dokumendiregister.ee
Sissetulev kiriAvalik

Selgitustaotlus

Andmekaitse Inspektsioon · 18. september 2023
Seotud ettevõtted
Viit
2.1.-5/23/2368-1
Registreeritud
18. september 2023
Dokumendi liik
Sissetulev kiri
Adressaat
JD Services B2B OÜ
Saabumis/saatmisviis
e-post
Funktsioon
2.1 Menetluse korraldamine
Sari
2.1.-5 Õigusaktide tõlgendamisega seonduvad selgitustaotlused, märgukirjad, kirjavahetus (01.03.2024 suletud - ümber tõstetud 2.2-9, 2.2-10 ja 2.3-8 sarjadesse)
Toimik
2.1.-5/2023
Vastutaja
Liina Kroonberg (Andmekaitse Inspektsioon)
Lahendamise tähtaeg
25. september 2023

Failid

Sisu (failidest)

Saatja: Josemi C. <[email protected]> Saadetud: 18.09.2023 13:09 Adressaat: AKI info <[email protected]> Teema: Questions regarding banks role under GDPR Manused: image001.png; image002.png Tähelepanu! Tegemist on välisvõrgust saabunud kirjaga. Tundmatu saatja korral palume linke ja faile mitte avada. Hi, I’m the owner of JD Services B2B OÜ. We take data protection very seriously, and have the following inquiry: Are banks data processors? Is a DPA needed? In order to send a bank transfer to someone, a business needs to provide personal data of such person to the bank. My first thought would be that in such case the bank would be a "data processor" as it is processing the personal data under the instructions of the "data controller" (the business). However, I've contacted several banks and the all refuse to provide a DPA (Data Processing Agreement) and say they are data controllers and not processor (without specifying reasons). Are they right? What legitimizes a business transfering data to the bank if there is no DPA? Thank you José Miguel Campos CEO & Founder JD Services Lun - Vie | 9am - 5pm (CEST) ---------------------------------------------------- Política de privacidad
Allikas: Andmekaitse Inspektsioon dokumendiregister →