Legal Person
€400
Insufficient legal basis for data processing
決定日
2020年7月14日
権威
Czech Data Protection Auhtority (UOOU)
CZ
セクター
Not assigned
国名
CZ
法律
GDPRステータス
FINAL説明
The Czech DPA has imposed a fine of EUR 400 on a legal person. The accused did not provide evidence that the data subject had consented to the scanning or copying of their ID card or other identification documents in connection with a contract for renting sports equipment. Furthermore, she failed to justify the necessity of both scanning/copying and storing these documents.
法的引用
Art. 5 (1)Art. 6 (1)Art. 7 (1)Art. 13Art. 15Art. 21
問題と違反
Insufficient legal basis for data processing