Poland: Fine for complicate data deletion for affected people

Poland: Fine for complicate data deletion for affected people

ClickQuickNow Sp.z o.o. has made the right to restrict data processing more difficult by intention. Therefore, data protection authority imposes a fine of € 47,000. No suitable technical and organizational measures (TOM) have been taken that allow simple and effective revocation of the consent or the execution of the right to deletion (“right to be forgotten”).

The data protection authority stated that the company made it explicitly more difficult to cancel the data processing in compare to give the consent to data processing. Furthermore, people were forced to give a reason, why the data processing should be stopped, which is not legal according to the GDPR.

The authority also stated, that the company made this process as complicated as possible by intention. ClickQuickNow also sent out contradictory information to the affected people.

Entscheidungsdatum:
13.11.2019

Land:
Poland

Art des Verstoßes:
violated rights of the data subject

Betroffene Datensätze:
unknown

Waren sensible Daten betroffen?:
No

verhängte Geldstrafe:
€ 47,000,-

Quelle:
Press release of UODO (polish data protection authority)