Falck Danmark A/S – No Violation (Denmark, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Danish data protection authority found that Falck Danmark A/S properly informed children and their guardians about data processing related to COVID-19 testing. The company used a digital platform to share a privacy policy, meeting GDPR requirements. This case highlights the importance of clear communication, especially when dealing with children's data.
What happened
Falck Danmark A/S informed children and their guardians about data processing for COVID-19 testing through a digital platform.
Who was affected
Children aged 12 or above in primary school and their guardians were informed about the data processing.
What the authority found
The Danish DPA found no GDPR violation as the company provided all necessary information in a clear and accessible manner.
Why this matters
This case shows that using digital platforms to communicate privacy policies can meet GDPR requirements. Companies should ensure their privacy notices are understandable, especially when aimed at children.
GDPR Articles Cited
The Danish DPA investigated a company's compliance with the GDPR information obligations. The company processed personal data in relation to rapid COVID-19 testing of children aged 12 or above in primary school. Information about the processing could be found in a privacy policy that had been forwarded to both the data subjects (the children) as well as their guardians through a digital communications platform used by the schools. The company had also attached an invitation to read the privacy policy. The DPA had to assess whether the controller had fulfilled its information obligations under Article 13(1)(a-f) GDPR and Article 13(2) GDPR. The DPA first noted that pursuant to Artilcle 12(1) GDPR, the information must be given in a "concise, transparent, intelligible and easily accessible form, using clear and plain language, in particular for any information addressed specifically to a child". The DPA held that the privacy policy contained all the information the controller had to provide. Furthermore, the DPA found that using a digital communications platform was sufficient to fulfil the information obligations. The DPA therefore found no violation of the GDPR. However, the DPA recommended that the controller prepares information more directly aimed at children, both in form and content.
Outcome
No Violation
The DPA investigated and found no violation.
Related Enforcement Actions (0)
No other enforcement actions found for Falck Danmark A/S in DK
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Falck Danmark A/S - Denmark (2021). Retrieved from cookiefines.eu
Last updated: