Ski rental company – Fine (Czech Republic, 2020)

Fine
Úřad pro ochranu osobních údajů1 January 2020Czech Republic
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Czech data protection authority found that a ski rental company mishandled customer data by requiring a copy of their ID without proper consent. This matters because it highlights the importance of clear and separate consent for personal data collection. The company was not fined, but the decision emphasizes the need for transparency in data practices.

What happened

The ski rental company required customers to provide a copy of their ID as part of the rental agreement without proper consent.

Who was affected

Customers renting sports equipment from the ski rental company who were asked to provide a copy of their ID.

What the authority found

The authority decided that the company violated data protection rules by not obtaining valid consent for processing ID copies.

Why this matters

This case underscores the importance of obtaining clear and separate consent for data processing. Businesses should ensure that consent is not bundled with other agreements to comply with data protection laws.

GDPR Articles Cited

Art. 12(GDPR)
Art. 13(GDPR)
Art. 15(GDPR)
Art. 16(GDPR)
Art. 17(GDPR)
Art. 18(GDPR)
Art. 19(GDPR)
Art. 20(GDPR)
Art. 21(GDPR)
Art. 5(1)(c) GDPR
Art. 6(1) GDPR
Art. 7(1) GDPR
Full Legal Summary
Detailed

The Czech DPA (UOOU) imposed a fine against a ski rental company. Due to the high value of the sports equipment, the controller required a financial deposit or a full copy of a valid ID when renting sports equipment. The consent to the copy of the ID was included in the sports equipment rental agreement itself. Thus, when the sports equipment rental agreement was signed, consent to the processing of the ID copy was obtained at the same time. The DPA considered this method of obtaining consent to be a violation against the lawfulness of the processing. In addition, it was found that the data subjects were not properly informed about the processing of their personal data.

Related Enforcement Actions (0)

No other enforcement actions found for Ski rental company in CZ

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

1 January 2020

Authority

Úřad pro ochranu osobních údajů

Enforcement Tracker ID

ETid-632

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Ski rental company - Czech Republic (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: