Concentrix Cvg Italy s.r.l.

€20,000

Insufficient legal basis for data processing

Karar Tarihi

26 Kasım 2020

Otorite

Italian Data Protection Authority (Garante)

IT

Sektör

Employment

Ülke

IT

Hukuk

GDPR

Durum

FINAL

Açıklama

The union UILCOM Sardegna filed a complaint with the Italian DPA (garante) against the call center operator Concentrix Cvg Italy s.r.l. regarding an internal regulation of the controller. Under the terms of a 'clean desk policy,' the company had prohibited employees from keeping certain items, such as smartphones, on their desks, which was intended to ensure confidentiality in the processing of customers' personal data. Exceptions were made for medication, which the data subjects proved they needed to take during their shift. These had to be placed visibly on the desk, making it indirectly possible for other employees to obtain information on the health status of the data subjects. The controller had indeed informed the data subjects about the rules of procedure and obtained their consents. However, this did not contain any information on the processing of their health data.

Yasal Atıflar

Art. 5 (1)Art. 6 (1)Art. 9 (1)

Sorunlar & İhlaller

Insufficient legal basis for data processing

Gizlilik Uygulamasından Haberdar Olun

Gizliliğinize saygı duyuyoruz. Ayda bir e-posta, spam yok, istediğiniz zaman abonelikten çıkın.