Source: http://rychlicki.net/en/issue/polish-institutions/inspector-general-for-personal-data-protection/
Timestamp: 2018-09-24 00:30:57
Document Index: 404400800

Matched Legal Cases: ['Art. 7', '§ 2', '§ 1', '§ 2', 'Art. 23', 'Art. 31', 'Art. 509']

Polish IP & IT law – copyright trademark computer internet telecomm » Inspector General for Personal Data Protection
Archive for: Inspector General for Personal Data Protection
Who is the controller in social networking sites?
The question of who is the “controller” and the differences between a “controller” and “processor” as defined in the article 2(d) and (e) of the Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, in the context of social networking sites (SNS), are at least controversial not only in Polish case law. See for instance T. Zeggane, W. Maxwell, US and EU Authorities Review Privacy Threats On Social Networking Sites, Ent. L.R. 2008, 19(4), 69-74.
The second area requiring clarification is the concept of “data controller” in an SNS environment. Under European privacy law, the controller is the entity which determines the purposes and means of the processing of personal data. In an SNS context, there are two broad categories of data: the information that the user provides to the SNS platform to register (such as the user’s real name and email address), and the data that the user uploads onto his or her profile. The former is personal data which the SNS platform controls. The latter is “user generated content”, which the user controls and can choose to share (or not) with others. Some SNS platforms provide the user with tools to control the extent to which information such as photos, personal tastes and the like are used to develop targeted advertising. Where such tools exist, the argument can be made that the user (and not the SNS platform itself) is the “controller” of the content the user uploads onto the profile. The concept of data controller is the cornerstone of European privacy law. The concept of controller as it is traditionally interpreted does not fit easily into the SNS environment, where the user is the focal point
As you can read from the above, the authors suggest that the situation requires a clarification of the concept of “controller” in terms of SNS. A similar view was also presented in the report of the European Network and Information Security Agency (ENISA), “Security Issues and Recommendations for Online Social Networks“, PDF file, p. 25.
Categories: Art. 7 PPD | Directive 95/46/EC | EU law | Inspector General for Personal Data Protection | Polish Act on Protection of Personal Data | Polish courts | Polish law | Polish Supreme Administrative Court | Voivodeship Administrative Court.
Polish regulations on personal data protection
Categories: Inspector General for Personal Data Protection | personal data | Polish Act on Protection of Personal Data | Polish Civil Code | Polish Constitution | Polish courts | Polish law | Polish Supreme Administrative Court | regulations | review | Voivodeship Administrative Court.
Polish case law on personal data protection
Below you will find a list of judgments and decisions on personal data protection in the context of IT technologies. You can find a more detailed discussion on each judgment or decision under the link provided with the case file. All judgments and decisions are given in chronological order.
– The judgment of the Supreme Administrative Court of 21 August 2013 case file I OSK 1666/12.
– The judgment of the Voivodeship Administrative Court of 7 October 2011 case file II SA/Wa 364/11.
– The judgment of the Supreme Administrative Court of 19 May 2011 case file I OSK 1086/10.
– The judgment of the Supreme Administrative Court of 19 May 2011 case file I OSK 1079/10.
– The judgment of the Voivodeship Administrative Court in Warsaw of 16 March 2011 case file II SA/Wa 2037/10.
– The judgment of the Voivodeship Administrative Court in Warsaw, of 1 December 2010, case file II SA/Wa 1212/10. This judgment is not yet final.
– The decision of the Inspector General for Personal Data Protection of 13 September 2010 case file DOLiS/DEC-1013/10.
– The order of the Supreme Administrative Court of 15 July 2010 case file I OSK 1079/10. This decison is related to the judgment of the Voivodeship Administrative Court in Warsaw, of 3 February 2010, case file II SA/Wa 1598/09.
– The judgment of the Supreme Administrative Court of 11 May 2010, case file I OSK 963/09.
– The judgment of the Supreme Administrative Court of 15 March 2010 case file I OSK 756/09.
– The judgment of the Voivodeship Administrative Court in Warsaw, of 3 February 2010, case file II SA/Wa 1598/09. This judgment is not yet final. The cassation complaint may be filed to the Supreme Administrative Court.
– The judgment of the Supreme Administrative Court in Warsaw, of 18 November 2009, case file I OSK 667/09.
– The judgment of the Voivodeship Administrative Court in Warsaw of 26 August 2009 case file II SA/Wa 297/09.
– The judgment of the Supreme Administrative Court of 3 July 2009 case file I OSK 633/08.
– The judgment of the Voivodeship Administrative Court in Warsaw of 3 March 2009, case file II SA/Wa 1495/08.
– The judgment of the Supreme Administrative Court of 26 January 2009 case file I OSK 174/08.
– The judgment of the Voivodeship Administrative Court in Warsaw of 30 Novmeber 2007, case file II SA/Wa 71/07.
– The judgment of the Voivodeship Administrative Court in Warsaw of 9 February 2005, case file II SA/Wa 1085/04.
See also “Polish regulations on personal data protection“.
Categories: case law | Inspector General for Personal Data Protection | Polish Act on Protection of Personal Data | Polish courts | Polish Supreme Administrative Court | Voivodeship Administrative Court.
Personal data protection, case II SA/Wa 297/09
October 21st, 2009, Tomasz Rychlicki
An individual had a telecommunications services agreement with a Company, but failed to comply with the payment and the Company has assigned the claim to another entity. The debtor requested by the assignee filed a complaint to the Inspector General for Personal Data Protection. It found that the operation of the company not been in conflict with the provisions of the Polish Act of 29 August 1997 on the Protection of Personal Data – PPD – (in Polish: Ustawa o ochronie danych osobowych), unified text published in Journal of Laws (Dziennik Ustaw) of 6 July 2002, No. 101, item 926, with subsequent amendments. The debtor filed a complaint against this decision.
The Voivodeship Administrative Court in Warsaw in its judgment of 26 August 2009 case file II SA/Wa 297/09 held that the transfer of the debt is inseparably connected with the transfer of personal data of the debtor. Such situation is in accordance with the provisions of Article 509 § 2 of the Civil Code – CC – (in Polish: Kodeks Cywilny) of 23 April 1964, published in Journal of Laws (Dziennik Ustaw) No. 16, item 93, with subsequent amendments.
Article 509. § 1. The creditor may, without the debtor’s consent, transfer the receivable debt upon a third party (assignment) unless that would be at variance with statutory law, a contractual stipulation, or the nature of the obligation.
§ 2. Together with the receivable debt, the rights connected therewith shall pass to the acquirer, in particular, the claim for the interest in arrear.
All related rights together with the debt claim are transferred to the acquirer, and thus the right to dispose of the debtor’s personal information in order to implement the debt. The acquirer becomes autonomous possessor of the debtor’s personal data. The acquirer becomes the controller of personal data and processes personal information for its own account and risk. The acquirer enjoys the same rights and obligations relating to the processing of personal data as the previous controller.
Categories: Art. 23 PPD | Art. 31 PPD | Art. 509 CC | Inspector General for Personal Data Protection | personal data | Polish Act on Protection of Personal Data | Polish Civil Code | Voivodeship Administrative Court.