Huge rental company
- Country
- Germany
- Fine
- 14,500,000 EUR
- Date
- 2019-10-30
- Sector
- Business Sector
- Articles
- Art. 5 GDPRArt. 25 GDPR
Non-compliance with general data processing principles
In 2017, in the course of an inspection the Berlin Data Protection Authority urgently recommended an adjustment of the archive system. However, in March 2019, the company was still unable to either demonstrate a clean-up of its database or present legal reasons for the continued storage. To remedy the deficiencies the company solely did make preliminary preparations. However, those measures did not suffice to align the storage of personal data with the legal requirements. Therefore, the Berlin Data Protection Authority imposed a fine for an infringement of Article 25 (1) GDPR and Article 5 GDPR during the period between May 2018 and March 2019 was therefore mandatory. (Press Release 711.412.2, November 5th 2019, Berlin Commissioner for Data Protection, https://www.datenschutz-berlin.de/fileadmin/user_upload/pdf/pressemitteilungen/2019/20191105-PR-Translation-Fine_DW.pdf) Authority: Data Protection Authority of Berlin