Ski rental company
Non-compliance with general data processing principles
결정 날짜
2020년 1월 1일
권한
Czech Data Protection Auhtority (UOOU)
CZ
섹터
Industry and Commerce
국가
CZ
법률
GDPR상태
FINAL설명
The Czech DPA (UOOU) imposed a fine against a ski rental company. Due to the high value of the sports equipment, the controller required a financial deposit or a full copy of a valid ID when renting sports equipment. The consent to the copy of the ID was included in the sports equipment rental agreement itself. Thus, when the sports equipment rental agreement was signed, consent to the processing of the ID copy was obtained at the same time. The DPA considered this method of obtaining consent to be a violation against the lawfulness of the processing. In addition, it was found that the data subjects were not properly informed about the processing of their personal data.