# UniCredit Bank Czech Republic and Slovakia, a.s.: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Czech DPA (UOOU)
- Date: 2025-12-30
- Original: https://www.enforcementtracker.com/ETid-19
- Canonical: https://overview.legal/posts/49092
- Topics: Personal Data, Consent, Insurance, Processing, Law Enforcement

## Summary

The bank established a personal bank account for a data subject without his consent or knowledge. The bank supposedly had his personal data available because the subject had disposed of his employer’s company account. The bank was not able to provide The Office for Personal Data Protection with the necessary documentation to prove entering into contract with the data subject.

## Full text

The bank established a personal bank account for a data subject without his consent or knowledge. The bank supposedly had his personal data available because the subject had disposed of his employer’s company account. The bank was not able to provide The Office for Personal Data Protection with the necessary documentation to prove entering into contract with the data subject.

GDPR Articles: Art. 6 GDPR
Industry: Finance, Insurance and Consulting

---
Generated by overview.legal · https://overview.legal/posts/49092 · 2026-08-22