Model: IoannisKat1/bge-m3-ft-new
Author: IoannisKat1
Pipeline: sentence-similarity
Library: sentence-transformers
Tags: sentence-transformers, safetensors, xlm-roberta, sentence-similarity, feature-extraction, dense, generated_from_trainer, dataset_size:1627, loss:MatryoshkaLoss, loss:MultipleNegativesRankingLoss, en, arxiv:1908.10084, arxiv:2205.13147, arxiv:1705.00652, base_model:BAAI/bge-m3, base_model:finetune:BAAI/bge-m3, license:apache-2.0, model-index, text-embeddings-inference, endpoints_compatible, region:us
Base models (finetune): id: BAAI/bge-m3
Card metadata: language: en
license: apache-2.0
tags: sentence-transformers, sentence-similarity, feature-extraction, dense, generated_from_trainer, dataset_size:1627, loss:MatryoshkaLoss, loss:MultipleNegativesRankingLoss
base_model: BAAI/bge-m3
widget: source_sentence: What does paragraph 1 not apply to?
sentences: 1.Each supervisory authority shall be competent for the performance of the tasks assigned to and the exercise of the powers conferred on it in accordance with this Regulation on the territory of its own Member State.
2.Where processing is carried out by public authorities or private bodies acting on the basis of point (c) or (e) of Article 6(1), the supervisory authority of the Member State concerned shall be competent. In such cases Article 56 does not apply.
3.Supervisory authorities shall not be competent to supervise processing operations of courts acting in their judicial capacity., 1.Processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation shall be prohibited.
2.Paragraph 1 shall not apply if one of the following applies: (a)  the data subject has given explicit consent to the processing of those personal data for one or more specified purposes, except where Union or Member State law provide that the prohibition referred to in paragraph 1 may not be lifted by the data subject; (b)  processing is necessary for the purposes of carrying out the obligations and exercising specific rights of the controller or of the data subject in the field of employment and social security and social protection law in so far as it is authorised by Union or Member State law or a collective agreement pursuant to Member State law providing for appropriate safeguards for the fundamental rights and the interests of the data subject; (c)  processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent; (d)  processing is carried out in the course of its legitimate activities with appropriate safeguards by a foundation, association or any other not-for-profit body with a political, philosophical, religious or trade union aim and on condition that the processing relates solely to the members or to former members of the body or to persons who have regular contact with it in connection with its purposes and that the personal data are not disclosed outside that body without the consent of the data subjects; (e)  processing relates to personal data which are manifestly made public by the data subject; (f)  processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity; (g)  processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject; (h)  processing is necessary for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards referred to in paragraph 3; (i)  processing is necessary for reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care and of medicinal products or medical devices, on the basis of Union or Member State law which provides for suitable and specific measures to safeguard the rights and freedoms of the data subject, in particular professional secrecy; 4.5.2016 L 119/38   (j)  processing is necessary for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) based on Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject.
3.Personal data referred to in paragraph 1 may be processed for the purposes referred to in point (h) of paragraph 2 when those data are processed by or under the responsibility of a professional subject to the obligation of professional secrecy under Union or Member State law or rules established by national competent bodies or by another person also subject to an obligation of secrecy under Union or Member State law or rules established by national competent bodies.
4.Member States may maintain or introduce further conditions, including limitations, with regard to the processing of genetic data, biometric data or data concerning health., Any person who, in contravention of the provisions of this law or of the provisions of lawfully ratified multilateral international conventions on the protection of copyright, unlawfully makes a fixation of a work or of copies, reproduces them directly or indirectly, temporarily or permanently in any form, in whole or in part, translates, adapts, alters or transforms them, or distributes them to the public by sale or other means, or possesses with the intent of distributing them, rents, performs in public, broadcasts by radio or television or any other means, communicates to the public works or copies by any means, imports copies of a work illegally produced abroad without the consent of the author and, in general, exploits works, reproductions or copies being the object of copyright or acts against the moral right of the author to decide freely on the publication and the presentation of his work to the public without additions or deletions, shall be liable to imprisonment of no less than a year and to a fine from 2.900-15.000 Euro.
Without the permission of the performers: fixes their performance; directly or indirectly, temporarily or permanently reproduces by any means and form, in whole or in part, the fixation of their performance; distributes to the public the fixation of their performance or possesses them with the purpose of distribution; rents the fixation of their performance; broadcasts by radio and television by any means, the live performance, unless such broadcasting is rebroadcasting of a legitimate broadcasting; communicates to the public the live performance made by any means, except radio and television broadcasting; makes available to the public, by wire or wireless means, in such a way that members of the public may access them from a place and at a time individually chosen by them, the fixation of their performance.
Without the permission of phonogram producers (producers of sound recordings): directly or indirectly, temporarily or permanently reproduces by any means and form, in whole or in part, their phonograms; distributes to the public the above recordings, or possesses them with the purpose of distribution; rents the said recordings; makes available to the public, by wire or wireless means, in such a way that members of the public may access them from a place and at a time individually chosen by them, their phonograms; imports the said recordings produced abroad without their consent.
Without the permission of producers of audiovisual works (producers of visual or sound and visual recordings): directly or indirectly, temporarily or permanently reproduces by any means and form, in whole or in part, the original and the copies of their films; distributes to the public the above recordings, including the copies thereof, or possesses them with the purpose of distribution; rents the said recordings; makes available to the public, by wire or wireless means, in such a way that members of the public may access them from a place and at a time individually chosen by them, the original and the copies of their films; imports the said recordings produced abroad without their consent; broadcasts by radio or television by any means including satellite transmission and cable retransmission, as well as the communication to the public.
Without the permission of radio and television organizations: rebroadcasts their broadcasts by any means; presents their broadcasts to the public in places accessible to the public against payment of an entrance fee; fixes their broadcasts on sound or sound and visual recordings, regardless of whether the broadcasts are transmitted by wire or by the air, including by cable or satellite; directly or indirectly, temporarily or permanently reproduces by any means and form, in whole or in part, the fixation of their broadcasts; distributes to the public the recordings containing the fixation or their broadcasts; rents the recordings containing the fixation of their broadcasts; makes available to the public, by wire or wireless means, in such a way that members of the public may access them from a place and at a time individually chosen by them, the fixation of their broadcasts.
If the financial gain sought or the damage caused by the perpetration of an act listed in paragraphs (1) and (2), above, is particularly great, the sanction shall be not less than two years imprisonment and a fine of from 2 to 10 million drachmas. If the guilty party has perpetrated any of the aforementioned acts by profession or at a commercial scale or if the circumstances in connection with the perpetration of the act indicate that the guilty party poses a serious threat to the protection of copyright or related rights, the sanction shall be imprisonment of up to ten (10) years and a fine of from 5 to 10 million drachmas, together with the withdrawal of the trading license of the undertaking which has served as the vehicle for the act. The act shall be likewise deemed to have been perpetrated by way of standard practice if the guilty party has on a previous occasion been convicted of a contravention pursuant to the provisions of the Article or for a violation of the preceding copyright legislation and sentenced to a non-redeemable period of imprisonment. Any infringement of copyright and related rights in the form of felony is tried by the competent Three-member Court of Appeal for Felonies.
Any person who did not pay the remuneration provided for by Article 18, paragraph (3) hereof to a collecting society is punished with the sanction of paragraph (1), (2) and (3). The same sentence is imposed on the debtor who, after the issuance of the decision of the one-member first instance court, does not submit the declaration under the provisions of article 18, par. 6, of this law.
The sanctions specified in paragraph (1), above, shall be applicable likewise to any person who: uses or distributes, or possesses with the intent to distribute, any system or means whose sole purpose is to facilitate the unpermitted removal or neutralization of a technical system used to protect a computer program; manufactures or imports or distributes, or possesses with intent to distribute, equipment and other materials utilizable for the reproduction of a work which do not conform to the specifications determined pursuant to Article 59 of this Law; manufactures or imports or distributes, or possesses with intent to distribute, objects which can thwart the efficacy of the above-mentioned specifications, or engages in an act which can have that result; reproduces or uses a work without utilizing the equipment or without applying the systems specified pursuant to Article 60 of this Law; distributes, or possesses with intent to distribute, a phonogram or film without the special mark or control label specified pursuant to Article 61 of this Law.
Where a sentence of imprisonment is imposed with the option of redeemability, the sum payable for the redemption shall be 10 times the sum specified as per the case in the Penal Code.
Where mitigating circumstances exist, the fine imposed shall not be less than half of the minimum fine imposable as per the case under this Law.
Any person who proceeds to authorized temporary or permanent reproduction of the database, translation, adaptation, arrangement and any other alteration of the database, distribution to the public of the database or of copies thereof, communication, display or performance of the database to the public, is punished by imprisonment of at least one (1) year and a fine of one (1) to five (5) million drachmas.
Any person who proceeds to extraction and/or re-utilization of the whole or of a substantial part of the contents of the database without the authorization of the author thereof, is punished by imprisonment of at least one (1) year and a fine of one (1) to five (5) million drachmas (article 12 of Directive 96/9).
When the object of the infringement refers to computer software, the culpable character of the action, as described in paragraph 1 of article 65A and under the prerequisites provided there, is raised under the condition that the infringer proceeds in the unreserved payment of the administrative fee and the infringement concerns a quantity of up to 50 programs.
When the object of infringement concerns recordings of sound in which a work protected by copyright law has been recorded, the unreserved payment of an administrative fee according to the stipulation of par.2 of article 65A and under the prerequisites provided there, the culpable character of the action is raised under the condition that the infringement concerns a quantity of up to five hundred (500) illegal sound recording carriers.
The payment of the administrative fee and the raising of the culpable character of the action, do not relieve the infringers from the duty of buying off the copyright and related rights or from the duty of compensating and paying the rest expenses to the holders of these rights, according to the provisions of the relevant laws.
In case of recidivism during the same financial year the administrative fee provided for by article 65A doubles.
, source_sentence: Should the imposition of criminal penalties lead to a breach of the principle of ne bis in idem?
sentences: 1.In order to ensure the correct and consistent application of this Regulation in individual cases, the Board shall adopt a binding decision in the following cases: (a)  where, in a case referred to in Article 60(4), a supervisory authority concerned has raised a relevant and reasoned objection to a draft decision of the lead authority or the lead authority has rejected such an objection as being not relevant or reasoned. The binding decision shall concern all the matters which are the subject of the relevant and reasoned objection, in particular whether there is an infringement of this Regulation; 4.5.2016 L 119/74   (b)  where there are conflicting views on which of the supervisory authorities concerned is competent for the main establishment; (c)  where a competent supervisory authority does not request the opinion of the Board in the cases referred to in Article 64(1), or does not follow the opinion of the Board issued under Article 64. In that case, any supervisory authority concerned or the Commission may communicate the matter to the Board.
2.The decision referred to in paragraph 1 shall be adopted within one month from the referral of the subject-matter by a two-thirds majority of the members of the Board. That period may be extended by a further month on account of the complexity of the subject-matter. The decision referred to in paragraph 1 shall be reasoned and addressed to the lead supervisory authority and all the supervisory authorities concerned and binding on them.
3.Where the Board has been unable to adopt a decision within the periods referred to in paragraph 2, it shall adopt its decision within two weeks following the expiration of the second month referred to in paragraph 2 by a simple majority of the members of the Board. Where the members of the Board are split, the decision shall by adopted by the vote of its Chair.
4.The supervisory authorities concerned shall not adopt a decision on the subject matter submitted to the Board under paragraph 1 during the periods referred to in paragraphs 2 and 3
5.The Chair of the Board shall notify, without undue delay, the decision referred to in paragraph 1 to the supervisory authorities concerned. It shall inform the Commission thereof. The decision shall be published on the website of the Board without delay after the supervisory authority has notified the final decision referred to in paragraph 6
6.The lead supervisory authority or, as the case may be, the supervisory authority with which the complaint has been lodged shall adopt its final decision on the basis of the decision referred to in paragraph 1 of this Article, without undue delay and at the latest by one month after the Board has notified its decision. The lead supervisory authority or, as the case may be, the supervisory authority with which the complaint has been lodged, shall inform the Board of the date when its final decision is notified respectively to the controller or the processor and to the data subject. The final decision of the supervisory authorities concerned shall be adopted under the terms of Article 60(7), (8) and (9). The final decision shall refer to the decision referred to in paragraph 1 of this Article and shall specify that the decision referred to in that paragraph will be published on the website of the Board in accordance with paragraph 5 of this Article. The final decision shall attach the decision referred to in paragraph 1 of this Article., Member States should be able to lay down the rules on criminal penalties for infringements of this Regulation, including for infringements of national rules adopted pursuant to and within the limits of this Regulation. Those criminal penalties may also allow for the deprivation of the profits obtained through infringements of this Regulation. However, the imposition of criminal penalties for infringements of such national rules and of administrative penalties should not lead to a breach of the principle of ne bis in idem, as interpreted by the Court of Justice., Court (Civil/Criminal): Criminal  
Provisions: Article 386 of the Penal Code  
Time of commission of the act:  
Result (innocent, guilty):  
Reasoning: Conviction for computer fraud committed repeatedly and professionally with a total benefit and damage exceeding €30,000. According to the majority opinion, the charge is substantiated in both its objective and subjective aspects, and the defendant must be declared guilty of the aforementioned criminal acts of fraud by means of a computer, committed repeatedly by a perpetrator acting professionally, where the total financial benefit and corresponding damage exceed the amount of €30,000, as well as for repeated embezzlement.

Facts: The defendant accessed a website using a computer, employing, without the knowledge and consent of the complainants, the access codes for the electronic management system of the bank accounts held by the complainants at a Bank, and transferred money through electronically transmitted orders from the complainants' accounts to her own account. Specifically, during the period from June 2007 to June 2008, after unlawfully acquiring the aforementioned STICK containing the access codes, she accessed a website maintained by ..., using, without the complainants' knowledge (without their consent or approval), the access codes for the electronic management system of the bank accounts held at the aforementioned Bank, transferring through electronically transmitted orders to the joint account number ... of the complainants from bank accounts numbered ..., ..., and ..., the total amount of €55,710, as detailed in the orders, and subsequently, using an ATM card, she gradually withdrew from the aforementioned account number ..., the total amount of €55,710, making 84 individual withdrawals from automatic teller machines. In addition, the defendant, during the period from June 2008 to November 2008, in the same exact manner (through the electronic management system of the bank accounts), transferred through electronically transmitted orders to account number ..., which she had opened at ..., from the complainants' bank accounts numbered ..., ..., ..., ..., and ..., the total amount of €73,942, as detailed in the orders regarding the transfers of these amounts. Furthermore, during the period from February 2008 to November 2008, through multiple acts constituting a continuation of the crime, although she had received from the first complainant ... the amounts of €695.04, €695.04, and €845.04, in order to pay his insurance contributions to O.A.E.E. for the periods of January-February 2008, May-June 2008, and September-October 2008, as well as the amounts of €250 and €280, in order to settle credit card bills for "...", respectively, and from the second complainant ... she received the amounts of €283.64, €419.26, and €385.38, to pay the latter's insurance contributions to O.A.E.E. for the periods of July-August 2007, May-June 2008, September-October 2008, and November-December 2008, as well as the amount of €1,888.03 for the settlement of VAT, she never paid the above amounts to settle the aforementioned obligations, nor did she return them to the complainants, despite being urged to do so, but incorporated them into her assets and wrongfully appropriated them. The defendant denies the charges against her and claims that the withdrawals were made by the second complainant and that all the amounts transferred to her account were transferred to cover the company's expenses and their personal expenses, due to her cohabitation with the second complainant and with his knowledge, with whom she intended to marry. However, this claim is not supported by any evidence; on the contrary, it emerged that she conducted the transfers of the money and withdrawals without the complainants' knowledge, and when she learned that they had been informed about the account movements and met at the Bank, her behavior and demeanor indicated guilt, according to the testimony of the prosecution witness ..., an employee of the Pangrati branch of ..., who saw her on the same day at the aforementioned Bank when she met with the complainants. The ongoing act of fraud using a computer was committed by the defendant professionally, as evidenced by her repeated commission of the act, as well as the infrastructure she had established with the intent of repeated commission, based on a specific plan and methodology (transferring smaller amounts to a joint account of the complainants from the remaining accounts of the latter, and then withdrawing the transferred amounts with an ATM card, as well as directly transferring smaller amounts from the complainants' accounts to her personal account she had opened at the same bank), indicating her purpose to generate income, with the financial benefit she gained, corresponding to the complainants' damage, exceeding a total of €30,000., source_sentence: Who is responsible for monitoring the application of this Regulation?
sentences: Everyone who obtains access to data recorded in a computer or in the external memory of a computer or transmitted by telecommunication systems shall be punished with imprisonment for up to six months or by a fine from 29 to 15,000 Euro, under the condition that these acts have been committed without right, especially in violation of prohibitions or of security measures taken by the legal holder. If the act concerns the international relations or the security of the State, he shall be punished according to Article 148.
If the offender is in the service of the legal holder of the data, the act of the preceding paragraph shall be punished only if it has been explicitly prohibited by internal regulations or by a written decision of the holder or of a competent employee of his.
, The protection of natural persons with regard to the processing of personal data by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security and the free movement of such data, is the subject of a specific Union legal act. This Regulation should not, therefore, apply to processing activities for those purposes. However, personal data processed by public authorities under this Regulation should, when used for those purposes, be governed by a more specific Union legal act, namely Directive (EU) 2016/680 of the European Parliament and of the Council (1). Member States may entrust competent authorities within the meaning of Directive (EU) 2016/680 with tasks which are not necessarily carried out for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and prevention of threats to public security, so that the processing of personal data for those other purposes, in so far as it is within the scope of Union law, falls within the scope of this Regulation. With regard to the processing of personal data by those competent authorities for purposes falling within scope of this Regulation, Member States should be able to maintain or introduce more specific provisions to adapt the application of the rules of this Regulation. Such provisions may determine more precisely specific requirements for the processing of personal data by those competent authorities for those other purposes, taking into account the constitutional, organisational and administrative structure of the respective Member State. When the processing of personal data by private bodies falls within the scope of this Regulation, this Regulation should provide for the possibility for Member States under specific conditions to restrict by law certain obligations and rights when such a restriction constitutes a necessary and proportionate measure in a democratic society to safeguard specific important interests including public security and the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security. This is relevant for instance in the framework of anti-money laundering or the activities of forensic laboratories., 1.The Board shall ensure the consistent application of this Regulation. To that end, the Board shall, on its own initiative or, where relevant, at the request of the Commission, in particular: (a)  monitor and ensure the correct application of this Regulation in the cases provided for in Articles 64 and 65 without prejudice to the tasks of national supervisory authorities; 4.5.2016 L 119/76   (b)  advise the Commission on any issue related to the protection of personal data in the Union, including on any proposed amendment of this Regulation; (c)  advise the Commission on the format and procedures for the exchange of information between controllers, processors and supervisory authorities for binding corporate rules; (d)  issue guidelines, recommendations, and best practices on procedures for erasing links, copies or replications of personal data from publicly available communication services as referred to in Article 17(2); (e)  examine, on its own initiative, on request of one of its members or on request of the Commission, any question covering the application of this Regulation and issue guidelines, recommendations and best practices in order to encourage consistent application of this Regulation; (f)  issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph for further specifying the criteria and conditions for decisions based on profiling pursuant to Article 22(2); (g)  issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph for establishing the personal data breaches and determining the undue delay referred to in Article 33(1) and (2) and for the particular circumstances in which a controller or a processor is required to notify the personal data breach; (h)  issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph as to the circumstances in which a personal data breach is likely to result in a high risk to the rights and freedoms of the natural persons referred to in Article 34(1). (i)  issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph for the purpose of further specifying the criteria and requirements for personal data transfers based on binding corporate rules adhered to by controllers and binding corporate rules adhered to by processors and on further necessary requirements to ensure the protection of personal data of the data subjects concerned referred to in Article 47; (j)  issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph for the purpose of further specifying the criteria and requirements for the personal data transfers on the basis of Article 49(1); (k)  draw up guidelines for supervisory authorities concerning the application of measures referred to in Article 58(1), (2) and (3) and the setting of administrative fines pursuant to Article 83; (l)  review the practical application of the guidelines, recommendations and best practices referred to in points (e) and (f); (m)  issue guidelines, recommendations and best practices in accordance with point (e) of this paragraph for establishing common procedures for reporting by natural persons of infringements of this Regulation pursuant to Article 54(2); (n)  encourage the drawing-up of codes of conduct and the establishment of data protection certification mechanisms and data protection seals and marks pursuant to Articles 40 and 42; (o)  carry out the accreditation of certification bodies and its periodic review pursuant to Article 43 and maintain a public register of accredited bodies pursuant to Article 43(6) and of the accredited controllers or processors established in third countries pursuant to Article 42(7); (p)  specify the requirements referred to in Article 43(3) with a view to the accreditation of certification bodies under Article 42; (q)  provide the Commission with an opinion on the certification requirements referred to in Article 43(8); (r)  provide the Commission with an opinion on the icons referred to in Article 12(7); (s)  provide the Commission with an opinion for the assessment of the adequacy of the level of protection in a third country or international organisation, including for the assessment whether a third country, a territory or one or more specified sectors within that third country, or an international organisation no longer ensures an adequate level of protection. To that end, the Commission shall provide the Board with all necessary documentation, including correspondence with the government of the third country, with regard to that third country, territory or specified sector, or with the international organisation. 4.5.2016 L 119/77   (t)  issue opinions on draft decisions of supervisory authorities pursuant to the consistency mechanism referred to in Article 64(1), on matters submitted pursuant to Article 64(2) and to issue binding decisions pursuant to Article 65, including in cases referred to in Article 66; (u)  promote the cooperation and the effective bilateral and multilateral exchange of information and best practices between the supervisory authorities; (v)  promote common training programmes and facilitate personnel exchanges between the supervisory authorities and, where appropriate, with the supervisory authorities of third countries or with international organisations; (w)  promote the exchange of knowledge and documentation on data protection legislation and practice with data protection supervisory authorities worldwide. (x)  issue opinions on codes of conduct drawn up at Union level pursuant to Article 40(9); and (y)  maintain a publicly accessible electronic register of decisions taken by supervisory authorities and courts on issues handled in the consistency mechanism.
2.Where the Commission requests advice from the Board, it may indicate a time limit, taking into account the urgency of the matter.
3.The Board shall forward its opinions, guidelines, recommendations, and best practices to the Commission and to the committee referred to in Article 93 and make them public.
4.The Board shall, where appropriate, consult interested parties and give them the opportunity to comment within a reasonable period. The Board shall, without prejudice to Article 76, make the results of the consultation procedure publicly available., source_sentence: Who is responsible for carrying out the review to assess processing?
sentences: 1.Where a type of processing in particular using new technologies, and taking into account the nature, scope, context and purposes of the processing, is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall, prior to the processing, carry out an assessment of the impact of the envisaged processing operations on the protection of personal data. A single assessment may address a set of similar processing operations that present similar high risks.
2.The controller shall seek the advice of the data protection officer, where designated, when carrying out a data protection impact assessment.
3.A data protection impact assessment referred to in paragraph 1 shall in particular be required in the case of: (a)  a systematic and extensive evaluation of personal aspects relating to natural persons which is based on automated processing, including profiling, and on which decisions are based that produce legal effects concerning the natural person or similarly significantly affect the natural person; (b)  processing on a large scale of special categories of data referred to in Article 9(1), or of personal data relating to criminal convictions and offences referred to in Article 10; or (c)  a systematic monitoring of a publicly accessible area on a large scale.
4.The supervisory authority shall establish and make public a list of the kind of processing operations which are subject to the requirement for a data protection impact assessment pursuant to paragraph 1. The supervisory authority shall communicate those lists to the Board referred to in Article 68
5.The supervisory authority may also establish and make public a list of the kind of processing operations for which no data protection impact assessment is required. The supervisory authority shall communicate those lists to the Board.
6.Prior to the adoption of the lists referred to in paragraphs 4 and 5, the competent supervisory authority shall apply the consistency mechanism referred to in Article 63 where such lists involve processing activities which are related to the offering of goods or services to data subjects or to the monitoring of their behaviour in several Member States, or may substantially affect the free movement of personal data within the Union. 4.5.2016 L 119/53  
7.The assessment shall contain at least: (a)  a systematic description of the envisaged processing operations and the purposes of the processing, including, where applicable, the legitimate interest pursued by the controller; (b)  an assessment of the necessity and proportionality of the processing operations in relation to the purposes; (c)  an assessment of the risks to the rights and freedoms of data subjects referred to in paragraph 1; and (d)  the measures envisaged to address the risks, including safeguards, security measures and mechanisms to ensure the protection of personal data and to demonstrate compliance with this Regulation taking into account the rights and legitimate interests of data subjects and other persons concerned.
8.Compliance with approved codes of conduct referred to in Article 40 by the relevant controllers or processors shall be taken into due account in assessing the impact of the processing operations performed by such controllers or processors, in particular for the purposes of a data protection impact assessment.
9.Where appropriate, the controller shall seek the views of data subjects or their representatives on the intended processing, without prejudice to the protection of commercial or public interests or the security of processing operations.
10.Where processing pursuant to point (c) or (e) of Article 6(1) has a legal basis in Union law or in the law of the Member State to which the controller is subject, that law regulates the specific processing operation or set of operations in question, and a data protection impact assessment has already been carried out as part of a general impact assessment in the context of the adoption of that legal basis, paragraphs 1 to 7 shall not apply unless Member States deem it to be necessary to carry out such an assessment prior to processing activities.
11. Where necessary, the controller shall carry out a review to assess if processing is performed in accordance with the data protection impact assessment at least when there is a change of the risk represented by processing operations., **Court (Civil/Criminal): Civil**  
**Provisions:**  
**Time of commission of the act:**  
**Outcome (not guilty, guilty):**  
**Reasoning:** Claim for compensation and monetary satisfaction due to moral damage against a mobile phone company and a credit institution within the framework of inadequate fulfillment of a payment services contract for "web banking." Appropriate actions for mobile phone companies in case of a request for a "sim" card replacement due to wear or loss. They must verify the customer's identity based on the personal details and identification information registered in their system but are not liable for any changes in the latter that were not timely communicated to them. Further security measures such as phone communication or sending an SMS to the mobile number holder are not required. Payment services under Law 4357/2018. Obligation of the payment service provider, such as banks, to inform the payer after receiving a relevant order for making a payment. The content of this varies per case, such as sending a personalized code to the user's mobile phone for transaction approval, as well as sending an email immediately after its completion. However, the bank is not liable for customer damage resulting from illicit electronic transactions due to third-party interception of either the access codes for electronic banking transactions or the sim card and the phone number to which the personalized codes for approving the aforementioned transactions are sent, within the framework of increased security protocols. Appropriate actions by banks upon diagnosing illicit banking transactions that may be fraudulent. Relevant criteria for consideration. The evidence did not indicate negligent and thus tortious behavior from all defendants. The claim is dismissed.  

**Facts:** In the present claim, upon due assessment of its content, the plaintiff states that he has a mobile phone subscription with the first defendant, a mobile phone company. On October 26, 2020, in the morning, he realized that his mobile phone was offline, and by noon, he received email notifications from Bank .......... and ............ (whose third and fourth defendants are de facto universal successors, respectively), with which he holds an account, regarding transactions he had made. From phone calls from his home phone to Bank .............. and ............ Bank, he was informed that on the same day, in a very short period, four money transfers had been made from the account he maintains at Bank .............., specifically, an amount of €15,000 was transferred to the account mentioned in the claim document under the name ..........., at ........ an amount of €15,000 was transferred to the account mentioned in the claim document under the name ......... at ........... Bank, an amount of €15,000 was transferred to the plaintiff's account with his daughter as a co-holder at ......... Bank, and an amount of €6,700 was transferred from another of his accounts to the account from which the transfer to the aforementioned accounts of €45,000 was made. Additionally, from the plaintiff's account with his daughter as a co-holder at .......... Bank, an amount of €9,999 was transferred to an account under the name of .... . He attempted to log into the online banking service of Bank ......... from his home computer, but found that the service was locked, while regarding the corresponding service of ........... Bank, he requested alongside his daughter to 'lock' it. In a phone call with the call center of Bank ............, he was informed about the locking of his electronic account in the online banking service and was told to dispute the transactions, which he did immediately through ... banking, while his daughter communicated about this with ....... Bank. The transfer to the account with the beneficiary was canceled, and the amount of €15,000 was returned to the plaintiff. After his investigation, he discovered that an unknown individual appeared at the branch of the first defendant, served by the second defendant, who posed as the plaintiff and presented a forged military ID card of the plaintiff, requesting and receiving a new sim card, resulting in the deactivation of the plaintiff's sim card and gaining access to the codes sent to him by the banks for completing the transfers. Due to the negligence of the second defendant, he did not realize that the identity used was forged, as since 2010, when the plaintiff retired, he has had a police identification card. The first defendant does not have security protocols to prevent such incidents, which constitute the sim .... method, despite the issuance of a press release from the Attica Security and numerous publications regarding the aforementioned method, unlike other mobile phone companies, which implement a specific procedure for changing sim cards. The second defendant did not take the obvious step to check the functioning of the sim card before replacing it, where he would have realized that the plaintiff's mobile phone was functioning normally. Bank .......... and ........... Bank: a) accepted requests for transferring large amounts of money from accounts that had no similar activity in the past, while the plaintiff's online banking account with the above banks was locked quite some time later, b) sent email notifications regarding successful transactions in succession, under a single email, c) did not check the address ... of the perpetrators, which was different from that used by the plaintiff, and d) did not take necessary security measures to prevent fraud via sim ... against the plaintiff, as the security code (pin) sent by the banks via message to the mobile phone proved to be compromised. As a result of the above illegal and culpable behavior of the defendants, the plaintiff suffered property damage amounting to a total of €24,999, which constitutes the total amount of the transfers made by third unknown persons to accounts of unknown individuals, as stated above, and has not been refunded despite his repeated inquiries, while he also suffered distress and mental anguish, and his trust in the banks was shaken, thus entitling him to monetary compensation for his moral damage, amounting to €5,000., **Court (Civil/Criminal): Civil  
Provisions:  
Time of commission of the act:  
Outcome (not guilty, guilty): Rejects the lawsuit.  
Reasoning:  
Facts: The plaintiff holds account number ....................... at the defendant bank. Following the application/contract dated January 9, 2019, the plaintiff became a subscriber to the alternative service networks provided by the defendant bank through online banking (.........................). In the aforementioned application, the plaintiff stated that her mobile phone (number .................) would be used by the defendant to send additional security codes for the approval of her transactions via .......................... It is noted that the plaintiff received subscriber code .................., thus enabling her to conduct transactions without her physical presence at the branches of the defendant bank, from fixed or mobile devices (computers, smartphones, tablets), by entering her username and password to access her personal account. Regarding the identification methods, these were agreed upon between the parties and are specified depending on the payment method used. More specifically, the plaintiff had installed the application ...................................... on her mobile phone. According to the terms of the above contract between the parties, the defendant bank (to ensure the protection of its customers in using this application) requires three stages of identification: 1) the input of the customer's personal codes (username and password) in the application .........................., 2) the input of a six-digit code (...................) sent via SMS to the mobile number provided by the customer, to complete the login to ............................. and 3) the input of a new six-digit code (.................) sent in a new SMS to the mobile number provided by the customer, to authenticate the device on which the aforementioned application is installed (usually a mobile phone). 

Furthermore, it was established that on October 4, 2021, at 00:07, the plaintiff received a text message (SMS) on her mobile phone (number ...................) with the following content: ".................................", i.e., "..........: a payment was attempted from a new device. If this was not you, please visit...", providing the above link. As she acknowledges in her lawsuit, she followed the link that was sent to her via SMS and entered her login credentials (i.e., username and password) on the (fake) page she was redirected to. Thus, the perpetrators acquired the plaintiff's personal information and subsequently entered it into the application ........................... that they had installed on their own mobile phone. Following this, to complete the second stage of the process, as described above, the defendant bank sent the aforementioned date and time of 00:14, a security code to the plaintiff's mobile phone via SMS, with the content ".................................`." Subsequently, the defendant sent, at 00:17, another SMS to the plaintiff's mobile phone with the security code .................., containing the message ".........................................", to complete the third stage of identification. It is noted that the defendant sent another message to the plaintiff's mobile phone at 00:15, specifically "..........................", which was not used (perhaps because it was entered incorrectly by the plaintiff). It was later proven that the unknown perpetrators charged the plaintiff's account with a total amount of €2,800.00 and an equivalent credit to a bank account held similarly at the defendant bank, with the beneficiary being ............. The plaintiff contacted the defendant, submitting a dispute over the above transactions and simultaneously filed a complaint against any responsible party for the crimes of fraud and embezzlement. The defendant locked the plaintiff's subscription and provided her with new codes, warning her not to use the aforementioned application via her mobile phone unless she scanned it with updated antivirus/antispyware/malware software. Additionally, the defendant froze the account to which her money was transferred, which, as mentioned earlier, belongs to ................., who also stated that she fell victim to electronic fraud, being used by the aforementioned perpetrators as a front person. It was further established that the above-mentioned ......................... consented to the return to the plaintiff of the amount of €239.54, which remained in her account (as part of the aforementioned €2,800.00), while the plaintiff stated in a declaration that after the crediting of her account with the amount of €239.54, she has no further claims against the defendant regarding the above history. From the above proven facts, it was established that the plaintiff accessed the fraudulent page, entering her username and password and subsequently the codes ....., which were sent to her mobile phone by the defendant bank. Regarding the defendant, it was established that through its website ......................, through the login page to ................ and via messages to its subscribers, it informs them in detail about the risks of code interception and the protective measures they should take, while it also informs them with a special announcement about phishing. For this reason, the plaintiff's assertion that the perpetrators used one-time codes ......, violating the defendant's security systems, must be dismissed as unfounded. Therefore, since the defendant successfully identified the plaintiff's identity as well as her mobile phone without any indication of a breach of its electronic systems, the defendant is not liable for the plaintiff's loss from the transfer of funds to an unknown person's account, nor is it responsible for compensating that loss. Given these circumstances, the lawsuit must be dismissed as fundamentally unfounded.**, source_sentence: What may impede authorities in the discharge of their responsibilities under Union law?
sentences: The objectives and principles of Directive 95/46/EC remain sound, but it has not prevented fragmentation in the implementation of data protection across the Union, legal uncertainty or a widespread public perception that there are significant risks to the protection of natural persons, in particular with regard to online activity. Differences in the level of protection of the rights and freedoms of natural persons, in particular the right to the protection of personal data, with regard to the processing of personal data in the Member States may prevent the free flow of personal data throughout the Union. Those differences may therefore constitute an obstacle to the pursuit of economic activities at the level of the Union, distort competition and impede authorities in the discharge of their responsibilities under Union law. Such a difference in levels of protection is due to the existence of differences in the implementation and application of Directive 95/46/EC., The processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes should be subject to appropriate safeguards for the rights and freedoms of the data subject pursuant to this Regulation. Those safeguards should ensure that technical and organisational measures are in place in order to ensure, in particular, the principle of data minimisation. The further processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes is to be carried out when the controller has assessed the feasibility to fulfil those purposes by processing data which do not permit or no longer permit the identification of data subjects, provided that appropriate safeguards exist (such as, for instance, pseudonymisation of the data). Member States should provide for appropriate safeguards for the processing of personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes. Member States should be authorised to provide, under specific conditions and subject to appropriate safeguards for data subjects, specifications and derogations with regard to the information requirements and rights to rectification, to erasure, to be forgotten, to restriction of processing, to data portability, and to object when processing personal data for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes. The conditions and safeguards in question may entail specific procedures for data subjects to exercise those rights if this is appropriate in the light of the purposes sought by the specific processing along with technical and organisational measures aimed at minimising the processing of personal data in pursuance of the proportionality and necessity principles. The processing of personal data for scientific purposes should also comply with other relevant legislation such as on clinical trials., In order to ensure consistent monitoring and enforcement of this Regulation throughout the Union, the supervisory authorities should have in each Member State the same tasks and effective powers, including powers of investigation, corrective powers and sanctions, and authorisation and advisory powers, in particular in cases of complaints from natural persons, and without prejudice to the powers of prosecutorial authorities under Member State law, to bring infringements of this Regulation to the attention of the judicial authorities and engage in legal proceedings. Such powers should also include the power to impose a temporary or definitive limitation, including a ban, on processing. Member States may specify other tasks related to the protection of personal data under this Regulation. The powers of supervisory authorities should be exercised in accordance with appropriate procedural safeguards set out in Union and Member State law, impartially, fairly and within a reasonable time. In particular each measure should be appropriate, necessary and proportionate in view of ensuring compliance with this Regulation, taking into account the circumstances of each individual case, respect the right of every person to be heard before any individual measure which would affect him or her adversely is taken and avoid superfluous costs and excessive inconveniences for the persons concerned. Investigatory powers as regards access to premises should be exercised in accordance with specific requirements in Member State procedural law, such as the requirement to obtain a prior judicial authorisation. Each legally binding measure of the supervisory authority should be in writing, be clear and unambiguous, indicate the supervisory authority which has issued the measure, the date of issue of the measure, bear the signature of the head, or a member of the supervisory authority authorised by him or her, give the reasons for the measure, and refer to the right of an effective remedy. This should not preclude additional requirements pursuant to Member State procedural law. The adoption of a legally binding decision implies that it may give rise to judicial review in the Member State of the supervisory authority that adopted the decision.
pipeline_tag: sentence-similarity
library_name: sentence-transformers
metrics: cosine_accuracy@1, cosine_accuracy@3, cosine_accuracy@5, cosine_accuracy@10, cosine_precision@1, cosine_precision@3, cosine_precision@5, cosine_precision@10, cosine_recall@1, cosine_recall@3, cosine_recall@5, cosine_recall@10, cosine_ndcg@10, cosine_mrr@10, cosine_map@100
model-index: name: bge_m3 Finetuned on Data
results: task: type: information-retrieval
name: Information Retrieval
dataset: name: dim 768
type: dim_768
metrics: type: cosine_accuracy@1
value: 0.43734643734643736
name: Cosine Accuracy@1
verified: no, type: cosine_accuracy@3
value: 0.47174447174447176
name: Cosine Accuracy@3
verified: no, type: cosine_accuracy@5
value: 0.49385749385749383
name: Cosine Accuracy@5
verified: no, type: cosine_accuracy@10
value: 0.5233415233415234
name: Cosine Accuracy@10
verified: no, type: cosine_precision@1
value: 0.43734643734643736
name: Cosine Precision@1
verified: no, type: cosine_precision@3
value: 0.42588042588042585
name: Cosine Precision@3
verified: no, type: cosine_precision@5
value: 0.3985257985257985
name: Cosine Precision@5
verified: no, type: cosine_precision@10
value: 0.33366093366093363
name: Cosine Precision@10
verified: no, type: cosine_recall@1
value: 0.08625870513780923
name: Cosine Recall@1
verified: no, type: cosine_recall@3
value: 0.22089657753388986
name: Cosine Recall@3
verified: no, type: cosine_recall@5
value: 0.29909084176222434
name: Cosine Recall@5
verified: no, type: cosine_recall@10
value: 0.3931934162725552
name: Cosine Recall@10
verified: no, type: cosine_ndcg@10
value: 0.47850843300713836
name: Cosine Ndcg@10
verified: no, type: cosine_mrr@10
value: 0.45935318435318445
name: Cosine Mrr@10
verified: no, type: cosine_map@100
value: 0.5295473927743528
name: Cosine Map@100
verified: no, task: type: information-retrieval
name: Information Retrieval
dataset: name: dim 512
type: dim_512
metrics: type: cosine_accuracy@1
value: 0.43243243243243246
name: Cosine Accuracy@1
verified: no, type: cosine_accuracy@3
value: 0.457002457002457
name: Cosine Accuracy@3
verified: no, type: cosine_accuracy@5
value: 0.4864864864864865
name: Cosine Accuracy@5
verified: no, type: cosine_accuracy@10
value: 0.5184275184275184
name: Cosine Accuracy@10
verified: no, type: cosine_precision@1
value: 0.43243243243243246
name: Cosine Precision@1
verified: no, type: cosine_precision@3
value: 0.4168714168714168
name: Cosine Precision@3
verified: no, type: cosine_precision@5
value: 0.3906633906633907
name: Cosine Precision@5
verified: no, type: cosine_precision@10
value: 0.3312039312039312
name: Cosine Precision@10
verified: no, type: cosine_recall@1
value: 0.08431888922303578
name: Cosine Recall@1
verified: no, type: cosine_recall@3
value: 0.21304415900659868
name: Cosine Recall@3
verified: no, type: cosine_recall@5
value: 0.2881194129690931
name: Cosine Recall@5
verified: no, type: cosine_recall@10
value: 0.38513976970755104
name: Cosine Recall@10
verified: no, type: cosine_ndcg@10
value: 0.47114526720306116
name: Cosine Ndcg@10
verified: no, type: cosine_mrr@10
value: 0.452046527046527
name: Cosine Mrr@10
verified: no, type: cosine_map@100
value: 0.5216109026564674
name: Cosine Map@100
verified: no, task: type: information-retrieval
name: Information Retrieval
dataset: name: dim 256
type: dim_256
metrics: type: cosine_accuracy@1
value: 0.4152334152334152
name: Cosine Accuracy@1
verified: no, type: cosine_accuracy@3
value: 0.44963144963144963
name: Cosine Accuracy@3
verified: no, type: cosine_accuracy@5
value: 0.4643734643734644
name: Cosine Accuracy@5
verified: no, type: cosine_accuracy@10
value: 0.5036855036855037
name: Cosine Accuracy@10
verified: no, type: cosine_precision@1
value: 0.4152334152334152
name: Cosine Precision@1
verified: no, type: cosine_precision@3
value: 0.40540540540540543
name: Cosine Precision@3
verified: no, type: cosine_precision@5
value: 0.37985257985257986
name: Cosine Precision@5
verified: no, type: cosine_precision@10
value: 0.32186732186732187
name: Cosine Precision@10
verified: no, type: cosine_recall@1
value: 0.08033212698784092
name: Cosine Recall@1
verified: no, type: cosine_recall@3
value: 0.20549472046186232
name: Cosine Recall@3
verified: no, type: cosine_recall@5
value: 0.2793387512536846
name: Cosine Recall@5
verified: no, type: cosine_recall@10
value: 0.37449725181994153
name: Cosine Recall@10
verified: no, type: cosine_ndcg@10
value: 0.4554941602336436
name: Cosine Ndcg@10
verified: no, type: cosine_mrr@10
value: 0.43647478647478644
name: Cosine Mrr@10
verified: no, type: cosine_map@100
value: 0.5042423003638477
name: Cosine Map@100
verified: no, task: type: information-retrieval
name: Information Retrieval
dataset: name: dim 128
type: dim_128
metrics: type: cosine_accuracy@1
value: 0.3906633906633907
name: Cosine Accuracy@1
verified: no, type: cosine_accuracy@3
value: 0.4348894348894349
name: Cosine Accuracy@3
verified: no, type: cosine_accuracy@5
value: 0.4520884520884521
name: Cosine Accuracy@5
verified: no, type: cosine_accuracy@10
value: 0.48402948402948404
name: Cosine Accuracy@10
verified: no, type: cosine_precision@1
value: 0.3906633906633907
name: Cosine Precision@1
verified: no, type: cosine_precision@3
value: 0.3849303849303849
name: Cosine Precision@3
verified: no, type: cosine_precision@5
value: 0.36609336609336607
name: Cosine Precision@5
verified: no, type: cosine_precision@10
value: 0.3127764127764128
name: Cosine Precision@10
verified: no, type: cosine_recall@1
value: 0.07458566403893081
name: Cosine Recall@1
verified: no, type: cosine_recall@3
value: 0.19163194219418972
name: Cosine Recall@3
verified: no, type: cosine_recall@5
value: 0.2642012717113108
name: Cosine Recall@5
verified: no, type: cosine_recall@10
value: 0.35800391697434397
name: Cosine Recall@10
verified: no, type: cosine_ndcg@10
value: 0.43623660076655296
name: Cosine Ndcg@10
verified: no, type: cosine_mrr@10
value: 0.4142350142350142
name: Cosine Mrr@10
verified: no, type: cosine_map@100
value: 0.4853343208004937
name: Cosine Map@100
verified: no, task: type: information-retrieval
name: Information Retrieval
dataset: name: dim 64
type: dim_64
metrics: type: cosine_accuracy@1
value: 0.37346437346437344
name: Cosine Accuracy@1
verified: no, type: cosine_accuracy@3
value: 0.4103194103194103
name: Cosine Accuracy@3
verified: no, type: cosine_accuracy@5
value: 0.4275184275184275
name: Cosine Accuracy@5
verified: no, type: cosine_accuracy@10
value: 0.48402948402948404
name: Cosine Accuracy@10
verified: no, type: cosine_precision@1
value: 0.37346437346437344
name: Cosine Precision@1
verified: no, type: cosine_precision@3
value: 0.36527436527436524
name: Cosine Precision@3
verified: no, type: cosine_precision@5
value: 0.3454545454545455
name: Cosine Precision@5
verified: no, type: cosine_precision@10
value: 0.30368550368550373
name: Cosine Precision@10
verified: no, type: cosine_recall@1
value: 0.07161197720160761
name: Cosine Recall@1
verified: no, type: cosine_recall@3
value: 0.1824027813741198
name: Cosine Recall@3
verified: no, type: cosine_recall@5
value: 0.2494312239867176
name: Cosine Recall@5
verified: no, type: cosine_recall@10
value: 0.35439985791573947
name: Cosine Recall@10
verified: no, type: cosine_ndcg@10
value: 0.4221587087741084
name: Cosine Ndcg@10
verified: no, type: cosine_mrr@10
value: 0.39746694746694744
name: Cosine Mrr@10
verified: no, type: cosine_map@100
value: 0.4700624383169207
name: Cosine Map@100
verified: no
Likes: 0 | All-time downloads: 46
Created: 2025-11-12 00:32:22