Chapter IV, Section 1, Article 28, Paragraph 4, Point b

Text

en an enterprise or an organisation employing fewer than 250 persons that is processing personal data only as an activity ancillary to its main activities.

de Unternehmen oder Organisationen mit weniger als 250 Beschäftigten, die personenbezogene Daten nur als Nebentätigkeit zusätzlich zu ihren Haupttätigkeiten verarbeiten.

fr entreprises ou organismes comptant moins de 250 salariés traitant des données à caractère personnel uniquement dans le cadre d'une activité qui est accessoire à leur activité principale.

es empresas u organizaciones que empleen a menos de doscientas cincuenta personas y que traten datos personales solo como actividad accesoria a sus actividades principales.

pt Empresas ou organismos com mais de 250 assalariados que tratem dados pessoais unicamente no âmbito de uma atividade acessória da sua atividade principal.

it imprese o organizzazioni con meno di 250 dipendenti che trattano dati personali solo accessoriamente rispetto alle attività principali.

ga fiontar nó eagraíocht ina bhfostaítear níos lú ná 250 duine agus ina bpróiseáiltear sonraí pearsanta mar ghníomhaíocht atá coimhdeach lena phríomhghníomhaíochtaí.

cs podniky či organizace, které zaměstnávají méně než 250 osob a pro které je zpracovávání osobních údajů pouze doplňkem k jejich hlavním činnostem.

da en virksomhed eller organisation, der beskæftiger under 250 personer, og som udelukkende behandler personoplysninger som en aktivitet i tilknytning til dens hovedaktiviteter.

et töötleja on vähem kui 250 töötajaga ettevõte või organisatsioon, kes töötleb isikuandmeid üksnes kõrvaltegevusena.

el β) μια επιχείρηση ή έναν οργανισμό που απασχολεί λιγότερα από 250 άτομα και επεξεργάζεται δεδομένα προσωπικού χαρακτήρα μόνον ως δραστηριότητα παρεπόμενη στις κύριες δραστηριότητές της.

bg б) предприятие или организация с по-малко от 250 човека персонал, където се обработването на лични данни е само вторична дейност спрямо основните дейности.

hu a 250 főnél kevesebb főt foglalkoztató vállalkozás vagy szervezet, amely személyes adatokat csak a főtevékenységét kiegészítő tevékenységként dolgoz fel.

mt impriża jew organizzazzjoni li timpjega anqas minn 250 persuna li l-ipproċessar tad-dejta personali tkun attività anċillarja mal-attivitajiet ewlenin tagħha.

lv uzņēmumam vai organizācijai, kas nodarbina mazāk nekā 250 personas un kura veiktā personas datu apstrāde ir tikai palīgdarbība salīdzinājumā ar tā galveno darbību.

ro întreprinderilor sau organizațiilor cu mai puțin de 250 de angajați care prelucrează date cu caracter personal doar ca o activitate auxiliară activităților sale principale.

sk podniky alebo organizácie zamestnávajúce menej než 250 osôb, ktoré spracúvajú osobné údaje iba ako vedľajšiu činnosť popri svojej hlavnej činnosti.

sl podjetje ali organizacijo, ki zaposluje manj kot 250 oseb in v katerem/kateri je obdelava osebnih podatkov samo postranska dejavnost.

fi yritys tai organisaatio, jonka palveluksessa on alle 250 työntekijää ja joka käsittelee henkilötietoja ainoastaan pääasiallisen toimintansa aputoimintona.

pl przedsiębiorstwa lub organizacji zatrudniających mniej niż 250 osób, którzy przetwarzają dane osobowe jedynie w ramach działalności pobocznej w stosunku do działalności głównej.

lt įmonei arba organizacijai, kurioje yra mažiau kaip 250 darbuotojų ir kuriai asmens duomenų tvarkymas tėra pagalbinė pagrindinės veiklos dalis.

nl een onderneming of organisatie met minder dan 250 werknemers die persoonsgegevens slechts als nevenactiviteit verwerkt.

sv Ett företag eller en organisation med färre än 250 anställda som behandlar personuppgifter endast som en sidoverksamhet till sin huvudverksamhet.

Amendments

imco Amendment #

(b) an enterprise or an organisation employing fewer than 250 persons that is processing personal data only as an activity ancillary to its main activities.
Christel Schaldemose dk S&D
Anna Hedh se S&D
Catherine Stihler uk S&D

itre Amendment #

(b) an enterprise or an organisation employing fewer processing personal data relating to less than 250 persons data subjects that is processing personal data only as an activity ancillary to its main activities.
Amelia Andersdotter se Greens/EFA

itre Amendment #

(b) an enterprise or an organisation employing fewer than 250 persons that is processing personal data only as an activity ancillary to its main activities.
Eija-Riitta Korhola fi EPP

libe Amendment #

1. Each controller and processor and, if any, the controller's representative, shall maintain documentation of all processing operations under its responsibility. 2. The documentation shall contain at least the following information: (a) the name and contact details of the controller, or any joint controller or processor, and of the representative, if any; (b) the name and contact details of the data protection officer, if any; (c) the purposes of the processing, including the legitimate interests pursued by the controller where the processing is based on point (f) of Article 6(1); (d) a description of categories of data subjects and of the categories of personal data relating to them; (e) the recipients or categories of recipients of the personal data, including the controllers to whom personal data are disclosed for the legitimate interest pursued by them; (f) where applicable, transfers of data to a third country or an international organisation, including the identification of that third country or international organisation and, in case of transfers referred to in point (h) of Article 44(1), the documentation of appropriate safeguards; (g) a general indication of the time limits for erasure of the different categories of data; (h) the description of the mechanisms referred to in Article 22(3). 3. The controller and the processor and, if any, the controller's representative, shall make the documentation available, on request, to the supervisory authority. 4. The obligations referred to in paragraphs 1 and 2 shall not apply to the following controllers and processors: (a) a natural person processing personal data without a commercial interest; or (b) an enterprise or an organisation employing fewer than 250 persons that is processing personal data only as an activity ancillary to its main activities. 5. The Commission shall be empowered to adopt delegated acts in accordance with Article 86 for the purpose of further specifying the criteria and requirements for the documentation referred to in paragraph 1, to take account of in particular the responsibilities of the controller and the processor and, if any, the controller's representative. 6. The Commission may lay down standard forms for the documentation referred to in paragraph 1. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 87(2).Documentation deleted
Alexander Alvaro de ALDE

libe Amendment #

1. Each controller and processor and, if any, the controller's representative, shall maintain documentation of all processing operations under its responsibility. 2. The documentation shall contain at least the following information: (a) the name and contact details of the controller, or any joint controller or processor, and of the representative, if any; (b) the name and contact details of the data protection officer, if any; (c) the purposes of the processing, including the legitimate interests pursued by the controller where the processing is based on point (f) of Article 6(1); (d) a description of categories of data subjects and of the categories of personal data relating to them; (e) the recipients or categories of recipients of the personal data, including the controllers to whom personal data are disclosed for the legitimate interest pursued by them; (f) where applicable, transfers of data to a third country or an international organisation, including the identification of that third country or international organisation and, in case of transfers referred to in point (h) of Article 44(1), the documentation of appropriate safeguards; (g) a general indication of the time limits for erasure of the different categories of data; (h) the description of the mechanisms referred to in Article 22(3). 3. The controller and the processor and, if any, the controller's representative, shall make the documentation available, on request, to the supervisory authority. 4.The obligations referred to in paragraphs 1 and 2 shall not apply to the following controllers and processors: (a) a natural person processing personal data without a commercial interest; or (b) an enterprise or an organisation employing fewer than 250 persons that is processing personal data only as an activity ancillary to its main activities. 5. The Commission shall be empowered to adopt delegated acts in accordance with Article 86 for the purpose of further specifying the criteria and requirements for the documentation referred to in paragraph 1, to take account of in particular the responsibilities of the controller and the processor and, if any, the controller's representative. 6. The Commission may lay down standard forms for the documentation referred to in paragraph 1. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 87(2).Documentation deleted
Baroness Sarah Ludford uk ALDE

Lobby Proposals

Proposal by European Digital Rights

(b) an enterprise or an organisation employing processing personal data relating to fewer than 250 persons data subjects that is processing personal data only as an activity ancillary to its main activities.