Debt collection company
사용 불가
Insufficient legal basis for data processing
결정 날짜
2022년 1월 1일
권한
Data Protection Authority of Baden-Wuerttemberg
DE
섹터
Finance, Insurance and Consulting
국가
DE
법률
GDPR상태
FINAL설명
The DPA from Baden-Württemberg has imposed a fine on a debt collection company. The debt collection company had received investor information from an employee of an insolvent company, which it used to offer its services to assist the affected investors with insolvency claims. However, the DPA found that the company had processed the data without the required legal basis. In addition, the debt collection company failed to provide the data subjects with necessary information, such as the origin of their data.
법적 인용
Art. 6 (1)Art. 14 (1)
문제 및 위반 사항
Insufficient legal basis for data processing