GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

Dopravný podnik Bratislava, joint stock company

Country
Slovakia
Fine
1,000 EUR
Date
2019-02-06
Sector
The only public transport provider in the city of Bratislava, in addition to public transport, it also operates suburban lines and regular international bus lines. DPB operates trolleybus, bus and tram services.
Articles
Article 15 section 1 and 3 of GDPR followingarticle 12 of GDPR

Failed to comply with the proposer's request to apply the proposer's right of access to his personal data processed through audiovisual recording media and to provide a copy thereof

After examining the complete file, in particular the proposer's proposal and the parties' observations, the Office found that DP, as the controller processing the personal data of the persons concerned by monitoring them by audio or video recording in public transport vehicles, infringed Article 15 section 1 and section 3 by failing to comply with the proposer's request as a data subject applied by e-mail on 18.06.2018 and repeatedly on 14.07.201 regarding the application of the right of access to his personal data, thereby violating the proposer's right of access to personal data.

Additional information

The Office states that the amount of the fine is affected by the fact that the infringement was found in only one data subject, the Office did not find a repeated violation of GDPR provisions by another data subject in relation to the processing of passenger's personal data by audio or video recording. DP cooperated with the office, which is in the position of the supervisory body. Taking into account these circumstances, which the Office assessed individually and in their mutual relationship, the Office imposed a fine of EUR 1000 on the DP operator. In the light of all the circumstances of the case, the Office considers the fine to be appropriate, both in terms of punitive and preventive.