Hungary

Deichmann Cipőkereskedelmi Korlátolt Felelősségű Társaságnak

54,800 €

GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2020-10-23.

Rank · Sector

#99

of 595 in Industry and Commerce

Rank · Hungary

#13

of 73

Rank · All fines

#671

of 3,042

Case details

Authority: Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
Date: 2020-10-23
Controller / Processor: Deichmann Cipőkereskedelmi Korlátolt Felelősségű Társaságnak
Sector: Industry and Commerce
Quoted Articles: Art. 12 GDPR, Art. 15 GDPR, Art. 18 (1) c) GDPR, Art. 25 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The data controller denied the data subject access to the video material recorded by CCTV in a local store, with which the data subject wanted to prove that he or she had not received any money back after paying in the store. The company not only denied the data subject access to the data according to Art. 15 GDPR (with the argument that this would require an official order), but also deleted the video recordings after a certain period of time, although the data subject had requested the company to not delete the data in advance according to Art. 18 (1) c) GDPR.

Open original source Links to the regulator's original publication or another source.