Legal Person – €400 Fine (Czech Republic, 2020)

€400Úřad pro ochranu osobních údajů25 September 2020Czech Republic
final
Fine

A company in the Czech Republic was fined for using third-party cookies without getting consent from users. This is important because it shows that businesses must ask for permission before tracking visitors online. Website operators should check their cookie practices to avoid similar penalties.

What happened

The company processed data without a valid legal basis and used third-party cookies without user consent.

Who was affected

Website visitors whose data was tracked by the company's cookies were affected.

What the authority found

The authority found that the company violated GDPR by not obtaining consent for cookie use.

Why this matters

This ruling emphasizes the need for clear consent mechanisms for cookies. Website operators should ensure they inform users and obtain permission before using tracking technologies.

GDPR Articles Cited

AI-verified

Art. 30(GDPR)
Art. 5(1)(a) GDPR
Art. 13(1) GDPR
Art. 28(3) GDPR
View original scraped data
Art. 15(1) GDPR

Original data from scraper before AI verification against source document.

Source verified 8 April 2026
national law identified
amount discrepancy
Full Legal Summary
Detailed

The Czech DPA has imposed a fine of EUR 400 on a legal person. Proceedings were initiated following an inspection carried out in response to a complaint. The accused processed and archived personal data for the purpose of offering services via a call centre. However, the data was processed without a valid legal basis. While the data subjects had purportedly given consent verbally over the phone, no evidence of this was available. Additionally, the accused used cookies in breach of the GDPR and engaged an external data processor without having a valid data processing agreement in place.

Violations (2)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Related Enforcement Actions (20)

Other enforcement actions involving Legal Person in CZ

Current
Sept 2020

Fine

€400

Details

Fine Date

25 September 2020

Authority

Úřad pro ochranu osobních údajů

Fine Amount

€400

Enforcement Tracker ID

ETid-2794

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Legal Person - Czech Republic (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: