Self Employed Person
€1,040
Insufficient fulfilment of data subjects rights
Decision Date
September 26, 2023
Authority
Czech Data Protection Auhtority (UOOU)
CZ
Sector
Individuals and Private Associations
Country
CZ
Law
GDPRStatus
FINALDescription
The Czech DPA has imposed a fine of EUR 1,040 on a self employed person. The accused's website did not comply with GDPR requirements for cookies, as it processed data before obtaining consent, set cookies with an excessive expiration period, and may have transferred data outside the EU and EEA. The inspection was initiated by a Polish citizen. Despite a warning from the Office for personal data protection, the accused failed to address these issues.
Legal Citations
Art. 5 (1)Art. 13 (1)
Issues & Violations
Insufficient fulfilment of data subjects rights