Legal Person – €400 Fine (Czech Republic, 2020)

€400Úřad pro ochranu osobních údajů14 July 2020Czech Republic
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Czech data protection authority fined a company for not proving that a person agreed to have their ID scanned when renting sports equipment. This matters because it highlights the importance of getting clear consent from users before handling their personal information. Companies should ensure they have proper consent processes in place.

What happened

A company was fined for failing to show that a person consented to the scanning and storing of their ID card for a rental contract.

Who was affected

The person whose ID was scanned and stored without consent.

What the authority found

The authority found that the company did not have a valid legal basis for processing the person's personal data, violating GDPR rules on consent.

Why this matters

This case emphasizes the need for businesses to obtain explicit consent from users before processing their personal data. Companies should review their consent practices to avoid similar penalties.

GDPR Articles Cited

AI-verified

Art. 13(GDPR)
Art. 15(GDPR)
Art. 21(GDPR)
Art. 5(1)(c) GDPR
Art. 6(1)(a) GDPR
Art. 7(1) GDPR
View original scraped data
Art. 5(1) c) GDPR
Art. 6(1) a) GDPR
Art. 7(1) GDPR
Art. 13(GDPR)
Art. 15(GDPR)
Art. 21(GDPR)

Original data from scraper before AI verification against source document.

Source verified 17 March 2026
articles corrected
national law identified
Full Legal Summary
Detailed

The Czech DPA has imposed a fine of EUR 400 on a legal person. The accused did not provide evidence that the data subject had consented to the scanning or copying of their ID card or other identification documents in connection with a contract for renting sports equipment. Furthermore, she failed to justify the necessity of both scanning/copying and storing these documents.

Related Enforcement Actions (20)

Other enforcement actions involving Legal Person in CZ

Current
Jul 2020

Fine

€400

Details

Fine Date

14 July 2020

Authority

Úřad pro ochranu osobních údajů

Fine Amount

€400

Enforcement Tracker ID

ETid-2830

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Legal Person - Czech Republic (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: