- Enforcing jurisdiction
- Czechia · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Ski rental company – Fine (Czech Republic, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A ski rental company in the Czech Republic was found to have violated data protection rules by requiring a copy of a visitor's ID without proper consent. This matters because it highlights the importance of obtaining clear consent and informing customers about how their personal data is used. Businesses should ensure they have transparent practices when collecting personal information.
What happened
The ski rental company required a financial deposit or a copy of a valid ID when renting sports equipment without properly informing customers about the data processing.
Who was affected
Visitors renting sports equipment from the ski rental company were affected by the improper consent practices.
What the authority found
The Czech data protection authority ruled that the company did not obtain valid consent for processing the ID copies and failed to inform customers about their data processing.
Why this matters
This case shows that companies must be transparent and obtain clear consent when handling personal data. It serves as a reminder for all businesses to review their consent practices.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Automated check recorded — 19 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Czech DPA (UOOU) imposed a fine against a ski rental company. Due to the high value of the sports equipment, the controller required a financial deposit or a full copy of a valid ID when renting sports equipment. The consent to the copy of the ID was included in the sports equipment rental agreement itself. Thus, when the sports equipment rental agreement was signed, consent to the processing of the ID copy was obtained at the same time. The DPA considered this method of obtaining consent to be a violation against the lawfulness of the processing. In addition, it was found that the data subjects were not properly informed about the processing of their personal data.
Related Enforcement Actions (0)
No other enforcement actions found for Ski rental company in CZ
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
1 January 2020
Authority
Úřad pro ochranu osobních údajů
About this data
Cite as: Cookie Fines. Ski rental company - Czech Republic (2020). Retrieved from cookiefines.eu
Last updated: