- Enforcing jurisdiction
- Hungary · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Robinson Tours Ltd. (Robinson Tours Idegenforgalmi és Szolgáltató Kft.) – €55,400 Fine (Hungary, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Robinson Tours Ltd. was fined for not protecting customer data in its reservation system. This data, which included personal IDs and passport numbers, was accessible to anyone online. The case highlights the importance of data security for businesses handling personal information.
What happened
Robinson Tours Ltd. failed to secure customer data in its online reservation system, allowing it to be publicly accessible.
Who was affected
781 customers of Robinson Tours whose personal data was exposed online.
What the authority found
The Hungarian DPA found that Robinson Tours did not take necessary security measures, violating GDPR's requirements for data protection.
Why this matters
This ruling emphasizes that companies must ensure robust data security to protect customer information. Businesses should regularly review their security practices to avoid similar penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 12 March 2026.
Processing notes: amount discrepancy, entity split needed.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Hungarian DPA (NAIH) imposed a fine of HUF 20,500,000 (EUR 55,400) on Robinson Tours Idegenforgalmi és Szolgáltató Kft. (Robinson Tours Ltd.) The travel agent's reservation system contained unprotected data of customers, which could be viewed by anyone and found via Google. The data contained, among others, names, contact and address data, copies of personal IDs and passport numbers. During the DPA's investigation, it turned out that the data in question was from a test database created by Next Time Media Agency Ltd, the web agency contracted to develop and operate the database, which was supplemented not only with test data but also with real data of Robinson Tours' customers. In total, the data of 781 individuals was affected, which was accessible by anyone in the period from November 13, 2019 to February 4, 2020. The NAIH also notes that Robinson Tours did not conduct regular security risk screenings. Robinson Tours also failed to notify the data subjects about the data breach.
Related Enforcement Actions (0)
No other enforcement actions found for Robinson Tours Ltd. (Robinson Tours Idegenforgalmi és Szolgáltató Kft.) in HU
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
16 December 2020
Authority
Nemzeti Adatvédelmi és Információszabadság Hatóság
Fine Amount
€55,400
About this data
Cite as: Cookie Fines. Robinson Tours Ltd. (Robinson Tours Idegenforgalmi és Szolgáltató Kft.) - Hungary (2020). Retrieved from cookiefines.eu
Last updated: