5 articles
When a business in Germany needs an Auftragsverarbeitungsvertrag, the mandatory contents of an AVV under Art. 28 Abs. 3 DSGVO, how sub-processors work, and which authority supervises it.
German data protection explained: how the DSGVO and the BDSG fit together, which authority supervises your organisation under § 40 BDSG, and when a Datenschutzbeauftragter is required.
When a German organisation must appoint a Datenschutzbeauftragter. Both limbs of § 38 BDSG, including the trigger that ignores headcount, the DSGVO grounds, internal versus external appointment, and the removal protection in § 6 BDSG.
German data protection supervision is split by entity type, not shared. § 40 Abs. 1 BDSG gives non-public bodies to the Länder and § 9 Abs. 1 BDSG confines the BfDI. The seventeen Land authorities, and how a Datenschutzbeschwerde works.
The Auskunftsrecht under Art. 15 DSGVO in Germany: what a company must disclose, the one month deadline and when it can be extended, the real limits, and which authority handles a complaint.