Odborné učilište
- Country
- Slovakia
- Fine
- 0 EUR
- Date
- 2019-09-24
- Sector
- The school is intended for children , who have finished 9th class, compulsory education in a Specialized Primary School or Primary School. It is focused on a specialized classes or like indivudually integrated pupils with a special type of education needs
- Articles
- Art. 5 par. 1 letter a) GDPRArt. 9 par. 1 GDPR
The controller published the proposer's personal data in the scope of name, surname and address. The controller did not designate or disclose the contact details of the data protection officer, nor did he notify them to the Authority.
The controller, in the position of the proposer's employer, asked the doctor for information - a prognosis, when she expects the proposer's incapacity for work to end. The controller received a document containing the proposer's personal data relating to health to the extent of an extract from the medical file, whereby the controller performed an operation to obtain personal data relating to health which did not meet any of the legal processing conditions under Article 6 para. 1 GDPR, neither any processing conditions under Article 9 para. 2 GDPR.
Additional information
The proposer was unable to work from 27.02.2018. In that regard, her employer contacted the proposer's district doctor with a written request for information on when does she expect the proposer's incapacity for work to end. Measures:<br />The Authority has reprimanded the Controller that the processing operation which was used for the collection of personal data related to health of the proposer, violated Art. 5 par. 1 letter a) GDPR<br />Art. 9 par. 1 GDPR. The Authority did not impose a measure on the controller to reconcile the processing operation with the GDPR, nor did it impose a fine for violation of the provisions of the GDPR, as the controller after receiving the proposer's medical documentation decided to shred it on 22.10.2018.<br /><br />
Reported by: Advokáti Chlipala s.r.o.