Restaurant operator
사용 불가
Insufficient legal basis for data processing
결정 날짜
2022년 1월 1일
권한
Data Protection Authority of Berlin
DE
섹터
Accomodation and Hospitality
국가
DE
법률
GDPR상태
FINAL설명
The DPA of Berlin has imposed a fine on a restaurant operator. During the Corona pandemic, the operator had required restaurant visitors to fill out forms with their personal data for the purpose of contact tracing as required by law. However, the controller unlawfully used the data to send promotional messages to the data subjects.
법적 인용
Art. 5Art. 6
문제 및 위반 사항
Insufficient legal basis for data processing