............
133
12.1.
DATA
PROTECTION
RELATING
TO
APPS,
WEBSITES,
ONLINE
SHOPS
AND
OTHER
INTERNET
SERVICES
..................................................
133
12.2.
APPLICATION
OF
THE
GDPR
IN
INTERNET
SERVICES
.................
135
12.3.
OVERVIEW:
DATA
PROTECTION
ASPECTS
OF
AN
ONLINE
PROJECT.
.
136
12.3.1.
PROCESSING
OF
DATA
OUTSIDE
OF
THE
EU
ACCORDING
TO
45
ET
SEQ.
GDPR
AND
RELATED
INFORMATION
REQUIREMENTS
.......................
141
12.3.2.
ALTERNATIVE
SUITABLE
PROTECTIVE
MEASURES
ACCORDING
TO
ART.
46
ET
SEQ.
GDPR
AS
THE
LEGAL
BASIS
FOR
DATA
TRANSFER
.............................................
144
12.3.2.1.
STANDARD
DATA
PROTECTION
CLAUSES
AS
THE
LEGAL
BASIS
FOR
DATA
TRANSFER
TO
A
THIRD
COUNTRY
IN
THE
CONTEXT
OF
THE
USE
OF
WEB
SERVICES
ON
WEBSITES
OF
LUXEMBOURG
COMPANIES
........................
144
12.3.2.2.
BINDING
CORPORATE
RULES
(BCR)
-
ART.
47
GDPR
.........................................
147
12.3.2.3.
THE
GDPR
ALLOWS
FOR
INDUSTRY-SPECIFIC
CODES
AND
DATA
PROTECTION
CERTIFICATIONS
...........................................
147
12.3.2.4.
THE
EU-US
PRIVACY
SHIELD
AS
THE
LEGAL
BASIS
FOR
A
DATA
TRANSFER
TO
A
THIRD
COUNTRY
IN
THE
CONTEXT
OF
THE
USE
OF
WEB
SERVICES
ON
WEBSITES
OF
LUXEMBOURG
COMPANIES
........................
148
12.3.2.5.
WHAT
CAN
YOU
DO
IF
YOU
USE
A
WEB
SERVICE
THAT
IS
NOT DATA
PROTECTION
COMPLIANT,
BUT
WHICH
YOU
WOULD
LIKE
TO
(NEED
TO)
CONTINUE
TO
USE?
.................
153
12.4.
DATA
PROTECTION
AND
WEB
ANALYSIS
-
USE
OF
COOKIES
.........
153
12.4.1.
WEB
TRACKING/THE
NEED
FOR
COOKIE
BANNERS/
REQUIREMENTS
FOR
THE
USE
OF
COOKIES
AND
SIMILAR
TECHNOLOGIES
IN
AN
ONLINE
CONTEXT
..........................
154
12.4.2.
DYNAMIC
IP
ADDRESSES
AS
PERSONAL
INFORMATION
.
.
155
12.4.3.
ADMISSIBILITY
OF
ESTABLISHING
COOKIES
IN
LUXEMBOURG
.............................................................
157
12.4.4.
FUTURE
IMPACT
OF
THE
EPRIVACY
REGULATION
...........
161
12.4.5.
EPRIVACY
REGULATION
AND
EXTERNAL
WEB
TRACKING
USING
THE
EXAMPLE
OF
GOOGLE
ANALYTICS
...............
162
12.4.6.
WHAT
ARE
THE
REQUIREMENTS
FOR
THE
DECLARATION
OF
CONSENT
TO
WEB
TRACKING?
...................................
165
12.5.
GENERAL
REQUIREMENTS
FOR
DECLARATIONS
OF
CONSENT
IN
THE
ONLINE
CONTEXT
........................................................................
166
12.5.1.
CONSENT
TO
PROCESSING
OF
PERSONAL
DATA
ACCORDING
TO
ART.
6
(L)(A)
GDPR
..............................................
166
12.5.2.
CONSENT
FOR
PROCESSING
OF
SPECIAL
CATEGORIES
OF
PERSONAL
DATA
ACCORDING
TO
ART.
9
(2)
GDPR
.........
168
12.6.
SENDING
OF
NEWSLETTERS
........................................................
168
12.6.1.
CONSENT
FOR
THE
SENDING
OF
NEWSLETTERS
-
ART.
6
(L)(A)
GDPR
..................................................
169
12.6.2.
NEWSLETTER
-
PRINCIPLE
OF
DATA
MINIMISATION
-
ART.
5
(L)(C)
GDPR
..................................................
170
12.6.3.
NEWSLETTER
-
NOTICE
OF
THE
POSSIBILITY
TO
UNSUBSCRIBE
FROM
THE
NEWSLETTER
-
ART.
21
(4)
GDPR
....................................................
171
12.6.4.
NEWSLETTER
-
INFORMATION
ABOUT
THE
RIGHT
TO
OBJECT
-
ART.
21
(2)
GDPR
.....................................
171
12.6.5.
NEWSLETTER
WEB
TRACKING
.........................................
172
12.6.6.
WHAT
IS
TO
BE
CONSIDERED
IN
THE
DECLARATION
OF
CONSENT
REGARDING
THE
SENDING
OF
NEWSLETTERS
AND
NEWSLETTER
TRACKING?
.........................................
172
12.7.
PRINCIPLE
OF
DATA
MINIMISATION
-
ART.
5
(L)(C)
GDPR
....
174
12.8.
REQUIREMENTS
FOR
THE
CONTENT
OF
A
DATA
PROTECTION
DECLARATION
............................................................................
175
12.8.1.
NAMING
OF
THE
CONTROLLER
-
ART.
13
(L)(A)
GDPR
.......................................................................
175
12.8.2.
INFORMATION
ABOUT
SPECIAL
FEATURES
OF
THE
WEBSITE
-
ART.
12(1)
GDPR
...................................
176
12.8.3.
INFORMATION
ON
THE
USE
OF
WEB
TRACKING
TECHNIQUES
.................................................................
177
12.8.3.1.
FUNDAMENTAL
DISTINCTION:
EXTERNAL
WEB
TRACKING
SERVICES
OR
SELF-HOSTED
WEB
TRACKING
SERVICES
.....................................
178
12.8.3.2.
SPECIAL
FEATURES
OF
USING
GOOGLE
TAG
MANAGER
FOR
WEB
TRACKING
......................
182
12.8.4.
INFORMATION
ABOUT
DATA
EXCHANGE
WITH
OTHER
WEBSITES
-
INCLUSION
OF
EXTERNAL
WEB
SERVICES
-
ART.
13
(L)(C)
GDPR
................................................
183
12.8.5.
INFORMATION
ON
THE
PROCESSING
OF
DATA
OUTSIDE
THE
EU
-
ART.
13
(L)(F)
GDPR
IN
CONJUNCTION
WITH
ART.
44
ET
SEQ.
GDPR
.....................................
185
12.8.6.
INFORMATION
ON
PROFILING/CREDIT
ASSESSMENT
WITH
AUTO
MATED
DECISION
MAKING
WITH
THE
CONCLUSION
OF
A
CONTRACT
-
ART.
13
(2)(F)
GDPR
IN
CONJUNCTION
WITH
ART.
22
(2)(A)
GDPR
.................
186
12.8.7.
MENTION
OF
THE
CONTACT
DETAILS
OF
THE
OPERATIONAL
DATA
PROTECTION
OFFICER
-
ART.
37
(7)
GDPR
.........
187
12.8.8.
INFORMATION
ON
THE
RIGHTS
OF
DATA
SUBJECTS
...........
188
12.8.8.1.
RIGHT
TO
LODGE
A
COMPLAINT
WITH
A
SUPERVISORY
AUTHORITY
-
ART.
77
GDPR
.........................................
188
12.8.8.2.
RIGHT
TO
INFORMATION/RIGHT
TO
RECTIFICATION/RIGHT
TO
ERASURE/RIGHT
TO
RESTRICTION
OF
DATA
-
ARTICLES
15,
16,
17,
18
GDPR
...........................................
189
12.8.8.3.
RIGHT
TO
OBJECT
TO
DATA
PROCESSING
-
ART.
21
GDPR
.........................................
190
12.8.8.4.
INFORMATION
ON
THE
RIGHT
TO
DATA
PORTABILITY
-
ART.
20
GDPR
(DATA
PORTABILITY)
.............................................
191
12.8.9.
DETAILS
OF
THE
TRANSPARENCY
REQUIREMENT
.............
191
12.8.9.1.
DATA
PROTECTION
DECLARATION(S)
FREE
OF
CONTRADICTIONS
.........................................
191
12.8.9.2.
CLICKABLE
LINKS
IN
THE
DATA
PROTECTION
DECLARATION
-
ART.
12
GDPR
.................
191
12.9.
DATA
PROTECTION
CHECKLIST
FOR
WEBSITES
OF
COMPANIES
BASED
IN
LUXEMBOURG
...........................................................
193
13.
EMPLOYEE
DATA
PROTECTION
LAW
.....................................................
201
13.1.
INTRODUCTION
..........................................................................
201
13.2.
WHAT
IS
NEW?
........................................................................
202
13.3.
DATA
PROTECTION
REQUIREMENTS
FOR
THE
MONITORING
OF
EMPLOYEE
DATA
ACCORDING
TO
ART.
71
OF
THE
ACT
OF
1
AUGUST
2018,
L.
261-1
LABOUR
CODE:
............................
203
13.3.1.
FULFILMENT
OF
AT
LEAST
ONE
GENERAL
PERMISSION
ACCORDING
TO
ART.
6(1)
GDPR
(1ST
REQUIREMENT)
.
203
13.3.2.
ART.
6
(L)(A)
GDPR
(CONSENT)
.................................
203
13.3.3.
DATA
PROCESSING
TO
FULFIL
AN
EMPLOYMENT
CONTRACT
OR
TO
INITIATE
AN
EMPLOYMENT
CONTRACT,
ART.
6
(L)(B)
GDPR
..................................................
204
13.3.4.
DATA
PROCESSING
IS
REQUIRED
TO
FULFIL
LEGAL
OBLIGATIONS,
ART.
6
(L)(C)
GDPR
............................
204
13.3.5.
PROCESSING
IS
NECESSARY
FOR
LEGITIMATE
INTERESTS,
ART.
6
(L)(D)
GDPR
..................................................
204
13.3.6.
THE
DATA
PROCESSING
FOR
THE
PUBLIC
INTEREST
AND
EXERCISE
OF
PUBLIC
AUTHORITY
IS
NECESSARY
ACCORDING
TO
ART.
6
(L)(E)
.........................................
205
13.3.7.
THE
PROCESSING
OF
PERSONAL
DATA
IS
NECESSARY
FOR
THE
PROTECTION
OF
LEGITIMATE
INTERESTS,
ART.
6
(L)(F)
GDPR
........................................................................
205
13.4.
INFORMATION
REQUIREMENTS
OF
THE
EMPLOYER
(2ND
REQUIREMENT)
..........................................................................
206
13.5.
VOTING
RIGHTS
OF
THE
JOINT
WORKS
COUNCIL/STAFF
COMMITTEE,
ART.L.
261-1
(4)
LABOUR
CODE
(3RD
REQUIREMENT)
.................................................................
206
13.6.
OPINION
OF
THE
CNPD,
ART.
261-1
(4)
LABOUR
CODE
(4TH
REQUIREMENT)
.................................................................
207
13.7.
RIGHTS
OF
EMPLOYEES
ACCORDING
TO
ART.
261-1
(4)
LABOUR
CODE
..........................................................................
207
13.8.
RECORD
OF
PROCESSING
ACTIVITIES
AND
DATA
PROTECTION
IMPACT
ASSESSMENT
...............................................................
208
APPENDIX
I
-
SAMPLE
DATA
PROTECTION
DECLARATION
............................
209
APPENDIX
II
-
DATA
PROTECTION
TOOLS
....................................................
221
A.
LUXEMBOURG
..........................................................................
221
B.
FRANCE
.....................................................................................
222
C.
GERMANY
................................................................................
222
D.
THE
NETHERLANDS
...................................................................
224
E.
SPAIN
.......................................................................................
224
F.
BELGIUM
................................................................................
224
G.
FINLAND
..................................................................................
225
H.
POLAND
.....................................................................................
225
I.
IRELAND
.....................................................................................
226
J.
UNITED
KINGDOM
...................................................................
226
APPENDIX
III
-
THE
MOST
IMPORTANT
TERMS
IN
THREE
LANGUAGES
.........
227
APPENDIX
IV
-
ACT
OF
1
AUGUST
2018
(OFFICIAL
TRANSLATION
OF
THE
LUXEMBOURG
DATA
PROTECTION
ACT
ACCREDITED
BY
THE
CNPD)
.
..
249
APPENDIX
V
-
FREQUENTLY
ASKED
QUESTIONS
(FAQ)
ON
DATA
PROTECTION
................................................................................
280
KEYWORD
INDEX
.......................................................................................
281
BIBLIOGRAPHY
...................................................
285
|
| any_adam_object | 1 |
| author | Dury, Marcus Dury, Sandra Kerz, Martin |
| author_GND | (DE-588)1112677690 (DE-588)1185824928 (DE-588)1185825231 |
| author_facet | Dury, Marcus Dury, Sandra Kerz, Martin |
| author_role | aut aut aut |
| author_sort | Dury, Marcus |
| author_variant | m d md s d sd m k mk |
| building | Verbundindex |
| bvnumber | BV045882460 |
| ctrlnum | (DE-599)DNB1177517868 |
| discipline | Rechtswissenschaft |
| format | Book |
| fullrecord | <?xml version="1.0" encoding="UTF-8"?><collection xmlns="http://www.loc.gov/MARC21/slim"><record><leader>02387nam a22005418c 4500</leader><controlfield tag="001">BV045882460</controlfield><controlfield tag="003">DE-604</controlfield><controlfield tag="005">20190925 </controlfield><controlfield tag="007">t</controlfield><controlfield tag="008">190516s2019 gw |||| 00||| eng d</controlfield><datafield tag="015" ind1=" " ind2=" "><subfield code="a">19,N07</subfield><subfield code="2">dnb</subfield></datafield><datafield tag="016" ind1="7" ind2=" "><subfield code="a">1177517868</subfield><subfield code="2">DE-101</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">9783800516957</subfield><subfield code="c">Broschur : circa EUR 129.00 (DE), circa EUR 132.70 (AT)</subfield><subfield code="9">978-3-8005-1695-7</subfield></datafield><datafield tag="020" ind1=" " ind2=" "><subfield code="a">3800516950</subfield><subfield code="9">3-8005-1695-0</subfield></datafield><datafield tag="024" ind1="3" ind2=" "><subfield code="a">9783800516957</subfield></datafield><datafield tag="035" ind1=" " ind2=" "><subfield code="a">(DE-599)DNB1177517868</subfield></datafield><datafield tag="040" ind1=" " ind2=" "><subfield code="a">DE-604</subfield><subfield code="b">ger</subfield><subfield code="e">rda</subfield></datafield><datafield tag="041" ind1="1" ind2=" "><subfield code="a">eng</subfield><subfield code="h">ger</subfield></datafield><datafield tag="044" ind1=" " ind2=" "><subfield code="a">gw</subfield><subfield code="c">XA-DE-HE</subfield></datafield><datafield tag="049" ind1=" " ind2=" "><subfield code="a">DE-M382</subfield></datafield><datafield tag="084" ind1=" " ind2=" "><subfield code="a">340</subfield><subfield code="2">sdnb</subfield></datafield><datafield tag="100" ind1="1" ind2=" "><subfield code="a">Dury, Marcus</subfield><subfield code="e">Verfasser</subfield><subfield code="0">(DE-588)1112677690</subfield><subfield code="4">aut</subfield></datafield><datafield tag="245" ind1="1" ind2="0"><subfield code="a">Data Protection in Luxembourg</subfield><subfield code="c">Sandra Dury, Marcus Dury and Martin Kerz</subfield></datafield><datafield tag="263" ind1=" " ind2=" "><subfield code="a">201905</subfield></datafield><datafield tag="264" ind1=" " ind2="1"><subfield code="a">Frankfurt</subfield><subfield code="b">Fachmedien Recht und Wirtschaft | dfv media group</subfield><subfield code="c">[2019]</subfield></datafield><datafield tag="300" ind1=" " ind2=" "><subfield code="a">XXII, 286 Seiten</subfield><subfield code="c">21 cm x 14.8 cm, 400 g</subfield></datafield><datafield tag="336" ind1=" " ind2=" "><subfield code="b">txt</subfield><subfield code="2">rdacontent</subfield></datafield><datafield tag="337" ind1=" " ind2=" "><subfield code="b">n</subfield><subfield code="2">rdamedia</subfield></datafield><datafield tag="338" ind1=" " ind2=" "><subfield code="b">nc</subfield><subfield code="2">rdacarrier</subfield></datafield><datafield tag="490" ind1="0" ind2=" "><subfield code="a">Kommunikation & Recht</subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">Auf dem Umschlag: Handbook</subfield></datafield><datafield tag="500" ind1=" " ind2=" "><subfield code="a">Auf dem Umschlag: Dury data protection</subfield></datafield><datafield tag="650" ind1="0" ind2="7"><subfield code="a">Datenschutz</subfield><subfield code="0">(DE-588)4011134-9</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="651" ind1=" " ind2="7"><subfield code="a">Luxemburg</subfield><subfield code="0">(DE-588)4036728-9</subfield><subfield code="2">gnd</subfield><subfield code="9">rswk-swf</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">This practitioner's handbook is directed at anyone professionally involved with the issue of data protection in Luxembourg, e.g. data protection officers in companies or associations, consultants, executives and other IT controllers.</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">General Data Protection Regulation</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Compliance</subfield></datafield><datafield tag="653" ind1=" " ind2=" "><subfield code="a">Luxembourg Data Protection Act</subfield></datafield><datafield tag="689" ind1="0" ind2="0"><subfield code="a">Luxemburg</subfield><subfield code="0">(DE-588)4036728-9</subfield><subfield code="D">g</subfield></datafield><datafield tag="689" ind1="0" ind2="1"><subfield code="a">Datenschutz</subfield><subfield code="0">(DE-588)4011134-9</subfield><subfield code="D">s</subfield></datafield><datafield tag="689" ind1="0" ind2=" "><subfield code="5">DE-604</subfield></datafield><datafield tag="700" ind1="1" ind2=" "><subfield code="a">Dury, Sandra</subfield><subfield code="e">Verfasser</subfield><subfield code="0">(DE-588)1185824928</subfield><subfield code="4">aut</subfield></datafield><datafield tag="700" ind1="1" ind2=" "><subfield code="a">Kerz, Martin</subfield><subfield code="e">Verfasser</subfield><subfield code="0">(DE-588)1185825231</subfield><subfield code="4">aut</subfield></datafield><datafield tag="772" ind1="0" ind2="8"><subfield code="i">Enthalten in</subfield><subfield code="z">978-3-8005-1699-5</subfield></datafield><datafield tag="775" ind1="0" ind2="8"><subfield code="i">Deutschsprachige Ausgabe</subfield><subfield code="z">978-3-8005-1694-0</subfield><subfield code="w">(DE-604)BV045882474</subfield></datafield><datafield tag="775" ind1="0" ind2="8"><subfield code="i">Französischsprachige Ausgabe</subfield><subfield code="z">978-3-8005-1696-4</subfield><subfield code="w">(DE-604)BV045882468</subfield></datafield><datafield tag="856" ind1="4" ind2="2"><subfield code="m">DNB Datenaustausch</subfield><subfield code="q">application/pdf</subfield><subfield code="u">http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=031265596&sequence=000001&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA</subfield><subfield code="3">Inhaltsverzeichnis</subfield></datafield><datafield tag="999" ind1=" " ind2=" "><subfield code="a">oai:aleph.bib-bvb.de:BVB01-031265596</subfield></datafield></record></collection> |
| geographic | Luxemburg (DE-588)4036728-9 gnd |
| geographic_facet | Luxemburg |
| id | DE-604.BV045882460 |
| illustrated | Not Illustrated |
| indexdate | 2024-07-10T08:29:19Z |
| institution | BVB |
| isbn | 9783800516957 3800516950 |
| language | English German |
| oai_aleph_id | oai:aleph.bib-bvb.de:BVB01-031265596 |
| open_access_boolean | |
| owner | DE-M382 |
| owner_facet | DE-M382 |
| physical | XXII, 286 Seiten 21 cm x 14.8 cm, 400 g |
| publishDate | 2019 |
| publishDateSearch | 2019 |
| publishDateSort | 2019 |
| publisher | Fachmedien Recht und Wirtschaft | dfv media group |
| record_format | marc |
| series2 | Kommunikation & Recht |
| spelling | Dury, Marcus Verfasser (DE-588)1112677690 aut Data Protection in Luxembourg Sandra Dury, Marcus Dury and Martin Kerz 201905 Frankfurt Fachmedien Recht und Wirtschaft | dfv media group [2019] XXII, 286 Seiten 21 cm x 14.8 cm, 400 g txt rdacontent n rdamedia nc rdacarrier Kommunikation & Recht Auf dem Umschlag: Handbook Auf dem Umschlag: Dury data protection Datenschutz (DE-588)4011134-9 gnd rswk-swf Luxemburg (DE-588)4036728-9 gnd rswk-swf This practitioner's handbook is directed at anyone professionally involved with the issue of data protection in Luxembourg, e.g. data protection officers in companies or associations, consultants, executives and other IT controllers. General Data Protection Regulation Compliance Luxembourg Data Protection Act Luxemburg (DE-588)4036728-9 g Datenschutz (DE-588)4011134-9 s DE-604 Dury, Sandra Verfasser (DE-588)1185824928 aut Kerz, Martin Verfasser (DE-588)1185825231 aut Enthalten in 978-3-8005-1699-5 Deutschsprachige Ausgabe 978-3-8005-1694-0 (DE-604)BV045882474 Französischsprachige Ausgabe 978-3-8005-1696-4 (DE-604)BV045882468 DNB Datenaustausch application/pdf http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=031265596&sequence=000001&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA Inhaltsverzeichnis |
| spellingShingle | Dury, Marcus Dury, Sandra Kerz, Martin Data Protection in Luxembourg Datenschutz (DE-588)4011134-9 gnd |
| subject_GND | (DE-588)4011134-9 (DE-588)4036728-9 |
| title | Data Protection in Luxembourg |
| title_auth | Data Protection in Luxembourg |
| title_exact_search | Data Protection in Luxembourg |
| title_full | Data Protection in Luxembourg Sandra Dury, Marcus Dury and Martin Kerz |
| title_fullStr | Data Protection in Luxembourg Sandra Dury, Marcus Dury and Martin Kerz |
| title_full_unstemmed | Data Protection in Luxembourg Sandra Dury, Marcus Dury and Martin Kerz |
| title_short | Data Protection in Luxembourg |
| title_sort | data protection in luxembourg |
| topic | Datenschutz (DE-588)4011134-9 gnd |
| topic_facet | Datenschutz Luxemburg |
| url | http://bvbr.bib-bvb.de:8991/F?func=service&doc_library=BVB01&local_base=BVB01&doc_number=031265596&sequence=000001&line_number=0001&func_code=DB_RECORDS&service_type=MEDIA |
| work_keys_str_mv | AT durymarcus dataprotectioninluxembourg AT durysandra dataprotectioninluxembourg AT kerzmartin dataprotectioninluxembourg |