von Nadja-Maria Becke

On January 31, 2019, the BAG announced its judgment on access to the contents of the work computer by the employer. According to the decision of the BAG, the employer may inspect files that are not marked as “private” on the work computer that is also used privately. In addition, the employer can also base the termination of the employment relationship on this, insofar as is permissible under data protection law and proportionately.

Read more …

von Désirée Wittwer

The labor court in Siegburg confirmed the immediate dismissal of an IT employee due to misuse of customer data from his own company.

The termination without notice of an IT employee can be justified if he exploits security gaps and misuses customer data – so the Siegburg Labor Court ruled with its judgment of January 15, 2020 (Az .: 3 Ca 1793/19).

An IT employee had sued his employer. The court dismissed the lawsuit.

Read more …

von Das Team der aigner business solutions GmbH

Online translation tools offer a convenient way of having technical terms automatically translated into or from another language in both professional and private everyday life. Depending on the provider, such tools can also be used to translate long texts or at least passages of text. In the meantime, online translation tools are constantly being further developed using artificial intelligence processes, so that the end user receives ever better results from their translation. Employees in the professional environment are also increasingly making use of the support of such tools. From a data protection point of view, however, such services involve risks. Find out in our blog article which tools you can use and to what extent to ensure data protection-compliant use.

Read more …

von Carolin Bauer

The data protection concept is part of the organizational measures for the security of processing according to Art. 32 GDPR. The concept represents the company-wide guideline for the implementation of the data protection regulations from the GDPR. In the document, your company values and responsibilities are holistically defined, processes are described and data protection standards to be observed are laid down for your employees. In our article we will show you what such a concept looks like in practice.

Read more …

von Désirée Wittwer

Many are familiar with order processing from Art. 28 GDPR, but very few know what the joint responsibility under Art. 26 GDPR is all about. When the GDPR came into force in May 2018, it was often unclear to those responsible when joint responsibility could be assumed in practice. The supervisory authorities have now positioned themselves more strongly here. In our article we explain what you have to pay attention to.

Read more …

von Nadja-Maria Becke

Statutory regulation clarifies the relationship between tax advisors and companies The new version of Section 11 of the Tax Advisory Act makes it clear that tax advisors are not processors within the meaning of Art. 28 GDPR and therefore no contract for order processing is necessary. Rather, the cooperation with a tax advisor for a […]

Read more …

von Rainer Aigner

The corona pandemic has often forced companies, more or less overnight, to let employees work from home. In order to maintain operations and, above all, internal and external communication, video conferencing has become the new communication standard worldwide, at an almost unbelievable speed. But which video conferencing system is the best choice in terms of data protection compliance?

Read more …

von Das Team der aigner business solutions GmbH

In the case of TISAX® assessment levels, the question arises again and again which of these are there and what impact they can have on a TISAX® project. Assessment levels are used to determine the depth of your final TISAX® audit, which is carried out by an external audit service provider. However, the type of […]

Read more …

von Das Team der aigner business solutions GmbH

Although there is still no general requirement for TISAX® certification, it is required by more and more automobile manufacturers. In order not to endanger the partnership, certification is then inevitable at the latest. Satisfying the complex requirements remains a challenge for many companies.

Read more …

von Ramona Höfler

According to the General Data Protection Regulation (GDPR), the appointment of a data protection officer [1] is mandatory according to the requirements of Art. 37 Para. 4 GDPR in conjunction with Section 38 BDSG. In the following blog article we answer the most important, fundamental questions about the data protection officer.

Read more …