Poland: Fine for complicate data deletion for affected people
ClickQuickNow Sp.z o.o. has made the right to restrict data processing more difficult by intention. Therefore, data protection authority imposes a fine of € 47,000. No suitable technical and organizational measures (TOM) have been taken that allow simple and effective revocation of the consent or the execution of the right to deletion (“right to be forgotten”).
The data protection authority stated that the company made it explicitly more difficult to cancel the data processing in compare to give the consent to data processing. Furthermore, people were forced to give a reason, why the data processing should be stopped, which is not legal according to the GDPR.
The authority also stated, that the company made this process as complicated as possible by intention. ClickQuickNow also sent out contradictory information to the affected people.
Decision data:
13.11.2019
Country:
Poland
Type of Issue:
violated rights of the data subject
Number of involved data records:
unknown
Special category of data involved:
No
Fine:
€ 47,000,-
Violation of GDPR Paragraph:
12. Transparent information, communication and modalities for the exercise of the rights of the data subject
7. Conditions for consent
Reference:
Press release of UODO (polish data protection authority)