Restaurant operator
Không có sẵn
Insufficient legal basis for data processing
Ngày ra quyết định
1 tháng 1, 2022
Thẩm quyền
Data Protection Authority of Berlin
DE
Ngành
Accomodation and Hospitality
Quốc gia
DE
Luật
GDPRTrạng thái
FINALMô tả
The DPA of Berlin has imposed a fine on a restaurant operator. During the Corona pandemic, the operator had required restaurant visitors to fill out forms with their personal data for the purpose of contact tracing as required by law. However, the controller unlawfully used the data to send promotional messages to the data subjects.
Trích dẫn pháp lý
Art. 5Art. 6
Vấn đề & Vi phạm
Insufficient legal basis for data processing