Czech Republic

Self Employed Person

1,040 €

GDPR enforcement action by Czech Data Protection Auhtority (UOOU) on 2023-09-26.

Rank · Sector

#175

of 351 in Individuals and Private Associations

Rank · Czech Republic

#49

of 73

Rank · All fines

#2,588

of 3,050

Case details

Authority: Czech Data Protection Auhtority (UOOU)
Date: 2023-09-26
Controller / Processor: Self Employed Person
Sector: Individuals and Private Associations
Quoted Articles: Art. 5 (1) a), Art. 13 (1) c), (2) b), d) GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Czech DPA has imposed a fine of EUR 1,040 on a self employed person. The accused's website did not comply with GDPR requirements for cookies, as it processed data before obtaining consent, set cookies with an excessive expiration period, and may have transferred data outside the EU and EEA. The inspection was initiated by a Polish citizen. Despite a warning from the Office for personal data protection, the accused failed to address these issues.

Open original source Links to the regulator's original publication or another source.