Self Employed Person
€200
Insufficient legal basis for data processing
Otsuse kuupäev
10. märts 2021
Ametiasutus
Czech Data Protection Auhtority (UOOU)
CZ
Sektor
Individuals and Private Associations
Riik
CZ
Seadus
GDPRStaatus
FINALKirjeldus
The Czech DPA has imposed a fine of EUR 200 on a self employed person. The accused obtained scans of identity cards from foreign subjects who booked accommodation there and kept them for an indefinite period of time. The accused was then unable to provide evidence of consent to such processing to the personal data.
Õiguslikud viited
Art. 5 (1)Art. 6 (1)Art. 12 (1)Art. 13Art. 14Art. 15Art. 22
Probleemid ja rikkumised
Insufficient legal basis for data processing