Legal Person – €3,810 Fine (Czech Republic, 2023)

€3,810Úřad pro ochranu osobních údajů4 May 2023Czech Republic
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Czech Data Protection Authority fined a company EUR 3,810 for processing creditors' personal data without permission. The company also failed to inform people about using their data, which it got from another source. This case shows the importance of having a legal basis for data use and informing people about it.

What happened

A company was fined for processing creditors' personal data without a legal basis and failing to inform them about it.

Who was affected

Creditors whose personal data was used by the company without their knowledge.

What the authority found

The Czech DPA found that the company unlawfully processed personal data and did not inform the individuals involved, violating GDPR.

Why this matters

This fine highlights the necessity for businesses to have a legal basis for data processing and to inform individuals about how their data is used. Companies should review their data practices to ensure compliance with GDPR.

GDPR Articles Cited

Art. 6 GDPR
Art. 14(1) GDPR
Full Legal Summary
Detailed

The Czech DPA has imposed a fine of EUR 3,810 on a legal person. The accused unlawfully processed the personal data of an unspecified number of creditors to purchase their claims against a debtor company, without a legal basis. She also failed to inform the data subjects about this processing, having obtained their data from another company rather than directly from them.

Violations (2)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Related Enforcement Actions (11)

Other enforcement actions involving Legal Person in CZ

Current
May 2023

Fine

€4K

Details

Fine Date

4 May 2023

Authority

Úřad pro ochranu osobních údajů

Fine Amount

€3,810

Enforcement Tracker ID

ETid-2829

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Legal Person - Czech Republic (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: