The purpose of the paper is to analyse issues related to personal data processing
within the framework of co-operation between the employer and trade unions in
individual employment matters. The issues of personal data processing in collective relations are becoming more important especially due to lack of detailed legislative solutions, which results in the necessity to apply the general provisions of the GDPR as well as the latest changes to the Trade Unions Act. Pursuant to these changes, not only employees, but also persons performing gainful employment who are not employees can create and join trade unions as well as can be defended by the trade unions. The legislator frequently finds it difficult to adjust the protection of personal data to the specificity of collective relations, and the way in which the relationship between employers and trade unions is shaped in individual employment matters raises many questions in the context of personal data protection. The issue in question has not been explored in depth in the professional labour law literature. Thus, research on this subject is novel and justified from both the theoretical and the practical perspective. In the article, the formal-dogmatic method of research was used.

A large number of opinions have been expressed about the decision C-131/12. Initially, Google’s defeat has been widely welcomed as the giant had suffered a bitter defeat. After a first joy about the containment of Google’s arrogance it became clear that the excessive claim for right to be forgotten will dry out our sources of information. Can privacy be seen as a fear for diversity of opinion? It may be due to the tension between data and reputation protection on the one hand and the possibility to protect against lies and fraud on the other hand. It is not just Google’s freedom of expression, which is in the centre of our interests. We want to find informations and Google is helping us in this regard. Forcing Google to suppress the information flow can not hinder Google to earn money. If we go through the opinion of the Advocate General and compare it with the reasoning of
the ECJ, then we come to the conclusion, that the ECJ had to decide in this a way on the grounds of the current legal status. The ECJ was standing with the back to the wall, because it has to apply the current law and this left no option open. Thus, the ECJ could not follow the opinion of the Advocate General. In the following I will shortly summarize the Spanish Data Protection Authority (SDPA) decision, before moving to the Advocate General opinion and the judgment of the ECJ and finally provide an outlook on possible
future development in this regard.

Social labour inspectorate, as a special form of unionised representation of employees’ interests, has the right to control employers in the field of their compliance with the provisions of the labour law in place. Exercising this controlling function involves the need for a social labour inspector to access the information and docu-ments that may contain personal data of employees. The study advances a thesis that a social labour inspector is an entity processing personal data of employees on behalf of a company trade union organisation – who is the controller of these data, and the grounds for the processing of personal data of employees are the relevant provisions of the GDPR. The theses proposed in the study aim to challenge the Constitutional Tribunal’s standpoint regarding a social labour inspector’s right to obtain personal data. The problems addressed in the study have not been a sub-ject of the existing views of legal academics and commentators, nor have they been covered in the established line of judicial decisions yet.

In addition to search engines, social networks represent an important digital service for many Internet users. Social network services such as Facebook, Xing, or Twitter provide vital platforms for communication and sharing of content as part of a modern, user-friendly Internet. Public criticism of social networks is expressed in particular with regard to processing of personal data. These play a central role in business models of many social networks, with regard to their use e.g. for advertising purposes. A question is, if it can be assumed that market-dominant providers, due to a lock-in effect, can demand a wide-ranging consent for the collection and use of personal data that would be expected in a functioning competition? In the following, social networks, potential competition issues and possible legislative measures due to concentration tendencies in connection with access to user data in the area of social networks will be discussed.