Czech Republic

Unknown

1,900 €

GDPR enforcement action by Czech Data Protection Auhtority (UOOU) on 2020.

Rank · Sector

#472

of 597 in Industry and Commerce

Rank · Czech Republic

#40

of 73

Rank · All fines

#2,437

of 3,050

Case details

Authority: Czech Data Protection Auhtority (UOOU)
Date: 2020
Controller / Processor: Unknown
Sector: Industry and Commerce
Quoted Articles: Art. 12 (2) GDPR, Art. 15 (1) GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

A person had received an invoice for ordered goods, which, however, came from a different company than the one from which she had ordered the goods. Therefore, the data subject contacted the company that had supplied the goods and requested information about where her personal data had been obtained from, how it had been processed and on what legal basis it had been processed. As the company did not respond to her request, the data subject contacted the DPA. The DPA then demanded the controller to provide the data subject with the requested information immediately. As the controller did not respond to this request either, the DPA imposed a fine in the amount of EUR 1,900.

Open original source Links to the regulator's original publication or another source.