# Company: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Data Protection Authority of Bremen
- Date: 2023-01-01
- Original: https://www.enforcementtracker.com/ETid-2235
- Canonical: https://overview.legal/posts/48350
- Topics: Controllers, Consent, Employees, Processing, Processing Agreement, Data Controller, Supervisory Authorities

## Summary

The DPA in Bremen has imposed a fine on a company. The controller had stored an applicant's application documents after the application process for the purpose of further retention for the purpose of considering the applicant for future vacancies but had not obtained consent from the applicant in question.

## Full text

The DPA in Bremen has imposed a fine on a company. The controller had stored an applicant's application documents after the application process for the purpose of further retention for the purpose of considering the applicant for future vacancies but had not obtained consent from the applicant in question.

GDPR Articles: Art. 6 (1) a) GDPR
Industry: Employment

---
Generated by overview.legal · https://overview.legal/posts/48350 · 2026-08-22