Sanction RGPD Icelandic data protection authority ('Persónuvernd') — Hörpu tónlistar- og ráðstefnuhúss ohf. : 7 k€ (2022)
- Autorité de contrôle
- Icelandic data protection authority ('Persónuvernd')
- Pays
- Islande
- Entreprise / secteur
- Hörpu tónlistar- og ráðstefnuhúss ohf.
- Montant de l'amende
- 7 k€
- Date de la décision
- 8 mars 2022
- Fondement juridique
- Art. 5 (1) c), Art. 6
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Icelandic DPA has fined Hörpu tónlistar- og ráðstefnuhúss ohf. EUR 7,000. The DPA had received a complaint regarding the concert hall's collection of ID number and date of birth information as part of an electronic ticket purchase. The incident occurred prior to the start of the Covid-19 pandemic, when the registration of personal data for contact tracking in the context of event visits was not yet required. The DPA concluded that it would not have been necessary to collect the data for issuing a ticket, as it would have been possible to conclude a purchase contract even without this collection. For this reason, the DPA found that the concert hall had violated the principle of data minimization.