Debt collection company
Ei ole saadaval
Insufficient legal basis for data processing
Otsuse kuupäev
1. jaanuar 2022
Ametiasutus
Data Protection Authority of Baden-Wuerttemberg
DE
Sektor
Finance, Insurance and Consulting
Riik
DE
Seadus
GDPRStaatus
FINALKirjeldus
The DPA from Baden-Württemberg has imposed a fine on a debt collection company. The debt collection company had received investor information from an employee of an insolvent company, which it used to offer its services to assist the affected investors with insolvency claims. However, the DPA found that the company had processed the data without the required legal basis. In addition, the debt collection company failed to provide the data subjects with necessary information, such as the origin of their data.
Õiguslikud viited
Art. 6 (1)Art. 14 (1)
Probleemid ja rikkumised
Insufficient legal basis for data processing