# Self Employed Person: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Czech DPA (UOOU)
- Date: 2021-03-10
- Original: https://www.enforcementtracker.com/ETid-2834
- Canonical: https://overview.legal/posts/48949
- Topics: Personal Data, Consent, Processing, Processing Agreement, Healthcare, Supervisory Authorities

## Summary

The Czech DPA has imposed a fine of EUR 200 on a self employed person. The accused obtained scans of identity cards from foreign subjects who booked accommodation there and kept them for an indefinite period of time. The accused was then unable to provide evidence of consent to such processing to the personal data.

## Full text

The Czech DPA has imposed a fine of EUR 200 on a self employed person. The accused obtained scans of identity cards from foreign subjects who booked accommodation there and kept them for an indefinite period of time. The accused was then unable to provide evidence of consent to such processing to the personal data.

GDPR Articles: Art. 5 (1) a), c) GDPR, Art. 6 (1) GDPR, Art. 12 (1), (2) GDPR, Art. 13 GDPR, Art. 14 GDPR, Art. 15 GDPR, Art. 22 GDPR
Industry: Accomodation and Hospitality

---
Generated by overview.legal · https://overview.legal/posts/48949 · 2026-08-22