Restaurant operator
Nėra
Insufficient legal basis for data processing
Sprendimo priėmimo data
2022 m. sausio 1 d.
Institucija
Data Protection Authority of Berlin
DE
Sektorius
Accomodation and Hospitality
Šalis
DE
Teisė
GDPRStatusas
FINALAprašymas
The DPA of Berlin has imposed a fine on a restaurant operator. During the Corona pandemic, the operator had required restaurant visitors to fill out forms with their personal data for the purpose of contact tracing as required by law. However, the controller unlawfully used the data to send promotional messages to the data subjects.
Teisinės citatos
Art. 5Art. 6
Problemos ir pažeidimai
Insufficient legal basis for data processing