Restaurant operator
Non disponibile
Insufficient legal basis for data processing
Data della decisione
1 gennaio 2022
Autorità
Data Protection Authority of Berlin
DE
Settore
Accomodation and Hospitality
Paese
DE
Legge
GDPRStato
FINALDescrizione
The DPA of Berlin has imposed a fine on a restaurant operator. During the Corona pandemic, the operator had required restaurant visitors to fill out forms with their personal data for the purpose of contact tracing as required by law. However, the controller unlawfully used the data to send promotional messages to the data subjects.
Citazioni legali
Art. 5Art. 6
Problemi e violazioni
Insufficient legal basis for data processing