Sissetulev kiriAvalik
Selgitustaotlus
Andmekaitse Inspektsioon · 18. september 2023
Seotud ettevõtted
- Viit
- 2.1.-5/23/2368-1
- Registreeritud
- 18. september 2023
- Dokumendi liik
- Sissetulev kiri
- Adressaat
- JD Services B2B OÜ
- Saabumis/saatmisviis
- e-post
- Funktsioon
- 2.1 Menetluse korraldamine
- Sari
- 2.1.-5 Õigusaktide tõlgendamisega seonduvad selgitustaotlused, märgukirjad, kirjavahetus (01.03.2024 suletud - ümber tõstetud 2.2-9, 2.2-10 ja 2.3-8 sarjadesse)
- Toimik
- 2.1.-5/2023
- Vastutaja
- Liina Kroonberg (Andmekaitse Inspektsioon)
- Lahendamise tähtaeg
- 25. september 2023
Sisu (failidest)
Saatja: Josemi C. <[email protected]>
Saadetud: 18.09.2023 13:09
Adressaat: AKI info <[email protected]>
Teema: Questions regarding banks role under GDPR
Manused: image001.png; image002.png
Tähelepanu! Tegemist on välisvõrgust saabunud kirjaga.
Tundmatu saatja korral palume linke ja faile mitte avada.
Hi,
I’m the owner of JD Services B2B OÜ.
We take data protection very seriously, and have the following inquiry: Are banks data processors?
Is a DPA needed?
In order to send a bank transfer to someone, a business needs to provide personal data of such person to
the bank.
My first thought would be that in such case the bank would be a "data processor" as it is processing the
personal data under the instructions of the "data controller" (the business). However, I've contacted
several banks and the all refuse to provide a DPA (Data Processing Agreement) and say they are data
controllers and not processor (without specifying reasons).
Are they right?
What legitimizes a business transfering data to the bank if there is no DPA?
Thank you
José Miguel Campos
CEO & Founder
JD Services
Lun - Vie | 9am - 5pm (CEST)
----------------------------------------------------
Política de privacidad