News · GDPRhub EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

DVI (Latvia) - SIA "K4K"

The DPA fined the operator of fitness clubs €500 for a failure to cooperate with the DPA and provide it necessary information.

Personal Data Processing Retention Period Storage Limitation Controllers
Oct 19, 2026 Source gdprhub.eu

Full text

Machine translation of the decision, via GDPRhub — not the official text.

The DPA fined the operator of fitness clubs €500 for a failure to cooperate with the DPA and provide it necessary information. English Summary. Facts. The DPA initiated an investigation into the processing of personal data on the website of a company operating fitness clubs (the controller) in October 2025. The DPA then ordered the controller to take additional steps to ensure that its processing of personal data would comply with the GDPR and the national data protection provisions. In December 2025, the DPA sent the controller a letter by email requesting the controller to report the corrections made. As no response was received by the specified deadline, the DPA repeated the request and set a new deadline in January 2026. This email also remained unanswered. In March 2026, the DPA sent the letter to the controller's legal address by mail. This letter was returned to the DPA with a note from the postal service provider stating that the retention period for the letter had expired

How it connects

Related across sources

C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… CJEU ·Fifth Chamber May 4, 2023 Right to Restriction Controllers Personal Data
C-231/22 État belge v Autorité de protection des données In Case C-231/22, the Court of Justice of the European Union interpreted Article 4(7) and Article 5(2) of the GDPR in response to a preliminary reference from the Brussels Court… CJEU ·Third Chamber Jan 11, 2024 Personal Data Controllers Integrity and Confidentiality Principle
C-638/23 Amt der Tiroler Landesregierung v Datenschutzbehörde In Case C-638/23, the Court of Justice interpreted Article 4(7) GDPR in response to a preliminary reference from the Austrian Verwaltungsgerichtshof in proceedings between the Amt… CJEU ·Eighth Chamber Feb 27, 2025 Controllers Personal Data Integrity and Confidentiality Principle
C-768/21 TR v Land Hessen In Case C-768/21, the Court of Justice of the European Union (First Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning TR's challenge of… CJEU ·First Chamber Sep 26, 2024 Supervision Data Breaches Integrity and Confidentiality Principle
10 A 5144/23 VG Hannover: Controller appeals DPA reprimand over unlawful workplace video surveillance The owner of a doner kebab production facility (the controller) had installed video cameras to monitor virtually every room of the business premises. Cameras were placed in the… Administrative Court Hannover Aug 7, 2026 Controllers Supervisory Authorities Legitimate Interest
W292 2298015-1 The data subject was a customer of a bank (controller) The data subject withdrew their consent to the processing of their e-mail address and phone number by the controller, and requested the deletion thereof. The data was not deleted.… BVwG - W292 2298015-1 ·Federal Administrative Court Jun 10, 2026 Legitimate Interest Personal Data Storage Limitation
Related documents