Restaurant – €170 Fine (Germany, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
In order to identify a guest who had not paid, several visitors were contacted by employees of a restaurant. For this purpose, the telephone numbers provided by the guests as part of the Covid contact tracing tracing were used. Since the guests had provided their data solely for infection control purposes, the DPA considered the contacting for the purpose of identifying the guest to be a violation of the principle of purpose limitation (Art. 5 (1) b) GDPR).
GDPR Articles Cited
In order to identify a guest who had not paid, several visitors were contacted by employees of a restaurant. For this purpose, the telephone numbers provided by the guests as part of the Covid contact tracing tracing were used. Since the guests had provided their data solely for infection control purposes, the DPA considered the contacting for the purpose of identifying the guest to be a violation of the principle of purpose limitation (Art. 5 (1) b) GDPR).
Related Enforcement Actions (9)
Other enforcement actions involving Restaurant in DE
Fine
€170
Details
Fine Date
1 January 2021
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€170
Enforcement Tracker ID
ETid-1209
About this data
Cite as: Cookie Fines. Restaurant - Germany (2021). Retrieved from cookiefines.eu
Last updated: