|
Post by juthi52943 on Jan 4, 2024 4:35:01 GMT
At the same time, ABC instructed Company XYZ on the type of information it was interested in and provided a list of questions to ask market research participants. The ABC company received statistical information from the XYZ company, without access to the personal data of people participating in the study. In the example, it is important that ABC Company decided that data processing should take place at all. Moreover, the processing was carried out for the purpose Job Function Email List indicated by ABC and ABC Company provided XYZ Company with detailed instructions on what information should be obtained. For the above reasons, in the example described, Company ABC should be considered the personal data controller, while Company XYZ is the processor it acted in accordance with the instructions of ABC Company. When considering the case, the Swedish data protection authority first examined whether Nordax was a data controller at all and whether this entity was obliged to consider the complainants requests to exercise his rights. Does the data administrator have to have access to them? During the proceedings, Nordax repeatedly indicated that it did not deal with personal data, because the data provided to.
|
|