Deutsche Kreditbank

€300,000

Insufficient fulfilment of data subjects rights

Ngày ra quyết định

31 tháng 5, 2023

Thẩm quyền

Data Protection Authority of Berlin

DE

Ngành

Finance, Insurance and Consulting

Quốc gia

DE

Luật

GDPR

Trạng thái

FINAL

Mô tả

The DPA of Berlin has imposed a fine of EUR 300,000 on Deutsche Kreditbank. A customer had filed a complaint with the DPA. The customer had submitted an application for a credit card to the bank, which was rejected in the course of an automated decision, despite the customer's good credit history and high income. The customer then requested an explanation of the reasons for the rejection of their application and the basis on which the automated decision was made. However, the controller refused to provide such information to him, which also made it difficult for the customer to appeal the decision. The DPA found that the controller violated its obligation to transparently inform the data subject about the decision upon request.

Trích dẫn pháp lý

Art. 5 (1)Art. 15 (1)Art. 22 (3)

Vấn đề & Vi phạm

Insufficient fulfilment of data subjects rights

Cập nhật thông tin về việc thực thi quy định bảo vệ dữ liệu cá nhân

Chúng tôi tôn trọng quyền riêng tư của bạn. Chỉ một email mỗi tháng, không spam, có thể hủy đăng ký bất cứ lúc nào.