Self Employed Person
€1,040
Insufficient fulfilment of data subjects rights
Dátum rozhodnutia
26. septembra 2023
Úrad
Czech Data Protection Auhtority (UOOU)
CZ
Sektor
Individuals and Private Associations
Krajina
CZ
Právo
GDPRStav
FINALPopis
The Czech DPA has imposed a fine of EUR 1,040 on a self employed person. The accused's website did not comply with GDPR requirements for cookies, as it processed data before obtaining consent, set cookies with an excessive expiration period, and may have transferred data outside the EU and EEA. The inspection was initiated by a Polish citizen. Despite a warning from the Office for personal data protection, the accused failed to address these issues.
Právne citácie
Art. 5 (1)Art. 13 (1)
Problémy a porušenia
Insufficient fulfilment of data subjects rights