Mervinskiy 437

Page 94

“We collect, use, and share the information we have as described above:  as necessary to fulfill our Terms;  consistent with your consent, which you can revoke at any time;  as necessary to comply with our legal obligations;  occasionally to protect your vital interests, or those of others;  as necessary in the public interest; and  as necessary for our (or others') legitimate interests, including our interests in providing an innovative, relevant, safe, and profitable service to our users and partners, unless those interests are overridden by your interests or fundamental rights and freedoms that require protection of personal data. Learn More” 327. Once the link embedded in the text “Learn More” is selected, the user is brought to the Legal Basis Notice where further information is provided in relation to the identified legal bases. 328. For ease of review, I will proceed with my assessment of the extent to which WhatsApp complies with its obligations pursuant to Article 13(1)(c) by reference to the individual legal bases identified by WhatsApp in the Privacy Policy (and elaborated upon in the Legal Basis Notice). I will set out my views under the heading “assessment” at the end of every section however, for the avoidance of doubt, I will only make a single finding in relation to the extent to which WhatsApp complies with its obligations under Article 13(1)(c), read in conjunction with Article 12(1).

Identified Legal Basis 1: Contractual Necessity What information has been provided? 329. In this section, I will examine whether there has been compliance with Article 13(1)(c), insofar as WhatsApp refers to reliance on the legal basis set out in Article 6(1)(b) (referred to as “contractual necessity”). The Legal Basis Notice provides, in this regard, that: “For all people who have legal capacity to enter into an enforceable contract, we process data as necessary to perform our contracts with you (the Terms of Service, the "Terms"). We describe the contractual services for which this data processing is necessary in Our Services section of the Terms and in the additional informational resources accessible from our Terms. The core data uses necessary to provide our contractual services are:    

To provide, improve, customize, and support our Services as described in "Our Services"; To promote safety and security; To transfer, transmit, store, or process your data outside the EEA, including to within the United States and other countries; and To communicate with you, for example, on Service-related issues.

These uses are explained in more detail in our Privacy Policy, under How We Use Information and Our Global Operations. We'll use the data we have to provide these services; if you choose not to provide certain data, the quality of your experience using WhatsApp may be impacted.” 330. As is clear from the above, the user is invited to receive more information by reference to the links embedded in the following text:

94


Turn static files into dynamic content formats.

Create a flipbook

Articles inside

The Decision-Making Stage

2hr
pages 143-220

Article 83(5) and the applicable fining “cap”

14min
pages 248-256

Decision: Whether to impose an administrative fine and, if so, the amount of the fine

18min
pages 225-237

Appendix C – Terms of Order to bring processing operations into compliance, made pursuant to Article 58(2)(d

3min
pages 264-265

Summary of Corrective Powers to be Exercised

0
pages 257-258

Article 83(2)(k): any other aggravating or mitigating factor applicable to the circumstances of the case, such as financial benefits gained, or losses avoided, directly or indirectly, from the infringement

10min
pages 221-224

Assessment: Article 13(2)(a) – Retention Criteria/Retention Periods

2min
page 128

Assessment: Article 13(2)(b) – the existence of the data subject rights

2min
page 132

Assessment of Decision-Maker: What information has been provided?

2min
page 129

Identified Legal Basis 5: The vital interests of the data subject or those of another person

2min
page 110

Assessment of Decision-Maker: What information has been provided?

2min
page 124

Assessment: Article 13(1)(f) – Transfers of personal data to a third country

2min
page 123

Assessment of Decision-Maker: What information has been provided?

1min
page 120

Identified Legal Basis 6: Tasks carried out in the public interest

8min
pages 111-113

Identified Legal Basis 1: Contractual Necessity

17min
pages 94-99

Identified Legal Basis 2: Consent

5min
pages 100-101

Identified Legal Basis 4: Compliance with a Legal Obligation

11min
pages 106-109

Identified Legal Basis 3: Legitimate Interests

10min
pages 102-105

Preliminary Issue: What information must be provided pursuant to Article 13(1)(c)?

26min
pages 82-92

Assessment: Application of the Proposed Approach to Article 13(1)(c

2min
page 93

Review of the Materials being relied upon by WhatsApp

10min
pages 64-67

Assessment: Article 13(1)(c) – the purposes of the processing for which the personal data are intended as well as the legal basis for the processing

7min
pages 79-81

Assessment of Decision-Maker: What information has been provided?

1min
page 76

Methodology for Part 2: Assessment and Questions for Determination

19min
pages 68-74

Relevant Provisions

4min
pages 62-63

Assessment: Article 13(1)(a) – the identity and contact details of the controller

2min
page 75
Issuu converts static files into: digital portfolios, online yearbooks, online catalogs, digital photo albums and more. Sign up and create your flipbook.