Czech Republic

Unknown

118,500 €

GDPR enforcement action by Czech Data Protection Auhtority (UOOU) on 2021-01-04.

Rank · Sector

#75

of 597 in Industry and Commerce

Rank · Czech Republic

of 73

Rank · All fines

#448

of 3,050

Case details

Authority: Czech Data Protection Auhtority (UOOU)
Date: 2021-01-04
Controller / Processor: Unknown
Sector: Industry and Commerce
Quoted Articles: Art. 6 (1) GDPR, Art. 14 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Czech DPA (UOOU) fined 11 companies a total of EUR 118,500 for sending unrequested postal advertising messages to the mailboxes of various citizens. Based on a decision by the government of the Czech Republic at the end of October, there was introduced the possibility to send postal data messages at no charge until the end of the Covid-19 pandemic. The fined companies misused this possibility. The DPA finds that the companies had no legal ground for sending offers for goods and services, constituting a breach of Art. 6 (1) GDPR. The DPA furthermore finds that a violation of Art. 14 GDPR has also occurred, as the companies did not provide the data subjects with information about the commercial use of their data when they first contacted them.

Open original source Links to the regulator's original publication or another source.