Enforcement · Hellenic Data Protection Authority (HDPA) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Foreign language school: Insufficient fulfilment of data subjects rights
How it connects
Related across sources
Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR Guidance Guidelines 01/2022 on data subject rights - Right of access Guidance Guidelines 07/2022 on certification as a tool for transfers News De Autoriteit Persoonsgegevens publiceert een rapport over de risicoanalyse van de AVG (Algemene Verordening Gegevensbescherming). News What Happened to the Risk-Based Approach to Data Transfers? News DeFine is a calculator for GDPR fines based on method of the EDPB
Full text
The Hellenic DPA imposed a fine of EUR 2,000 on an employer (owner of a private foreign language school). An employee, who works as a language teacher in the school, had filed a complaint with the DPA against their employer. The reason for this was that the controller continued to constantly monitor the employee during their online courses via the platform 'Zoom', despite their objection. Therefore, the DPA found that the controller had violated its duty to comply with the data subject's right to object. In addition, the DPA found that the controller had not properly informed the data subject about the processing of his personal data pursuant to Art. 13 GDPR.
Industry: Employment
Original document at the source edpb.europa.eu