Kaufland SR v.o.s.

The controller received a request from the data subject pursuant to Art. 15 GDPR, which he did not complete within the deadline. The controller argued that the data subject had made his request in extensive communication with the complaints department. The subject of the communication was the application of a complaint, where the data subject exercised his right pursuant to Art. 15 GDPR. The content of each email was information that personal data is processed in accordance with the GDPR Regulation and more detailed information can be found on the website. The controller specified in the internal directive that the data subject is obliged to send the request to the personal data protection department and not to the complaints department. Nevertheless, the controller responded to the request three days after the deadline for reply. the Office for Personal Data Protection stated that the controller's internal directive cannot restrict the data subject's right to information.