Model: IoannisKat1/modernbert-embed-base-ft-new
Author: IoannisKat1
Pipeline: sentence-similarity
Library: sentence-transformers
Tags: sentence-transformers, safetensors, modernbert, sentence-similarity, feature-extraction, dense, generated_from_trainer, dataset_size:1627, loss:MatryoshkaLoss, loss:MultipleNegativesRankingLoss, en, arxiv:1908.10084, arxiv:2205.13147, arxiv:1705.00652, base_model:nomic-ai/modernbert-embed-base, base_model:finetune:nomic-ai/modernbert-embed-base, license:apache-2.0, model-index, text-embeddings-inference, endpoints_compatible, region:us
Base models (finetune): id: nomic-ai/modernbert-embed-base
Card metadata: language: en
license: apache-2.0
tags: sentence-transformers, sentence-similarity, feature-extraction, dense, generated_from_trainer, dataset_size:1627, loss:MatryoshkaLoss, loss:MultipleNegativesRankingLoss
base_model: nomic-ai/modernbert-embed-base
widget: source_sentence: When does the supervisory authority provide an opinion on the draft code?
sentences: 1.A transfer of personal data to a third country or an international organisation may take place where the Commission has decided that the third country, a territory or one or more specified sectors within that third country, or the international organisation in question ensures an adequate level of protection. Such a transfer shall not require any specific authorisation.
2.When assessing the adequacy of the level of protection, the Commission shall, in particular, take account of the following elements: (a)  the rule of law, respect for human rights and fundamental freedoms, relevant legislation, both general and sectoral, including concerning public security, defence, national security and criminal law and the access of public authorities to personal data, as well as the implementation of such legislation, data protection rules, professional rules and security measures, including rules for the onward transfer of personal data to another third country or international organisation which are complied with in that country or international organisation, case-law, as well as effective and enforceable data subject rights and effective administrative and judicial redress for the data subjects whose personal data are being transferred; (b)  the existence and effective functioning of one or more independent supervisory authorities in the third country or to which an international organisation is subject, with responsibility for ensuring and enforcing compliance with the data protection rules, including adequate enforcement powers, for assisting and advising the data subjects in exercising their rights and for cooperation with the supervisory authorities of the Member States; and (c)  the international commitments the third country or international organisation concerned has entered into, or other obligations arising from legally binding conventions or instruments as well as from its participation in multilateral or regional systems, in particular in relation to the protection of personal data.
3.The Commission, after assessing the adequacy of the level of protection, may decide, by means of implementing act, that a third country, a territory or one or more specified sectors within a third country, or an international organisation ensures an adequate level of protection within the meaning of paragraph 2 of this Article. The implementing act shall provide for a mechanism for a periodic review, at least every four years, which shall take into account all relevant developments in the third country or international organisation. The implementing act shall specify its territorial and sectoral application and, where applicable, identify the supervisory authority or authorities referred to in point (b) of paragraph 2 of this Article. The implementing act shall be adopted in accordance with the examination procedure referred to in Article 93(2).
4.The Commission shall, on an ongoing basis, monitor developments in third countries and international organisations that could affect the functioning of decisions adopted pursuant to paragraph 3 of this Article and decisions adopted on the basis of Article 25(6) of Directive 95/46/EC.
5.The Commission shall, where available information reveals, in particular following the review referred to in paragraph 3 of this Article, that a third country, a territory or one or more specified sectors within a third country, or an international organisation no longer ensures an adequate level of protection within the meaning of paragraph 2 of this Article, to the extent necessary, repeal, amend or suspend the decision referred to in paragraph 3 of this Article by means of implementing acts without retro-active effect. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 93(2). On duly justified imperative grounds of urgency, the Commission shall adopt immediately applicable implementing acts in accordance with the procedure referred to in Article 93(3).
6.The Commission shall enter into consultations with the third country or international organisation with a view to remedying the situation giving rise to the decision made pursuant to paragraph 5
7.A decision pursuant to paragraph 5 of this Article is without prejudice to transfers of personal data to the third country, a territory or one or more specified sectors within that third country, or the international organisation in question pursuant to Articles 46 to 49
8.The Commission shall publish in the Official Journal of the European Union and on its website a list of the third countries, territories and specified sectors within a third country and international organisations for which it has decided that an adequate level of protection is or is no longer ensured.
9.Decisions adopted by the Commission on the basis of Article 25(6) of Directive 95/46/EC shall remain in force until amended, replaced or repealed by a Commission Decision adopted in accordance with paragraph 3 or 5 of this Article., 1.The Member States, the supervisory authorities, the Board and the Commission shall encourage the drawing up of codes of conduct intended to contribute to the proper application of this Regulation, taking account of the specific features of the various processing sectors and the specific needs of micro, small and medium-sized enterprises.
2.Associations and other bodies representing categories of controllers or processors may prepare codes of conduct, or amend or extend such codes, for the purpose of specifying the application of this Regulation, such as with regard to: (a)  fair and transparent processing; 4.5.2016 L 119/56   (b)  the legitimate interests pursued by controllers in specific contexts; (c)  the collection of personal data; (d)  the pseudonymisation of personal data; (e)  the information provided to the public and to data subjects; (f)  the exercise of the rights of data subjects; (g)  the information provided to, and the protection of, children, and the manner in which the consent of the holders of parental responsibility over children is to be obtained; (h)  the measures and procedures referred to in Articles 24 and 25 and the measures to ensure security of processing referred to in Article 32; (i)  the notification of personal data breaches to supervisory authorities and the communication of such personal data breaches to data subjects; (j)  the transfer of personal data to third countries or international organisations; or (k)  out-of-court proceedings and other dispute resolution procedures for resolving disputes between controllers and data subjects with regard to processing, without prejudice to the rights of data subjects pursuant to Articles 77 and 79
3.In addition to adherence by controllers or processors subject to this Regulation, codes of conduct approved pursuant to paragraph 5 of this Article and having general validity pursuant to paragraph 9 of this Article may also be adhered to by controllers or processors that are not subject to this Regulation pursuant to Article 3 in order to provide appropriate safeguards within the framework of personal data transfers to third countries or international organisations under the terms referred to in point (e) of Article 46(2). Such controllers or processors shall make binding and enforceable commitments, via contractual or other legally binding instruments, to apply those appropriate safeguards including with regard to the rights of data subjects.
4.A code of conduct referred to in paragraph 2 of this Article shall contain mechanisms which enable the body referred to in Article 41(1) to carry out the mandatory monitoring of compliance with its provisions by the controllers or processors which undertake to apply it, without prejudice to the tasks and powers of supervisory authorities competent pursuant to Article 55 or 56
5.Associations and other bodies referred to in paragraph 2 of this Article which intend to prepare a code of conduct or to amend or extend an existing code shall submit the draft code, amendment or extension to the supervisory authority which is competent pursuant to Article 55. The supervisory authority shall provide an opinion on whether the draft code, amendment or extension complies with this Regulation and shall approve that draft code, amendment or extension if it finds that it provides sufficient appropriate safeguards.
6.Where the draft code, or amendment or extension is approved in accordance with paragraph 5, and where the code of conduct concerned does not relate to processing activities in several Member States, the supervisory authority shall register and publish the code.
7.Where a draft code of conduct relates to processing activities in several Member States, the supervisory authority which is competent pursuant to Article 55 shall, before approving the draft code, amendment or extension, submit it in the procedure referred to in Article 63 to the Board which shall provide an opinion on whether the draft code, amendment or extension complies with this Regulation or, in the situation referred to in paragraph 3 of this Article, provides appropriate safeguards.
8.Where the opinion referred to in paragraph 7 confirms that the draft code, amendment or extension complies with this Regulation, or, in the situation referred to in paragraph 3, provides appropriate safeguards, the Board shall submit its opinion to the Commission.
9.The Commission may, by way of implementing acts, decide that the approved code of conduct, amendment or extension submitted to it pursuant to paragraph 8 of this Article have general validity within the Union. Those implementing acts shall be adopted in accordance with the examination procedure set out in Article 93(2)
10.The Commission shall ensure appropriate publicity for the approved codes which have been decided as having general validity in accordance with paragraph
11.The Board shall collate all approved codes of conduct, amendments and extensions in a register and shall make them publicly available by way of appropriate means., A group of undertakings, or a group of enterprises engaged in a joint economic activity, should be able to make use of approved binding corporate rules for its international transfers from the Union to organisations within the same group of undertakings, or group of enterprises engaged in a joint economic activity, provided that such corporate rules include all essential principles and enforceable rights to ensure appropriate safeguards for transfers or categories of transfers of personal data., source_sentence: When was the Regulation intended to contribute to the accomplishment of an area of freedom, security and justice?
sentences: 1.This Regulation applies to the processing of personal data in the context of the activities of an establishment of a controller or a processor in the Union, regardless of whether the processing takes place in the Union or not. 4.5.2016 L 119/32  
2.This Regulation applies to the processing of personal data of data subjects who are in the Union by a controller or processor not established in the Union, where the processing activities are related to: (a)  the offering of goods or services, irrespective of whether a payment of the data subject is required, to such data subjects in the Union; or (b)  the monitoring of their behaviour as far as their behaviour takes place within the Union.
3.This Regulation applies to the processing of personal data by a controller not established in the Union, but in a place where Member State law applies by virtue of public international law., The principles of, and rules on the protection of natural persons with regard to the processing of their personal data should, whatever their nationality or residence, respect their fundamental rights and freedoms, in particular their right to the protection of personal data. This Regulation is intended to contribute to the accomplishment of an area of freedom, security and justice and of an economic union, to economic and social progress, to the strengthening and the convergence of the economies within the internal market, and to the well-being of natural persons., **Court (Civil/Criminal): Civil  
Provisions:  
Time of commission of the act:  
Outcome (not guilty, guilty): Rejects the lawsuit.  
Reasoning:  
Facts: The plaintiff holds account number ....................... at the defendant bank. Following the application/contract dated January 9, 2019, the plaintiff became a subscriber to the alternative service networks provided by the defendant bank through online banking (.........................). In the aforementioned application, the plaintiff stated that her mobile phone (number .................) would be used by the defendant to send additional security codes for the approval of her transactions via .......................... It is noted that the plaintiff received subscriber code .................., thus enabling her to conduct transactions without her physical presence at the branches of the defendant bank, from fixed or mobile devices (computers, smartphones, tablets), by entering her username and password to access her personal account. Regarding the identification methods, these were agreed upon between the parties and are specified depending on the payment method used. More specifically, the plaintiff had installed the application ...................................... on her mobile phone. According to the terms of the above contract between the parties, the defendant bank (to ensure the protection of its customers in using this application) requires three stages of identification: 1) the input of the customer's personal codes (username and password) in the application .........................., 2) the input of a six-digit code (...................) sent via SMS to the mobile number provided by the customer, to complete the login to ............................. and 3) the input of a new six-digit code (.................) sent in a new SMS to the mobile number provided by the customer, to authenticate the device on which the aforementioned application is installed (usually a mobile phone). 

Furthermore, it was established that on October 4, 2021, at 00:07, the plaintiff received a text message (SMS) on her mobile phone (number ...................) with the following content: ".................................", i.e., "..........: a payment was attempted from a new device. If this was not you, please visit...", providing the above link. As she acknowledges in her lawsuit, she followed the link that was sent to her via SMS and entered her login credentials (i.e., username and password) on the (fake) page she was redirected to. Thus, the perpetrators acquired the plaintiff's personal information and subsequently entered it into the application ........................... that they had installed on their own mobile phone. Following this, to complete the second stage of the process, as described above, the defendant bank sent the aforementioned date and time of 00:14, a security code to the plaintiff's mobile phone via SMS, with the content ".................................`." Subsequently, the defendant sent, at 00:17, another SMS to the plaintiff's mobile phone with the security code .................., containing the message ".........................................", to complete the third stage of identification. It is noted that the defendant sent another message to the plaintiff's mobile phone at 00:15, specifically "..........................", which was not used (perhaps because it was entered incorrectly by the plaintiff). It was later proven that the unknown perpetrators charged the plaintiff's account with a total amount of €2,800.00 and an equivalent credit to a bank account held similarly at the defendant bank, with the beneficiary being ............. The plaintiff contacted the defendant, submitting a dispute over the above transactions and simultaneously filed a complaint against any responsible party for the crimes of fraud and embezzlement. The defendant locked the plaintiff's subscription and provided her with new codes, warning her not to use the aforementioned application via her mobile phone unless she scanned it with updated antivirus/antispyware/malware software. Additionally, the defendant froze the account to which her money was transferred, which, as mentioned earlier, belongs to ................., who also stated that she fell victim to electronic fraud, being used by the aforementioned perpetrators as a front person. It was further established that the above-mentioned ......................... consented to the return to the plaintiff of the amount of €239.54, which remained in her account (as part of the aforementioned €2,800.00), while the plaintiff stated in a declaration that after the crediting of her account with the amount of €239.54, she has no further claims against the defendant regarding the above history. From the above proven facts, it was established that the plaintiff accessed the fraudulent page, entering her username and password and subsequently the codes ....., which were sent to her mobile phone by the defendant bank. Regarding the defendant, it was established that through its website ......................, through the login page to ................ and via messages to its subscribers, it informs them in detail about the risks of code interception and the protective measures they should take, while it also informs them with a special announcement about phishing. For this reason, the plaintiff's assertion that the perpetrators used one-time codes ......, violating the defendant's security systems, must be dismissed as unfounded. Therefore, since the defendant successfully identified the plaintiff's identity as well as her mobile phone without any indication of a breach of its electronic systems, the defendant is not liable for the plaintiff's loss from the transfer of funds to an unknown person's account, nor is it responsible for compensating that loss. Given these circumstances, the lawsuit must be dismissed as fundamentally unfounded.**, source_sentence: What is the date of the Official Journal of the European Union mentioned?
sentences: Court (Civil/Criminal): Criminal  
Provisions: Article 386 of the Penal Code  
Time of commission of the act:  
Result (innocent, guilty):  
Reasoning: Conviction for computer fraud committed repeatedly and professionally with a total benefit and damage exceeding €30,000. According to the majority opinion, the charge is substantiated in both its objective and subjective aspects, and the defendant must be declared guilty of the aforementioned criminal acts of fraud by means of a computer, committed repeatedly by a perpetrator acting professionally, where the total financial benefit and corresponding damage exceed the amount of €30,000, as well as for repeated embezzlement.

Facts: The defendant accessed a website using a computer, employing, without the knowledge and consent of the complainants, the access codes for the electronic management system of the bank accounts held by the complainants at a Bank, and transferred money through electronically transmitted orders from the complainants' accounts to her own account. Specifically, during the period from June 2007 to June 2008, after unlawfully acquiring the aforementioned STICK containing the access codes, she accessed a website maintained by ..., using, without the complainants' knowledge (without their consent or approval), the access codes for the electronic management system of the bank accounts held at the aforementioned Bank, transferring through electronically transmitted orders to the joint account number ... of the complainants from bank accounts numbered ..., ..., and ..., the total amount of €55,710, as detailed in the orders, and subsequently, using an ATM card, she gradually withdrew from the aforementioned account number ..., the total amount of €55,710, making 84 individual withdrawals from automatic teller machines. In addition, the defendant, during the period from June 2008 to November 2008, in the same exact manner (through the electronic management system of the bank accounts), transferred through electronically transmitted orders to account number ..., which she had opened at ..., from the complainants' bank accounts numbered ..., ..., ..., ..., and ..., the total amount of €73,942, as detailed in the orders regarding the transfers of these amounts. Furthermore, during the period from February 2008 to November 2008, through multiple acts constituting a continuation of the crime, although she had received from the first complainant ... the amounts of €695.04, €695.04, and €845.04, in order to pay his insurance contributions to O.A.E.E. for the periods of January-February 2008, May-June 2008, and September-October 2008, as well as the amounts of €250 and €280, in order to settle credit card bills for "...", respectively, and from the second complainant ... she received the amounts of €283.64, €419.26, and €385.38, to pay the latter's insurance contributions to O.A.E.E. for the periods of July-August 2007, May-June 2008, September-October 2008, and November-December 2008, as well as the amount of €1,888.03 for the settlement of VAT, she never paid the above amounts to settle the aforementioned obligations, nor did she return them to the complainants, despite being urged to do so, but incorporated them into her assets and wrongfully appropriated them. The defendant denies the charges against her and claims that the withdrawals were made by the second complainant and that all the amounts transferred to her account were transferred to cover the company's expenses and their personal expenses, due to her cohabitation with the second complainant and with his knowledge, with whom she intended to marry. However, this claim is not supported by any evidence; on the contrary, it emerged that she conducted the transfers of the money and withdrawals without the complainants' knowledge, and when she learned that they had been informed about the account movements and met at the Bank, her behavior and demeanor indicated guilt, according to the testimony of the prosecution witness ..., an employee of the Pangrati branch of ..., who saw her on the same day at the aforementioned Bank when she met with the complainants. The ongoing act of fraud using a computer was committed by the defendant professionally, as evidenced by her repeated commission of the act, as well as the infrastructure she had established with the intent of repeated commission, based on a specific plan and methodology (transferring smaller amounts to a joint account of the complainants from the remaining accounts of the latter, and then withdrawing the transferred amounts with an ATM card, as well as directly transferring smaller amounts from the complainants' accounts to her personal account she had opened at the same bank), indicating her purpose to generate income, with the financial benefit she gained, corresponding to the complainants' damage, exceeding a total of €30,000., 1.Without prejudice to the tasks and powers of the competent supervisory authority under Articles 57 and 58, the monitoring of compliance with a code of conduct pursuant to Article 40 may be carried out by a body which has an appropriate level of expertise in relation to the subject-matter of the code and is accredited for that purpose by the competent supervisory authority.
2.A body as referred to in paragraph 1 may be accredited to monitor compliance with a code of conduct where that body has: (a)  demonstrated its independence and expertise in relation to the subject-matter of the code to the satisfaction of the competent supervisory authority; (b)  established procedures which allow it to assess the eligibility of controllers and processors concerned to apply the code, to monitor their compliance with its provisions and to periodically review its operation; (c)  established procedures and structures to handle complaints about infringements of the code or the manner in which the code has been, or is being, implemented by a controller or processor, and to make those procedures and structures transparent to data subjects and the public; and (d)  demonstrated to the satisfaction of the competent supervisory authority that its tasks and duties do not result in a conflict of interests.
3.The competent supervisory authority shall submit the draft criteria for accreditation of a body as referred to in paragraph 1 of this Article to the Board pursuant to the consistency mechanism referred to in Article 63
4.Without prejudice to the tasks and powers of the competent supervisory authority and the provisions of Chapter VIII, a body as referred to in paragraph 1 of this Article shall, subject to appropriate safeguards, take appropriate action in cases of infringement of the code by a controller or processor, including suspension or exclusion of the controller or processor concerned from the code. It shall inform the competent supervisory authority of such actions and the reasons for taking them.
5.The competent supervisory authority shall revoke the accreditation of a body as referred to in paragraph 1 if the conditions for accreditation are not, or are no longer, met or where actions taken by the body infringe this Regulation.
6.This Article shall not apply to processing carried out by public authorities and bodies., In order to create incentives to apply pseudonymisation when processing personal data, measures of pseudonymisation should, whilst allowing general analysis, be possible within the same controller when that controller has taken technical and organisational measures necessary to ensure, for the processing concerned, that this Regulation is implemented, and that additional information for attributing the personal data to a specific data subject is kept separately. The controller processing the personal data should indicate the authorised persons within the same controller. 4.5.2016 L 119/5 Official Journal of the European Union EN, source_sentence: What restriction applies to the amount of personal data processed?
sentences: 1.Personal data shall be: (a)  processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’); (b)  collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes (‘purpose limitation’); (c)  adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’); (d)  accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’); 4.5.2016 L 119/35   (1) Directive (EU) 2015/1535 of the European Parliament and of the Council of 9 September 2015 laying down a procedure for the provision of information in the field of technical regulations and of rules on Information Society services (OJ L 241, 17.9.2015, p. 1). (e)  kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’); (f)  processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
2.The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’)., Any processing of personal data should be lawful and fair. It should be transparent to natural persons that personal data concerning them are collected, used, consulted or otherwise processed and to what extent the personal data are or will be processed. The principle of transparency requires that any information and communication relating to the processing of those personal data be easily accessible and easy to understand, and that clear and plain language be used. That principle concerns, in particular, information to the data subjects on the identity of the controller and the purposes of the processing and further information to ensure fair and transparent processing in respect of the natural persons concerned and their right to obtain confirmation and communication of personal data concerning them which are being processed. Natural persons should be made aware of risks, rules, safeguards and rights in relation to the processing of personal data and how to exercise their rights in relation to such processing. In particular, the specific purposes for which personal data are processed should be explicit and legitimate and determined at the time of the collection of the personal data. The personal data should be adequate, relevant and limited to what is necessary for the purposes for which they are processed. This requires, in particular, ensuring that the period for which the personal data are stored is limited to a strict minimum. Personal data should be processed only if the purpose of the processing could not reasonably be fulfilled by other means. In order to ensure that the personal data are not kept longer than necessary, time limits should be established by the controller for erasure or for a periodic review. Every reasonable step should be taken to ensure that personal data which are inaccurate are rectified or deleted. Personal data should be processed in a manner that ensures appropriate security and confidentiality of the personal data, including for preventing unauthorised access to or use of personal data and the equipment used for the processing., **Court (Civil/Criminal): Criminal**  
**Provisions:**  
**Time of commission of the act:**  
**Outcome (not guilty, guilty):** Guilty  
**Reasoning:** Conviction for money laundering from criminal activity as a profession. Bank fraud using electronic means as the primary crime. The location of the fraud is the USA.  
**Facts:** Illegal electronic money transfer order (remittance) from a third party (non-existent beneficiary of a foreign bank account) to the account of the perpetrator (legal representative of a company) in Greece. Criminal Procedure.  
Intervention of a third party - a non-party and beneficiary of the funds, namely the subject of the crime. Civil claim presented by the foreign bank for monetary compensation due to moral damage. Awarding monetary compensation to the civil claimant. Intervention of a third party, specifically an insurance company (providing security to the foreign bank, among other things, for the bank's civil liability to its depositors due to the electronic transfer of their remittances to third parties, either natural or legal entities) as the primary and beneficiary of the funds from the main crime of fraud. Compensation of the bank's clients by the bank and, subsequently, receipt of this amount from the insurance company. Insurance subrogation, specifically the subrogation of the insurance company to the rights and obligations of the bank. Request from the third party for the lifting of the freeze on the bank account and the return of the frozen funds. Accepts the intervention of the insurance company. Orders the lifting of the freeze from the account and the return of the amount to the intervening company. Independent claims of the defendant. Claim regarding the lifting of the criminal liability, due to the absence of criminal prosecution in America within the legal period of 3 years. The independent claim is rejected, as the provisions regarding the deadline for the initiation of criminal proceedings, according to the Greek Institute of International and Foreign Law, do not apply while the perpetrator is evading arrest. Imposition of a 10-year prison sentence and deprivation of civil rights for 3 years. Orders lifelong expulsion from the country after the complete serving of the sentence. No suspensive effect of the defendant's appeal., source_sentence: What action was the plaintiff urged to complete within the next 24 hours?
sentences: **Court (Civil/Criminal): Civil**

**Provisions:**

**Time of commission of the act:**

**Outcome (not guilty, guilty):**

**Rationale:**

**Facts:**
The plaintiff holds credit card number ............ with the defendant banking corporation. Based on the application for alternative networks dated 19/7/2015 with number ......... submitted at a branch of the defendant, he was granted access to the electronic banking service (e-banking) to conduct banking transactions (debit, credit, updates, payments) remotely. On 30/11/2020, the plaintiff fell victim to electronic fraud through the "phishing" method, whereby an unknown perpetrator managed to withdraw a total amount of €3,121.75 from the aforementioned credit card. Specifically, the plaintiff received an email at 1:35 PM on 29/11/2020 from sender ...... with address ........, informing him that due to an impending system change, he needed to verify the mobile phone number linked to the credit card, urging him to complete the verification process within the next 24 hours by following a link titled ........; otherwise, his account would be locked for security reasons. The plaintiff read this email on the afternoon of 30 November 2020 and, believing it was from the defendant, followed the instructions and proceeded via the provided link to a website that was identical (a clone) to that of the defendant. On this page, he was asked to enter the six-digit security code (.........) that had just been sent to his mobile phone by the defendant at 3:41 PM, with the note that it was an activation code for his ........ card at ........., which he entered.

Subsequently, the plaintiff received, according to his statements, a new email (not submitted), which requested him to enter the details of the aforementioned credit card, specifically the name of the cardholder and the card number, not the PIN, which he also entered, convinced that he was within the online environment of the defendant. Then, at 3:47 PM, he received a message on his mobile phone from the defendant containing the exact same content as the one he received at 3:41 PM, while at 3:50 PM he received a message stating that the activation of his ......... card at ....... had been completed. Once the plaintiff read this, he became concerned that something was not right, and immediately called (at 4:41 PM) the defendant's call center to inform them. There, the employees, with whom he finally connected at 5:04 PM due to high call center volume, advised him to delete the relevant emails, cancel his credit card, change his access passwords for the service, and submit a dispute request regarding the conducted transactions. The plaintiff electronically sent this request to the defendant, disputing the detailed transactions amounting to €3,121.75, which were conducted on 30/11/2020 during the time frame of 16:37:45-16:43:34 PM, arguing that he had neither performed them himself nor authorized anyone else to do so. The plaintiff specifically disputed the following transactions, as evidenced by the account activity of the disputed credit card during the aforementioned timeframe: a) transaction number ......... amounting to €150.62 conducted on 30/11/2020 at 4:43:34 PM, b) transaction number ........ amounting to €293.20 conducted on 30/11/2020 at 4:42:40 PM, c) transaction number ............ amounting to €295.21 conducted on 30/11/2020 at 4:42:10 PM, d) transaction number .......... amounting to €299.22 conducted on 30/11/2020 at 4:41:31 PM, e) transaction number ........ amounting to €297.21 conducted on 30/11/2020 at 4:41:01 PM, f) transaction number ........ amounting to €299.22 conducted on 30/11/2020 at 4:40:27 PM, g) transaction number ....... amounting to €299.22 conducted on 30/11/2020 at 4:39:55 PM, h) transaction number ...... amounting to €299.22 conducted on 30/11/2020 at 4:39:22 PM, i) transaction number ......... amounting to €297.22 conducted on 30/11/2020 at 4:38:52 PM, j) transaction number ......... amounting to €295.21 conducted on 30/11/2020 at 4:38:17 PM, and k) transaction number ......... amounting to €296.21 conducted on 30/11/2020 at 4:37:45 PM. In its response letter dated 21/12/2020, the defendant denied responsibility for the costs of the aforementioned transactions, placing the entire blame on the plaintiff for the leak of his card details and security code to the fraudulent page. The plaintiff, completely denying any fault for the conducted transactions, repeatedly contacted the defendant, both by phone and via email (see emails dated 15/1/2021 and 11/2/2021), while on 2/3/2021, he electronically sent a report dated 1/03/2021 to the Consumer Advocate’s email address, recounting the events and requesting that the aforementioned Independent Authority intervene to have the disputed debt canceled. In its letter with reference number ...../27.04.2021, the aforementioned Independent Authority informed the plaintiff that the case was outside its mediating role and was therefore archived. Subsequently, the plaintiff sent the defendant on 5/3/2021 his extrajudicial statement dated 4/3/2021, calling upon it to fully cancel the debt of €3,121.75 that had been unjustly incurred against him within two days and to immediately instruct the representatives of the collection agency working with it to cease contacting him regarding the disputed case. The defendant sent the plaintiff a message on his mobile phone on 20/04/2021 informing him that his case was still being processed due to lengthy operational requirements, while on 23/04/2021, via email, it informed him that considering their good cooperation and his efforts to keep them updated, it had reviewed his case and decided to refund him the amounts of the transactions that were conducted after his contact with their representatives on 30/11/2020 at 4:41 PM, totaling €1,038.25, specifically the following: a) transaction of €150.62 conducted on 30/11/2020 at 4:43 PM, b) transaction of €295.21 conducted on 30/11/2020 at 4:42 PM, c) transaction of €293.20 conducted on 30/11/2020 at 4:42 PM, and d) transaction of €299.22 conducted on 30/11/2020 at 4:41 PM. Beyond this, the defendant refused to refund the plaintiff the amount of the remaining transactions conducted on 30/11/2020, totaling €2,376.08 (and not €2,376.48 as incorrectly stated by the plaintiff in his lawsuit), which the plaintiff ultimately fully paid, transferring €2,342.77 to the defendant on 7/06/2021 and €33.31 on 15/06/2021 (see related deposit receipts)., 1.Without prejudice to other tasks set out under this Regulation, each supervisory authority shall on its territory: (a)  monitor and enforce the application of this Regulation; (b)  promote public awareness and understanding of the risks, rules, safeguards and rights in relation to processing. Activities addressed specifically to children shall receive specific attention; (c)  advise, in accordance with Member State law, the national parliament, the government, and other institutions and bodies on legislative and administrative measures relating to the protection of natural persons' rights and freedoms with regard to processing; (d)  promote the awareness of controllers and processors of their obligations under this Regulation; (e)  upon request, provide information to any data subject concerning the exercise of their rights under this Regulation and, if appropriate, cooperate with the supervisory authorities in other Member States to that end; (f)  handle complaints lodged by a data subject, or by a body, organisation or association in accordance with Article 80, and investigate, to the extent appropriate, the subject matter of the complaint and inform the complainant of the progress and the outcome of the investigation within a reasonable period, in particular if further investigation or coordination with another supervisory authority is necessary; (g)  cooperate with, including sharing information and provide mutual assistance to, other supervisory authorities with a view to ensuring the consistency of application and enforcement of this Regulation; (h)  conduct investigations on the application of this Regulation, including on the basis of information received from another supervisory authority or other public authority; (i)  monitor relevant developments, insofar as they have an impact on the protection of personal data, in particular the development of information and communication technologies and commercial practices; (j)  adopt standard contractual clauses referred to in Article 28(8) and in point (d) of Article 46(2); (k)  establish and maintain a list in relation to the requirement for data protection impact assessment pursuant to Article 35(4); (l)  give advice on the processing operations referred to in Article 36(2); (m)  encourage the drawing up of codes of conduct pursuant to Article 40(1) and provide an opinion and approve such codes of conduct which provide sufficient safeguards, pursuant to Article 40(5); (n)  encourage the establishment of data protection certification mechanisms and of data protection seals and marks pursuant to Article 42(1), and approve the criteria of certification pursuant to Article 42(5); (o)  where applicable, carry out a periodic review of certifications issued in accordance with Article 42(7); 4.5.2016 L 119/68   (p)  draft and publish the criteria for accreditation of a body for monitoring codes of conduct pursuant to Article 41 and of a certification body pursuant to Article 43; (q)  conduct the accreditation of a body for monitoring codes of conduct pursuant to Article 41 and of a certification body pursuant to Article 43; (r)  authorise contractual clauses and provisions referred to in Article 46(3); (s)  approve binding corporate rules pursuant to Article 47; (t)  contribute to the activities of the Board; (u)  keep internal records of infringements of this Regulation and of measures taken in accordance with Article 58(2); and (v)  fulfil any other tasks related to the protection of personal data.
2.Each supervisory authority shall facilitate the submission of complaints referred to in point (f) of paragraph 1 by measures such as a complaint submission form which can also be completed electronically, without excluding other means of communication.
3.The performance of the tasks of each supervisory authority shall be free of charge for the data subject and, where applicable, for the data protection officer.
4.Where requests are manifestly unfounded or excessive, in particular because of their repetitive character, the supervisory authority may charge a reasonable fee based on administrative costs, or refuse to act on the request. The supervisory authority shall bear the burden of demonstrating the manifestly unfounded or excessive character of the request., 1.Where personal data have not been obtained from the data subject, the controller shall provide the data subject with the following information: (a)  the identity and the contact details of the controller and, where applicable, of the controller's representative; (b)  the contact details of the data protection officer, where applicable; (c)  the purposes of the processing for which the personal data are intended as well as the legal basis for the processing; (d)  the categories of personal data concerned; (e)  the recipients or categories of recipients of the personal data, if any; 4.5.2016 L 119/41   (f) where applicable, that the controller intends to transfer personal data to a recipient in a third country or international organisation and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable safeguards and the means to obtain a copy of them or where they have been made available.
2.In addition to the information referred to in paragraph 1, the controller shall provide the data subject with the following information necessary to ensure fair and transparent processing in respect of the data subject: (a)  the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period; (b)  where the processing is based on point (f) of Article 6(1), the legitimate interests pursued by the controller or by a third party; (c)  the existence of the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject and to object to processing as well as the right to data portability; (d)  where processing is based on point (a) of Article 6(1) or point (a) of Article 9(2), the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; (e)  the right to lodge a complaint with a supervisory authority; (f)  from which source the personal data originate, and if applicable, whether it came from publicly accessible sources; (g)  the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
3.The controller shall provide the information referred to in paragraphs 1 and 2: (a)  within a reasonable period after obtaining the personal data, but at the latest within one month, having regard to the specific circumstances in which the personal data are processed; (b)  if the personal data are to be used for communication with the data subject, at the latest at the time of the first communication to that data subject; or (c)  if a disclosure to another recipient is envisaged, at the latest when the personal data are first disclosed.
4.Where the controller intends to further process the personal data for a purpose other than that for which the personal data were obtained, the controller shall provide the data subject prior to that further processing with information on that other purpose and with any relevant further information as referred to in paragraph 2
5.Paragraphs 1 to 4 shall not apply where and insofar as: (a)  the data subject already has the information; (b)  the provision of such information proves impossible or would involve a disproportionate effort, in particular for processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, subject to the conditions and safeguards referred to in Article 89(1) or in so far as the obligation referred to in paragraph 1 of this Article is likely to render impossible or seriously impair the achievement of the objectives of that processing. In such cases the controller shall take appropriate measures to protect the data subject's rights and freedoms and legitimate interests, including making the information publicly available; (c)  obtaining or disclosure is expressly laid down by Union or Member State law to which the controller is subject and which provides appropriate measures to protect the data subject's legitimate interests; or (d)  where the personal data must remain confidential subject to an obligation of professional secrecy regulated by Union or Member State law, including a statutory obligation of secrecy. 4.5.2016 L 119/42
pipeline_tag: sentence-similarity
library_name: sentence-transformers
metrics: cosine_accuracy@1, cosine_accuracy@3, cosine_accuracy@5, cosine_accuracy@10, cosine_precision@1, cosine_precision@3, cosine_precision@5, cosine_precision@10, cosine_recall@1, cosine_recall@3, cosine_recall@5, cosine_recall@10, cosine_ndcg@10, cosine_mrr@10, cosine_map@100
model-index: name: modernbert_embed_base Finetuned on Data
results: task: type: information-retrieval
name: Information Retrieval
dataset: name: dim 768
type: dim_768
metrics: type: cosine_accuracy@1
value: 0.515970515970516
name: Cosine Accuracy@1
verified: no, type: cosine_accuracy@3
value: 0.5675675675675675
name: Cosine Accuracy@3
verified: no, type: cosine_accuracy@5
value: 0.5945945945945946
name: Cosine Accuracy@5
verified: no, type: cosine_accuracy@10
value: 0.6314496314496314
name: Cosine Accuracy@10
verified: no, type: cosine_precision@1
value: 0.515970515970516
name: Cosine Precision@1
verified: no, type: cosine_precision@3
value: 0.5069615069615069
name: Cosine Precision@3
verified: no, type: cosine_precision@5
value: 0.4810810810810811
name: Cosine Precision@5
verified: no, type: cosine_precision@10
value: 0.41990171990171987
name: Cosine Precision@10
verified: no, type: cosine_recall@1
value: 0.09222250249271509
name: Cosine Recall@1
verified: no, type: cosine_recall@3
value: 0.24131830337894114
name: Cosine Recall@3
verified: no, type: cosine_recall@5
value: 0.32843376342119
name: Cosine Recall@5
verified: no, type: cosine_recall@10
value: 0.4384109730265887
name: Cosine Recall@10
verified: no, type: cosine_ndcg@10
value: 0.5731083245176737
name: Cosine Ndcg@10
verified: no, type: cosine_mrr@10
value: 0.5448012948012949
name: Cosine Mrr@10
verified: no, type: cosine_map@100
value: 0.62134226097305
name: Cosine Map@100
verified: no, task: type: information-retrieval
name: Information Retrieval
dataset: name: dim 512
type: dim_512
metrics: type: cosine_accuracy@1
value: 0.5061425061425061
name: Cosine Accuracy@1
verified: no, type: cosine_accuracy@3
value: 0.5454545454545454
name: Cosine Accuracy@3
verified: no, type: cosine_accuracy@5
value: 0.5847665847665847
name: Cosine Accuracy@5
verified: no, type: cosine_accuracy@10
value: 0.6240786240786241
name: Cosine Accuracy@10
verified: no, type: cosine_precision@1
value: 0.5061425061425061
name: Cosine Precision@1
verified: no, type: cosine_precision@3
value: 0.4922194922194922
name: Cosine Precision@3
verified: no, type: cosine_precision@5
value: 0.4678132678132678
name: Cosine Precision@5
verified: no, type: cosine_precision@10
value: 0.4100737100737101
name: Cosine Precision@10
verified: no, type: cosine_recall@1
value: 0.09254312025038411
name: Cosine Recall@1
verified: no, type: cosine_recall@3
value: 0.23505276731248995
name: Cosine Recall@3
verified: no, type: cosine_recall@5
value: 0.32115776460787704
name: Cosine Recall@5
verified: no, type: cosine_recall@10
value: 0.43125363140039286
name: Cosine Recall@10
verified: no, type: cosine_ndcg@10
value: 0.562063599044297
name: Cosine Ndcg@10
verified: no, type: cosine_mrr@10
value: 0.5338169338169338
name: Cosine Mrr@10
verified: no, type: cosine_map@100
value: 0.6106843063225947
name: Cosine Map@100
verified: no, task: type: information-retrieval
name: Information Retrieval
dataset: name: dim 256
type: dim_256
metrics: type: cosine_accuracy@1
value: 0.4987714987714988
name: Cosine Accuracy@1
verified: no, type: cosine_accuracy@3
value: 0.5503685503685504
name: Cosine Accuracy@3
verified: no, type: cosine_accuracy@5
value: 0.5675675675675675
name: Cosine Accuracy@5
verified: no, type: cosine_accuracy@10
value: 0.5896805896805897
name: Cosine Accuracy@10
verified: no, type: cosine_precision@1
value: 0.4987714987714988
name: Cosine Precision@1
verified: no, type: cosine_precision@3
value: 0.48894348894348894
name: Cosine Precision@3
verified: no, type: cosine_precision@5
value: 0.4614250614250614
name: Cosine Precision@5
verified: no, type: cosine_precision@10
value: 0.39828009828009825
name: Cosine Precision@10
verified: no, type: cosine_recall@1
value: 0.09151564610770621
name: Cosine Recall@1
verified: no, type: cosine_recall@3
value: 0.23305522808140838
name: Cosine Recall@3
verified: no, type: cosine_recall@5
value: 0.3163318642921648
name: Cosine Recall@5
verified: no, type: cosine_recall@10
value: 0.42340190169053793
name: Cosine Recall@10
verified: no, type: cosine_ndcg@10
value: 0.548808809551761
name: Cosine Ndcg@10
verified: no, type: cosine_mrr@10
value: 0.5232342732342733
name: Cosine Mrr@10
verified: no, type: cosine_map@100
value: 0.6027731105356272
name: Cosine Map@100
verified: no, task: type: information-retrieval
name: Information Retrieval
dataset: name: dim 128
type: dim_128
metrics: type: cosine_accuracy@1
value: 0.4619164619164619
name: Cosine Accuracy@1
verified: no, type: cosine_accuracy@3
value: 0.5135135135135135
name: Cosine Accuracy@3
verified: no, type: cosine_accuracy@5
value: 0.5331695331695332
name: Cosine Accuracy@5
verified: no, type: cosine_accuracy@10
value: 0.5700245700245701
name: Cosine Accuracy@10
verified: no, type: cosine_precision@1
value: 0.4619164619164619
name: Cosine Precision@1
verified: no, type: cosine_precision@3
value: 0.4561834561834562
name: Cosine Precision@3
verified: no, type: cosine_precision@5
value: 0.42997542997543
name: Cosine Precision@5
verified: no, type: cosine_precision@10
value: 0.3764127764127764
name: Cosine Precision@10
verified: no, type: cosine_recall@1
value: 0.08322036542606188
name: Cosine Recall@1
verified: no, type: cosine_recall@3
value: 0.21423574124076167
name: Cosine Recall@3
verified: no, type: cosine_recall@5
value: 0.29035499254726793
name: Cosine Recall@5
verified: no, type: cosine_recall@10
value: 0.3925224035919075
name: Cosine Recall@10
verified: no, type: cosine_ndcg@10
value: 0.515312205174379
name: Cosine Ndcg@10
verified: no, type: cosine_mrr@10
value: 0.48871046371046367
name: Cosine Mrr@10
verified: no, type: cosine_map@100
value: 0.5673270865883646
name: Cosine Map@100
verified: no, task: type: information-retrieval
name: Information Retrieval
dataset: name: dim 64
type: dim_64
metrics: type: cosine_accuracy@1
value: 0.4201474201474201
name: Cosine Accuracy@1
verified: no, type: cosine_accuracy@3
value: 0.45454545454545453
name: Cosine Accuracy@3
verified: no, type: cosine_accuracy@5
value: 0.47665847665847666
name: Cosine Accuracy@5
verified: no, type: cosine_accuracy@10
value: 0.5061425061425061
name: Cosine Accuracy@10
verified: no, type: cosine_precision@1
value: 0.4201474201474201
name: Cosine Precision@1
verified: no, type: cosine_precision@3
value: 0.4103194103194103
name: Cosine Precision@3
verified: no, type: cosine_precision@5
value: 0.3857493857493858
name: Cosine Precision@5
verified: no, type: cosine_precision@10
value: 0.3383292383292383
name: Cosine Precision@10
verified: no, type: cosine_recall@1
value: 0.07519707490277137
name: Cosine Recall@1
verified: no, type: cosine_recall@3
value: 0.1897854764025658
name: Cosine Recall@3
verified: no, type: cosine_recall@5
value: 0.25337663940512173
name: Cosine Recall@5
verified: no, type: cosine_recall@10
value: 0.3453812424382071
name: Cosine Recall@10
verified: no, type: cosine_ndcg@10
value: 0.46144253459547774
name: Cosine Ndcg@10
verified: no, type: cosine_mrr@10
value: 0.4411089661089661
name: Cosine Mrr@10
verified: no, type: cosine_map@100
value: 0.511857180644301
name: Cosine Map@100
verified: no
Likes: 0 | All-time downloads: 137
Created: 2025-11-10 22:48:49