Czech Republic

Legal Person

3,810 €

GDPR enforcement action by Czech Data Protection Auhtority (UOOU) on 2023-05-04.

Rank · Sector

#110

of 218 in Not assigned

Rank · Czech Republic

#24

of 73

Rank · All fines

#1,945

of 3,042

Case details

Authority: Czech Data Protection Auhtority (UOOU)
Date: 2023-05-04
Controller / Processor: Legal Person
Sector: Not assigned
Quoted Articles: Art. 6 GDPR, Art. 14 (1), (2), (3) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Czech DPA has imposed a fine of EUR 3,810 on a legal person. The accused unlawfully processed the personal data of an unspecified number of creditors to purchase their claims against a debtor company, without a legal basis. She also failed to inform the data subjects about this processing, having obtained their data from another company rather than directly from them.

Open original source Links to the regulator's original publication or another source.