Claim management company

€2,850

Insufficient legal basis for data processing

결정 날짜

2019년 6월 3일

권한

Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)

HU

섹터

Finance, Insurance and Consulting

국가

HU

법률

GDPR

상태

FINAL

설명

The complainants stated during the case that they concluded a credit agreement with the bank, which sold its claim against the complainants and transferred their respective data to a third-party company (controller). NAIH determined in the case that the controller can neither rely on the consent of the data subjects nor the performance of the credit contract as the legal basis of the data processing, since the data subjects concluded such contract with the bank, not with the controller. The appropriate legal basis for processing could have been the legitimate interest of the controller.

법적 인용

Art. 5Art. 6

문제 및 위반 사항

Insufficient legal basis for data processing

개인정보 보호 정책 시행에 대한 최신 정보

당사는 사용자의 개인정보를 존중합니다. 한 달에 한 번, 스팸 없이, 언제든지 구독을 취소할 수 있습니다.