Berlin Commissioner for
Berlin, 24 July 2020 Data Protection and
Freedom of Information
521.12199 Friedrichstr. 219
10969 Berlin
632.255
Visitors’ entrance:
A56ID 81767 Puttkamer Str. 16-18
CR 101043
The building is fully accessible to
DD 131153 disabled members of the public.
FD 140759
Contact us
Phone: +49 (0)30 13889-0
Noisli Ltd. Fax: +49 (0)30 215 50 50
c/o Factory Works GmbH
Use our encrypted contact form
Lohmülenstraße 65 for registering data protection
12435 Berlin complaints:
www.datenschutz-berlin.de/be-
Germany schwerde.html
For all other enquiries, please
send an e-mail to:
Reprimand [email protected]
Fingerprint of our
Dear Sir or Madam, PGP-Key:
D3C9 AEEA B403 7F96 7EF6
We hereby reprimand Noisli Ltd. for an infringement of the General C77F B607 1D0F B27C 29A7
Data Protection Regulation (GDPR).
Office hours
Justification:
Daily from 10 am to 3 pm,
Thursdays from 10 am to 6 pm
Our decision is based on the following considerations: (or by appointment)
I. How to find us
We have established the following facts: The underground line U6 to
Kochstraße / Bus number M29
and 248
The complainant requested by e-mail of 13 June 2019 that his personal
data be deleted from your system. Initially, he had received no reply to this
request. You stated that the request had inadvertently not been processed. Visit our Website
In the meantime, the complainant's data have been completely deleted. https://privacy.de
II.
We evaluate the legal situation as follows: Your company has violated the
General Data Protection Regulation.
Pursuant to Art. 12(3) of the GDPR, the controller must provide the data
subject with information on the measures taken upon request pursuant to
Art. 15 to 22 GDPR without delay, but at the latest within one month of re-
ceipt of the request. This period may exceptionally be extended by a further
two months if both the request is cumulatively complex and there is a large
number of applications. The GDPR does not provide for a routine and blan-
ket extension of the deadline without examining the individual case.
-2-
In the present case, the complainant exercised his right of deletion under
Art. 17 GDPR by e-mail of 13 June 2019. It was only on 22 May 2020 that
you confirmed the deletion of the data. This meant that the deletion and
confirmation were delayed.
III.
As a result, we have decided not to take any further supervisory measures
due to the violation, and instead to issue a reprimand.
The reprimand is based on Art. 58(2) b GDPR.
Taking into account the specific circumstances of the facts of the case, we
consider a reprimand to be appropriate after completion of our investiga-
tion. This is the first time we have established a violation on your part. In
response to our inquiry, you showed understanding and announced that
you would comply with data protection regulations and remedy the conduct
for which you had been reprimanded.
In the safe expectation that you will comply with the data protection regula-
tions in the future, we consider the matter closed.
Kind regards,