Enforcement · Data Protection Authority of Hamburg EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Kolibri Image Regina und Dirk Maass GbR: Insufficient data processing agreement
How it connects
Related across sources
Case Law Rb. Den Haag - C/09/689833 Case Law VG München - M 26a K 25.5210 News CNIL (France) - SAN-2025-014 News CNIL (France) - SAN-2025-015 News VDAI (Litouwen) - Besluit nr. 3R-1700. Guidance Opinion 15/2025 on the draft decision of the Austrian Supervisory Authority (AT SA) regarding the certification criteria of BDO Consulting GmbH
Full text
Please note: According to our information this fine has been withdrawn in the meantime. Kolibri Image had send a request to the Data Protection Authority of Hessen asking how to deal with a service provider who does not want to sign a processing agreement. After not answering Kolibri Image in more detail, the case was forwarded to the locally responsible Data Protection Authority of Hamburg. This Authority then fined Kolibri Image as controller for not having a processing agreement with the service provider. Kolibri Image has stated that they will challenge the decision in front of court since they are of the opinion that the service provider does not act as a processor.
Industry: Industry and Commerce
Original document at the source www.heise.de