Hungary

Unknown

2,850 €

GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2019-06-26.

Rank · Sector

#121

of 218 in Not assigned

Rank · Hungary

#44

of 75

Rank · All fines

#2,150

of 3,050

Case details

Authority: Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
Date: 2019-06-26
Controller / Processor: Unknown
Sector: Not assigned
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The individual requested the deletion of his contact data (including his telephone number), however the controller further processed his contact data for claim enforcement purposes on the basis of its legitimate interest. NAIH determined that the controller had no compelling legitimate grounds for processing the telephone number of the data subject, since his address was also at hand, which is sufficient for claim enforcement purposes and for concerning communication with the data subject.

Open original source Links to the regulator's original publication or another source.