Company

€3,400

Insufficient legal basis for data processing

תאריך ההחלטה

1 בינואר 2022

סמכות

Czech Data Protection Auhtority (UOOU)

CZ

סקטור

Industry and Commerce

מדינה

HU

חוק

GDPR

סטטוס

FINAL

תיאור

The Czech DPA imposed a fine of EUR 3,400 on a company. The data subject had concluded an energy supply contract with the controller in the past, but then duly terminated it. Nevertheless, the controller assigned the previously terminated contract to a processor (sales representative) in order to contact the data subject to conclude a new contract. The DPA found that the controller had unlawfully transferred the data subject's data to the sales agent, as in the absence of an existing contract it had no valid legal basis for such transfer.

בעיות והפרות

Insufficient legal basis for data processing

הישאר מעודכן בנושא אכיפת פרטיות

אנו מכבדים את פרטיותך. דוא"ל אחד בחודש, ללא דואר זבל, ניתן לבטל את המנוי בכל עת.