Company – €3,400 Fine (Czech Republic, 2022)

€3,400Úřad pro ochranu osobních údajů1 January 2022Czech Republic
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Czech company was fined EUR 3,400 for sharing a former customer's data with a sales agent without a valid reason. The customer had ended their contract, but the company still passed their information along to try and win them back. This case highlights the importance of having a legal basis before sharing personal data.

What happened

A company shared a former customer's data with a sales agent without a valid legal basis.

Who was affected

A former customer who had terminated their energy supply contract.

What the authority found

The Czech DPA found the company unlawfully transferred data without a valid legal basis, as there was no existing contract.

Why this matters

This case serves as a warning to businesses that they must have a valid reason to share personal data, even if it's for marketing purposes. Companies should ensure they have proper consent or another legal basis before transferring customer information.

Full Legal Summary
Detailed

The Czech DPA imposed a fine of EUR 3,400 on a company. The data subject had concluded an energy supply contract with the controller in the past, but then duly terminated it. Nevertheless, the controller assigned the previously terminated contract to a processor (sales representative) in order to contact the data subject to conclude a new contract. The DPA found that the controller had unlawfully transferred the data subject's data to the sales agent, as in the absence of an existing contract it had no valid legal basis for such transfer.

Related Enforcement Actions (0)

No other enforcement actions found for Company in CZ

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

1 January 2022

Authority

Úřad pro ochranu osobních údajů

Fine Amount

€3,400

Enforcement Tracker ID

ETid-1760

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Company - Czech Republic (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: