Self Employed Person: Insufficient fulfilment of data subjects rights

The Czech DPA has imposed a fine of EUR 1,040 on a self employed person. The accused's website did not comply with GDPR requirements for cookies, as it processed data before obtaining consent, set cookies with an excessive expiration period, and may have transferred data outside the EU and EEA. The inspection was initiated by a Polish citizen. Despite a warning from the Office for personal data protection, the accused failed to address these issues.

GDPR Articles: Art. 5 (1) a), Art. 13 (1) c), (2) b), d) GDPR
Industry: Individuals and Private Associations