# SO Warszawa - Case C 310/23

- Type: News
- Source: GDPRhub
- Date: 2026-01-13
- Canonical: https://overview.legal/posts/51906
- Topics: Personal Data, Right of Access, Accuracy, Information Provision Modalities and Communication Methods, Controllers, Supervisory Authorities, Accountability, Law Enforcement

## Summary

Permanent link: The responsible party did not respond adequately and provided unclear information or referred the individual to third parties. As a result, the individual filed a complaint with the Data Protection Authority. The responsible party did not respond adequately and provided unclear information or referred the individual to third parties. As a result, the individual filed a complaint with the Data Protection Authority. The Data Protection Authority has issued a final decision in which the responsible party is warned for violating Article 6(1) of the GDPR and Article 5(1).

## Full text

Permanent link. The responsible party did not respond adequately, provided unclear information, or referred the individual to third parties. As a result, the individual filed a complaint with the Data Protection Authority. The responsible party did not respond adequately, provided unclear information, or referred the individual to third parties. As a result, the individual filed a complaint with the Data Protection Authority. The Data Protection Authority has made a final decision in which the responsible party is warned for violating Article 6(1) and Article 5(1)(b) and (e) of the GDPR. The Data Protection Authority also found that the responsible party had failed to comply with its obligations under Article 15(1) and (3) of the GDPR, by providing inaccurate information and refusing to provide a copy of the personal data. The Data Protection Authority has made a final decision in which the responsible party is warned for violating Article 6(1), Article 5(1)(b) and Article 5(1)(e) of the GDPR. The Data Protection Authority also found that the responsible party... --- *This content has been automatically translated using machine translation. The original version is available in the source language.* --- *This content was automatically translated using machine translation. The original version is available in the source language.*

## Cited law provisions (5)

### GDPR — gdpr-art-5-par-1-en

Personal data shall be:

### GDPR — gdpr-art-5-par-1-pnt-b-en

collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1), not be considered to be incompatible with the initial purposes (‘purpose limitation’);

### GDPR — gdpr-art-5-par-1-pnt-e-en

kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);

### GDPR — gdpr-art-6-par-1-en

Processing shall be lawful only if and to the extent that at least one of the following applies:

### GDPR — gdpr-art-15-par-1-en

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

---
Generated by overview.legal · https://overview.legal/posts/51906 · 2026-08-22