Self Employed Person
€200
Insufficient legal basis for data processing
Dato for beslutning
10. mars 2021
Myndighet
Czech Data Protection Auhtority (UOOU)
CZ
Sektor
Individuals and Private Associations
Land
CZ
Lov og rett
GDPRStatus
FINALBeskrivelse
The Czech DPA has imposed a fine of EUR 200 on a self employed person. The accused obtained scans of identity cards from foreign subjects who booked accommodation there and kept them for an indefinite period of time. The accused was then unable to provide evidence of consent to such processing to the personal data.
Juridiske henvisninger
Art. 5 (1)Art. 6 (1)Art. 12 (1)Art. 13Art. 14Art. 15Art. 22
Problemer og overtredelser
Insufficient legal basis for data processing