Legal Person
€400
Insufficient legal basis for data processing
Lēmuma datums
2020. gada 25. septembris
Iestāde
Czech Data Protection Auhtority (UOOU)
CZ
Nozare
Not assigned
Valsts
CZ
Likums
GDPRStatuss
FINALApraksts
The Czech DPA has imposed a fine of EUR 400 on a legal person. Proceedings were initiated following an inspection carried out in response to a complaint. The accused processed and archived personal data for the purpose of offering services via a call centre. However, the data was processed without a valid legal basis. While the data subjects had purportedly given consent verbally over the phone, no evidence of this was available. Additionally, the accused used cookies in breach of the GDPR and engaged an external data processor without having a valid data processing agreement in place.
Juridiskās atsauces
Art. 5 (1)Art. 13 (1)Art. 28 (3)Art. 30
Jautājumi un pārkāpumi
Insufficient legal basis for data processing