Czech Republic

Company

3,400 €

GDPR enforcement action by Czech Data Protection Auhtority (UOOU) on 2022.

Rank · Sector

#139

of 165 in Transportation and Energy

Rank · Czech Republic

#26

of 73

Rank · All fines

#1,971

of 3,042

Case details

Authority: Czech Data Protection Auhtority (UOOU)
Date: 2022
Controller / Processor: Company
Sector: Transportation and Energy
Quoted Articles: Unknown
Type of violation: Insufficient legal basis for data processing

Summary

The Czech DPA imposed a fine of EUR 3,400 on a company. The data subject had concluded an energy supply contract with the controller in the past, but then duly terminated it. Nevertheless, the controller assigned the previously terminated contract to a processor (sales representative) in order to contact the data subject to conclude a new contract. The DPA found that the controller had unlawfully transferred the data subject's data to the sales agent, as in the absence of an existing contract it had no valid legal basis for such transfer.

Open original source Links to the regulator's original publication or another source.