Kolibri Image Regina und Dirk Maass GbR
GDPR enforcement action by Data Protection Authority of Hamburg on 2018-12-17.
Case details
- Authority
- Data Protection Authority of Hamburg
- Date
- 2018-12-17
- Controller / Processor
- Kolibri Image Regina und Dirk Maass GbR
- Sector
- Industry and Commerce
- Quoted Articles
- Art. 28 (3) GDPR
- Type of violation
- Insufficient data processing agreement
Summary
Please note: According to our information this fine has been withdrawn in the meantime.
Kolibri Image had send a request to the Data Protection Authority of Hessen asking how to deal with a service provider who does not want to sign a processing agreement. After not answering Kolibri Image in more detail, the case was forwarded to the locally responsible Data Protection Authority of Hamburg. This Authority then fined Kolibri Image as controller for not having a processing agreement with the service provider. Kolibri Image has stated that they will challenge the decision in front of court since they are of the opinion that the service provider does not act as a processor.