Enforcement · Lithuanian Data Protection Authority (VDAI) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Praktiškas UAB: Insufficient legal basis for data processing

€6,000 Fine
Praktiškas UAB
LITHUANIA
Art. 5 GDPR Art. 9 GDPR Art. 13 GDPR Art. 30 GDPR Art. 35 GDPR
DPIA Controllers Privacy Impact Assessment Personal Data Consent Biometric Data Processing Agreement Types of Special Categories of Personal Data
Jan 9, 2023 Source

How it connects

Related across sources

News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Datatilsynet Guidance EDPB Annual Report 2021 EDPB Guidance EDPB Annual Report 2019 EDPB Case Law Supreme Court upholds €300,000 fine against INPS for GDPR violations in COVID bonus data Supreme Court Guidance EDPB Annual Report 2022 EDPB News De Autoriteit Persoonsgegevens publiceert een rapport over de risicoanalyse van de AVG (Algemene Verordening Gegevensbescherming). AEPD

Full text

The Lithuanian DPA has fined Praktiškas UAB, the operator of SportGates sports clubs, EUR 6,000. The controller had processed biometric data of customers in the context of their access to sports facilities. During its investigation, the DPA found that the customers' consent to the processing of their biometric data could not be considered voluntary. This was because the controller did not offer the provision of any other type of information for access to the sports clubs. Nor did it provide the data subjects with information about possible alternatives for accessing the sports club. In addition, the DPA found that the controller did not provide the data subjects with sufficient information about the processing of their personal biometric data. The controller also failed to conduct a data protection impact assessment before processing the personal data.

Industry: Industry and Commerce

Original document at the source vdai.lrv.lt

Similar Content