Ski rental company
Non-compliance with general data processing principles
決定日
2020年1月1日
権威
Czech Data Protection Auhtority (UOOU)
CZ
セクター
Industry and Commerce
国名
CZ
法律
GDPRステータス
FINAL説明
The Czech DPA (UOOU) imposed a fine against a ski rental company. Due to the high value of the sports equipment, the controller required a financial deposit or a full copy of a valid ID when renting sports equipment. The consent to the copy of the ID was included in the sports equipment rental agreement itself. Thus, when the sports equipment rental agreement was signed, consent to the processing of the ID copy was obtained at the same time. The DPA considered this method of obtaining consent to be a violation against the lawfulness of the processing. In addition, it was found that the data subjects were not properly informed about the processing of their personal data.