Restaurant operator
Ni na voljo
Insufficient legal basis for data processing
Datum odločitve
1. januar 2022
Organ
Data Protection Authority of Berlin
DE
Sektor
Accomodation and Hospitality
Država
DE
Zakon
GDPRStatus
FINALOpis
The DPA of Berlin has imposed a fine on a restaurant operator. During the Corona pandemic, the operator had required restaurant visitors to fill out forms with their personal data for the purpose of contact tracing as required by law. However, the controller unlawfully used the data to send promotional messages to the data subjects.
Pravne navedbe
Art. 5Art. 6
Vprašanja in kršitve
Insufficient legal basis for data processing