The merger of the companies involves a ”transfer of assets”. The first question is whether personal data is an element of assets. The merger of companies requires that at least the data of one of the companies, acting as operator, to be transferred to another. The second question concerns the steps that negotiation teams need to consider regarding personal data. In this respect, the company’s relations with its contractors will be eval...

The effective protection of personal data throughout the European Union required the strengthening and setting out in detail the obligations of those who process and determine the processing of personal data. In order to ensure a processing which meets the requirements of the General Data Protection Regulation and protects the rights of data subjects, the controller and the processor have the obligation to apply appropriate technical a...

Prior to the General Data Protection Regulation (GDPR), the procedure for notifying the supervisory authority was designed to ensure disclosure of the purposes and main features of any processing operation for the purpose of verification that the operation is in accordance with the national measures taken under Directive 95/46/EC. With the application of Regulation (EU) 2016/679, controllers are no longer required to notify data process...

The article considers elements of consent, as they are regulated by art. 6 of Regulation (EU) 2016/679 on the person who has given his/her consent in regards to the processing of his/her personal data for one or more specific purposes. Issues regarding the transition from the old to the new legislation such as the processing of private data that has been obtained before the Regulation was enforced have also been taken into consideration...