In addition, there was no reference to the data protection officer(s) and the legal basis for processing. The explanation was also flawed in other respects.
Due to these multiple infringements, the data protection authority imposed a fine of € 15,000 whereby the company’s annual turnover lies at approximately 1.7 million euros.
Art des Verstoßes:
violated duty to inform
Waren sensible Daten betroffen?:
Violation of GDPR Paragraph: