Poland: Fine for complicate data deletion for affected people
ClickQuickNow Sp.z o.o. has made the right to restrict data processing more difficult by intention. Therefore, data protection authority imposes a fine of € 47,000. No suitable technical and organizational measures (TOM) have been taken that allow simple and effective revocation of the consent or the execution of the right to deletion (“right to be forgotten”).
The data protection authority stated that the company made it explicitly more difficult to cancel the data processing in compare to give the consent to data processing. Furthermore, people were forced to give a reason, why the data processing should be stopped, which is not legal according to the GDPR.
The authority also stated, that the company made this process as complicated as possible by intention. ClickQuickNow also sent out contradictory information to the affected people.
Type of Issue:
violated rights of the data subject
Number of involved data records:
Special category of data involved: