Czech Republic

Car renting company

1,165 €

GDPR enforcement action by Czech Data Protection Auhtority (UOOU) on 2019-02-04.

Rank · Sector

#504

of 597 in Industry and Commerce

Rank · Czech Republic

#47

of 73

Rank · All fines

#2,584

of 3,050

Case details

Authority: Czech Data Protection Auhtority (UOOU)
Date: 2019-02-04
Controller / Processor: Car renting company
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a) GDPR
Type of violation: Insufficient fulfilment of information obligations

Summary

A person who rented a car found out that the car was tracked via GPS by the renting company even though there was no information provided on the fact that the car is being tracked. The Czech Data Protection Authority found that there was no information provided in terms of Art. 13 GDPR and that Art. 6 (1) f) GDPR could not be the legal basis under the concrete circumstances. Due to that the UOOU found that there was a violation of Art. 5 (1) a) GDPR for which it imposed the fine.

Open original source Links to the regulator's original publication or another source.