VDAI (Lithuania) - Decision No. 3R-1700.

Facts: The data protection authority (DPA) ruled that a gambling provider had lawfully transferred data to a processor for the purpose of sending invitations to sporting events, but found that the responsible party had violated its transparency obligations by failing to inform the data subject about the categories of recipients of the data. The DPA also ruled that a gambling website provider had lawfully transferred data to a processor for the purpose of sending invitations to sporting events, as the use of a processor does not require a separate legal basis. However, the court ruled that the responsible party had violated its transparency obligations by failing to inform the data subject about the recipients of their personal data.

Summary in English:
The complainant alleged that his personal data, including his name, phone number, and age, had been provided to third parties without a legal basis and without providing sufficient information to the data subject. He further claimed that the responsible party could not explain how his data was obtained or shared.

This content was automatically translated using machine translation. The original version is available in the source language.