HUNGARY DPA: Insufficient legal basis for data processing

The individual requested the deletion of his contact data (including his telephone number), however the controller further processed his contact data for claim enforcement purposes on the basis of its legitimate interest. NAIH determined that the controller had no compelling legitimate grounds for processing the telephone number of the data subject, since his address was also at hand, which is sufficient for claim enforcement purposes and for concerning communication with the data subject.

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR
Industry: Not assigned