Not named in the source

What happened

Notwithstanding the wording of Articles 15 and 12 GDPR, the Austrian DPA found that the duty to react to an access request is fully independent from the qualification of the addressee as a controller pursuant to Article 4(7) GDPR.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 4Definitions4(7)Read →
• Art. 15Right of access by the data subjectRead →

• Data subject rights