Company
Insufficient fulfilment of information obligations
Дата принятия решения
13 декабря 2022 г.
Авторитет
National Commission for Data Protection (CNPD)
LU
Сектор
Industry and Commerce
Страна
HU
Закон
GDPRСтатус
FINALОписание
The DPA of Luxembourg has imposed a fine of EUR 700 on a company that provides online services to citizens. During its investigation, the DPA found that the company had not provided information about data processing in a concise, transparent, intelligible and easily accessible form. The DPA considered this to be a violation of Art. 12 (1) GDPR. Furthermore the DPA found that the controller failed to provide the data subjects sufficient information on the transfer of personal data to a third country or international organisation, therefore violating Art. 13 GDPR.