GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Company - energy distributor

Country
Czech Republic
Fine
40,000 CZK
Date
2019
Sector
-
Articles
Art. 6 (1)Art. 29 GDPR

Insufficient legal basis for data processing and processing

The controller as an anergy distributor is obliged to according to Czech law provide Czech Television and Czech Radio with information with whom the controller concluded a contract on providing electricity. This obligation does not concern personal data of customers who are being provided with gas. Upon a complaint of one customer the controller found out that one employee transferred the personal data of its customers from their database to Czech Television and Czech Radio without legal basis for such transferring because the transfer included personal data of customers who are not provided with electricity.