Enforcing jurisdiction
Czechia · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Legal Person – €400 Fine (Czech Republic, 2020)

€400Úřad pro ochranu osobních údajů14 July 2020Czech Republic
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A legal person was fined €400 for not proving that a user consented to the scanning of their ID when renting sports equipment. This matters because it shows that companies must have clear consent from users before processing their personal data. Not doing so can result in fines.

What happened

The legal person did not provide evidence of user consent for scanning ID cards.

Who was affected

Individuals whose ID cards were scanned in connection with renting sports equipment.

What the authority found

The authority ruled that the legal person failed to justify the necessity of processing personal data without consent.

Why this matters

This case serves as a reminder for businesses to obtain and document user consent before collecting personal information. Companies should review their consent practices to avoid penalties.

Recorded legal citations
Automatically processed
Art. 13 GDPR
Art. 15 GDPR
Art. 21 GDPR
Art. 5(1)(c) GDPR
Art. 6(1)(a) GDPR
Art. 7(1) GDPR
View original scraped data
Art. 5(1) c) GDPR
Art. 6(1) a) GDPR
Art. 7(1) GDPR
Art. 13(GDPR)
Art. 15(GDPR)
Art. 21(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Automated check recorded — 17 March 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Czech DPA has imposed a fine of EUR 400 on a legal person. The accused did not provide evidence that the data subject had consented to the scanning or copying of their ID card or other identification documents in connection with a contract for renting sports equipment. Furthermore, she failed to justify the necessity of both scanning/copying and storing these documents.

Related Enforcement Actions (20)

Other enforcement actions involving Legal Person in CZ

Current
Jul 2020

Fine

€400

Details

Fine Date

14 July 2020

Authority

Úřad pro ochranu osobních údajů

Fine Amount

€400

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Legal Person - Czech Republic (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: