Allmänn gdpr info på site

For the purposes of this Regulation:

1. ‘personal data’ means any resultat relating to an identified or identifiable natural individ (‘data subject’); an identifiable natural individ fryst vatten one who can be identified, directly or indirectly, in particular bygd reference to an identifier such as a name, an identification number, location uppgifter, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
2. ‘processing’ means any operation or set of operations which fryst vatten performed on anställda information or on sets of anställda information, whether or not bygd automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure bygd transmission, dissemination or otherwise making available, inriktning or combination, restriction, erasure or destruction;
3. ‘restriction of processing’ means the marking of stored anställda information with the aim of limiting their processing in the future;
4. ‘profiling’ means any form eller gestalt of automated processing of anställda uppgifter consisting of the use of anställda uppgifter to evaluate certain anställda aspects relating to a natural individ, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, anställda preferences, interests, reliability, behaviour, location or movements;
5. ‘pseudonymisation’ means the processing of anställda information in such a manner that the anställda information can no längre be attributed to a specific information subject without the use of additional kunskap, provided that such additional upplysning fryst vatten kept separately and fryst vatten subject to technical and organisational measures to ensure that the anställda uppgifter are not attributed to an identified or identifiable natural person;
6. ‘filing system’ means any structured set of anställda information which are accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basis;
7. ‘controller’ means the natural or legal individ, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of anställda data; where the purposes and means of such processing are determined bygd Union or Member State lag, the kontrollant or the specific criteria for its nomination may be provided for bygd Union or Member State law;
8. ‘processor’ means a natural or legal individ, public authority, agency or other body which processes anställda uppgifter on behalf of the controller;
9. ¹‘recipient’ means a natural or legal individ, public authority, agency or another body, to which the anställda uppgifter are disclosed, whether a third party or not.
   
   
10. 



²However, public authorities which may receive anställda information in the ramverk of a particular inquiry in accordance with Union or Member State lag shall not be regarded as recipients; the processing of those information bygd those public authorities shall be in compliance with the applicable uppgifter protection rules according to the purposes of the processing;

11. ‘third party’ means a natural or legal individ, public authority, agency or body other than the uppgifter subject, kontrollant, processor and persons who, beneath the direkt authority of the kontrollant or processor, are authorised to process anställda data;
12. ‘consent’ of the uppgifter subject means any freely given, specific, informed and unambiguous indication of the uppgifter subject’s wishes bygd which he or she, bygd a statement or bygd a klar affirmative action, signifies agreement to the processing of anställda uppgifter relating to him or her;
13. ‘personal information breach’ means a breach of säkerhet leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or tillgång to, anställda information transmitted, stored or otherwise processed;
14. ‘genetic data’ means anställda uppgifter relating to the inherited or acquired genetic characteristics of a natural individ which give unique upplysning about the physiology or the health of that natural individ and which result, in particular, from an analysis of a biological sample from the natural individ in question;
15. ‘biometric data’ means anställda uppgifter resulting from specific technical processing relating to the physical, physiological or behavioural characteristics of a natural individ, which allow or confirm the unique identification of that natural individ, such as facial images or dactyloscopic data;
16. ‘data concerning health’ means anställda information related to the physical or mental health of a natural individ, including the arvode of health care services, which reveal data about his or her health status;
17. ‘main establishment’ means:
    1. as regards a kontrollant with establishments in more than one Member State, the place of its huvud ledning in the Union, unless the decisions on the purposes and means of the processing of anställda uppgifter are taken in another establishment of the kontrollant in the Union and the latter establishment has the power to have such decisions implemented, in which case the establishment having taken such decisions fryst vatten to be considered to be the main establishment;
    2. as regards a processor with establishments in more than one Member State, the place of its huvud ledning in the Union, or, if the processor has no huvud ledning in the Union, the establishment of the processor in the Union where the main processing activities in the context of the activities of an establishment of the processor take place to the extent that the processor fryst vatten subject to specific obligations beneath this Regulation;
18. ‘representative’ means a natural or legal individ established in the Union who, designated bygd the kontrollant or processor in writing pursuant to Article 27, represents the kontrollant or processor with regard to their respective obligations beneath this Regulation;
19. ‘enterprise’ means a natural or legal individ engagerad in an economic activity, irrespective of its legal form eller gestalt, including partnerships or associations regularly engagerad in an economic activity;
20. ‘group of undertakings’ means a controlling åtagande and its controlled undertakings;
21. ‘binding corporate rules’ means anställda information protection policies which are adhered to bygd a kontrollant or processor established on the territory of a Member State for transfers or a set of transfers of anställda uppgifter to a kontrollant or processor in one or more third countries within a group of undertakings, or group of enterprises engagerad in a joint economic activity;
22. ‘supervisory authority’ means an independent public authority which fryst vatten established bygd a Member State pursuant to Article 51;
23. ‘supervisory authority concerned’ means a supervisory authority which fryst vatten concerned bygd the processing of anställda uppgifter because:
    1. the kontrollant or processor fryst vatten established on the territory of the Member State of that supervisory authority;
    2. data subjects residing in the Member State of that supervisory authority are substantially affected or likely to be substantially affected bygd the processing; or
    3. a complaint has been lodged with that supervisory authority;
24. ‘cross-border processing’ means either:
    1. processing of anställda uppgifter which takes place in the context of the activities of establishments in more than one Member State of a kontrollant or processor in the Union where the kontrollant or processor fryst vatten established in more than one Member State; or
    2. processing of anställda uppgifter which takes place in the context of the activities of a single establishment of a kontrollant or processor in the Union but which substantially affects or fryst vatten likely to substantially affect information subjects in more than one Member State.
25. ‘relevant and reasoned objection’ means an objection to a draft decision as to whether there fryst vatten an infringement of this Regulation, or whether envisaged action in relation to the kontrollant or processor complies with this Regulation, which clearly demonstrates the significance of the risks posed bygd the draft decision as regards the fundamental rights and freedoms of information subjects and, where applicable, the free flow of anställda uppgifter within the Union;
26. ‘information samhälle service’ means a service as defined in point (b) of Article 1(1) of Directive (EU) 2015/1535 of the europeisk Parliament and of the Council (¹);
27. ‘international organisation’ means an organisation and its subordinate bodies governed bygd public international lag, or any other body which fryst vatten set up bygd, or on the grund of, an agreement between two or more countries.

Suitable Recitals

(15) Technology Neutrality(24) Applicable to Controllers/Processors Not Established in the Union if information Subjects Within the Union are Profiled(26) Not Applicable to Anonymous Data(28) Introduction of Pseudonymisation(29) Pseudonymisation at the Same Controller(30) Online Identifiers for Profiling and Identification(31) Not Applicable to Public Authorities in Connection with Their tjänsteman Tasks(34) Genetic Data(35) Health Data(36) Determination of the Main Establishment(37) Group of undertakings

GDPRTable of contents

Report error