In addition, there was no reference to the data protection officer(s) and the legal basis for processing. The explanation was also flawed in other respects.
Due to these multiple infringements, the data protection authority imposed a fine of € 15,000 whereby the company’s annual turnover lies at approximately 1.7 million euros.
Type of Issue:
violated duty to inform
Number of involved data records:
Special category of data involved:
Violation of GDPR Paragraph: