Germany

Company

—

GDPR enforcement action by Data Protection Authority of Bremen on 2023.

Case details

Authority: Data Protection Authority of Bremen
Date: 2023
Controller / Processor: Company
Sector: Employment
Quoted Articles: Art. 6 (1) a) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The DPA in Bremen has imposed a fine on a company. The controller had stored an applicant's application documents after the application process for the purpose of further retention for the purpose of considering the applicant for future vacancies but had not obtained consent from the applicant in question.

Open original source Links to the regulator's original publication or another source.