Praktiškas UAB – €6,000 Fine (Lithuania, 2023)

€6,000Valstybine duomenu apsaugos inspekcija9 January 2023Lithuania
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Praktiškas UAB, a sports club operator in Lithuania, was fined EUR 6,000 for improperly using customers' biometric data. They didn't offer alternatives to biometric access and failed to inform customers adequately. The Lithuanian authority found these actions violated GDPR.

What happened

Praktiškas UAB used customers' biometric data without offering alternatives or providing enough information.

Who was affected

Customers of SportGates sports clubs whose biometric data was used for access without proper consent or alternatives.

What the authority found

The Lithuanian authority fined Praktiškas UAB for not obtaining voluntary consent and failing to inform customers about biometric data use.

Why this matters

This case highlights the need for businesses to offer alternatives to biometric data collection and ensure clear communication with customers. It serves as a reminder that consent must be freely given and informed under GDPR.

GDPR Articles Cited

Art. 5(1)(a) GDPR
Art. 9(1) GDPR
Art. 13(1) GDPR
Art. 30(1) GDPR
Art. 35(1) GDPR
Full Legal Summary
Detailed

The Lithuanian DPA has fined Praktiškas UAB, the operator of SportGates sports clubs, EUR 6,000. The controller had processed biometric data of customers in the context of their access to sports facilities. During its investigation, the DPA found that the customers' consent to the processing of their biometric data could not be considered voluntary. This was because the controller did not offer the provision of any other type of information for access to the sports clubs. Nor did it provide the data subjects with information about possible alternatives for accessing the sports club. In addition, the DPA found that the controller did not provide the data subjects with sufficient information about the processing of their personal biometric data. The controller also failed to conduct a data protection impact assessment before processing the personal data.

Related Enforcement Actions (0)

No other enforcement actions found for Praktiškas UAB in LT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

9 January 2023

Authority

Valstybine duomenu apsaugos inspekcija

Fine Amount

€6,000

Enforcement Tracker ID

ETid-1563

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Praktiškas UAB - Lithuania (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: