Kolibri Image Regina und Dirk Maass GbR

€5,000

Insufficient data processing agreement

Decision Date

December 17, 2018

Authority

Data Protection Authority of Hamburg

DE

Sector

Industry and Commerce

Country

DE

Law

GDPR

Status

FINAL

Description

Please note: According to our information this fine has been withdrawn in the meantime. Kolibri Image had send a request to the Data Protection Authority of Hessen asking how to deal with a service provider who does not want to sign a processing agreement. After not answering Kolibri Image in more detail, the case was forwarded to the locally responsible Data Protection Authority of Hamburg. This Authority then fined Kolibri Image as controller for not having a processing agreement with the service provider. Kolibri Image has stated that they will challenge the decision in front of court since they are of the opinion that the service provider does not act as a processor.

Legal Citations

Art. 28 (3)

Issues & Violations

Insufficient data processing agreement

Stay Updated on Privacy Enforcement

We respect your privacy. One email per month, no spam, unsubscribe anytime.