Deichmann Cipőkereskedelmi Korlátolt Felelősségű Társaságnak
€54,800
Insufficient fulfilment of data subjects rights
Decision Date
October 23, 2020
Authority
Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
HU
Sector
Industry and Commerce
Country
HU
Law
GDPRStatus
FINALDescription
The data controller denied the data subject access to the video material recorded by CCTV in a local store, with which the data subject wanted to prove that he or she had not received any money back after paying in the store. The company not only denied the data subject access to the data according to Art. 15 GDPR (with the argument that this would require an official order), but also deleted the video recordings after a certain period of time, although the data subject had requested the company to not delete the data in advance according to Art. 18 (1) c) GDPR.
Legal Citations
Art. 12Art. 15Art. 18 (1)Art. 25
Issues & Violations
Insufficient fulfilment of data subjects rights