UniCredit Bank Czech Republic and Slovakia, a.s.
€3,140
Insufficient legal basis for data processing
Decision Date
Not Available
Authority
Czech Data Protection Auhtority (UOOU)
CZ
Sector
Finance, Insurance and Consulting
Country
CZ
Law
GDPRStatus
FINALDescription
The bank established a personal bank account for a data subject without his consent or knowledge. The bank supposedly had his personal data available because the subject had disposed of his employer’s company account. The bank was not able to provide The Office for Personal Data Protection with the necessary documentation to prove entering into contract with the data subject.
Legal Citations
Art. 6
Issues & Violations
Insufficient legal basis for data processing