Telecommunication service provider

€27,100

Insufficient legal basis for data processing

Datum för beslut

26 februari 2019

Myndighet

Bulgarian Commission for Personal Data Protection (KZLD)

BG

Sektor

Media, Telecoms and Broadcasting

Land

BG

Lag

GDPR

Status

FINAL

Beskrivning

Repeated registration of prepaid services without the knowledge and consent of the data subject Employees of the telecommunications provider have used personal data and registered the complainant with the company's prepaid service. The data subject had not signed the application and had not consented to the processing of his personal data for the stated purpose. There was also no other legal basis applicable. The signature of the application and the complainant own genuine application were not identical and the persons personal identification number was indicated, but the identity card number was not the complainants one.

Rättsliga hänvisningar

Art. 6Art. 5 (1)

Frågor och överträdelser

Insufficient legal basis for data processing

Håll dig uppdaterad om efterlevnaden av sekretessreglerna

Vi respekterar din integritet. Ett e-postmeddelande per månad, ingen skräppost, avsluta prenumerationen när som helst.