Sanction RGPD Czech Data Protection Auhtority (UOOU) — Car renting company : 1 k€ (2019)
- Autorité de contrôle
- Czech Data Protection Auhtority (UOOU)
- Pays
- Tchéquie
- Entreprise / secteur
- Car renting company
- Montant de l'amende
- 1 k€
- Date de la décision
- 4 février 2019
- Fondement juridique
- Art. 5 (1) a)
- Manquement
- Obligation d'information insuffisante
Résumé des faits
A person who rented a car found out that the car was tracked via GPS by the renting company even though there was no information provided on the fact that the car is being tracked. The Czech Data Protection Authority found that there was no information provided in terms of Art. 13 GDPR and that Art. 6 (1) f) GDPR could not be the legal basis under the concrete circumstances. Due to that the UOOU found that there was a violation of Art. 5 (1) a) GDPR for which it imposed the fine.