Restaurant operator
不可用
Insufficient legal basis for data processing
決定日期
2022年1月1日
權限
Data Protection Authority of Berlin
DE
部門
Accomodation and Hospitality
國家
DE
法律
GDPR狀態
FINAL說明
The DPA of Berlin has imposed a fine on a restaurant operator. During the Corona pandemic, the operator had required restaurant visitors to fill out forms with their personal data for the purpose of contact tracing as required by law. However, the controller unlawfully used the data to send promotional messages to the data subjects.
法律引文
Art. 5Art. 6
問題與違規
Insufficient legal basis for data processing