Poland: Fine for complicate data deletion for affected people

Poland: Fine for complicate data deletion for affected people

ClickQuickNow Sp.z o.o. has made the right to restrict data processing more difficult by intention. Therefore, data protection authority imposes a fine of € 47,000. No suitable technical and organizational measures (TOM) have been taken that allow simple and effective revocation of the consent or the execution of the right to deletion (“right to be forgotten”).

The data protection authority stated that the company made it explicitly more difficult to cancel the data processing in compare to give the consent to data processing. Furthermore, people were forced to give a reason, why the data processing should be stopped, which is not legal according to the GDPR.

The authority also stated, that the company made this process as complicated as possible by intention. ClickQuickNow also sent out contradictory information to the affected people.

Decision data:
13.11.2019

Country:
Poland

Type of Issue:
violated rights of the data subject

Number of involved data records:
unknown

Special category of data involved:
No

Fine:
€ 47,000,-

Reference:
Press release of UODO (polish data protection authority)