Enforcement
EN Car renting company: Insufficient fulfilment of information obligations
€1,165 fine - Czech Data Protection Auhtority (UOOU)
Content
A person who rented a car found out that the car was tracked via GPS by the renting company even though there was no information provided on the fact that the car is being tracked. The Czech Data Protection Authority found that there was no information provided in terms of Art. 13 GDPR and that Art. 6 (1) f) GDPR could not be the legal basis under the concrete circumstances. Due to that the UOOU found that there was a violation of Art. 5 (1) a) GDPR for which it imposed the fine.
GDPR Articles: Art. 5 (1) a) GDPR
Industry: Industry and Commerce