Restaurant operator
Нет в наличии
Insufficient legal basis for data processing
Дата принятия решения
1 января 2022 г.
Авторитет
Data Protection Authority of Berlin
DE
Сектор
Accomodation and Hospitality
Страна
DE
Закон
GDPRСтатус
FINALОписание
The DPA of Berlin has imposed a fine on a restaurant operator. During the Corona pandemic, the operator had required restaurant visitors to fill out forms with their personal data for the purpose of contact tracing as required by law. However, the controller unlawfully used the data to send promotional messages to the data subjects.
Юридические цитаты
Art. 5Art. 6
Проблемы и нарушения
Insufficient legal basis for data processing