Restaurant operator
Non disponible
Insufficient legal basis for data processing
Date de décision
1 janvier 2022
Autorité
Data Protection Authority of Berlin
DE
Secteur
Accomodation and Hospitality
Pays
DE
Droit
GDPRStatut
FINALDescription
The DPA of Berlin has imposed a fine on a restaurant operator. During the Corona pandemic, the operator had required restaurant visitors to fill out forms with their personal data for the purpose of contact tracing as required by law. However, the controller unlawfully used the data to send promotional messages to the data subjects.
Citations légales
Art. 5Art. 6
Questions et violations
Insufficient legal basis for data processing