GDPR Fines

A public record of GDPR enforcement across Europe — compiled by INPLP members

POP Akadémia - Pokora Odvaha Pokoj

Country
Slovakia
Fine
0 EUR
Date
2019-06-17
Sector
Academy focusing on the creation of programs for children - sports, cultural and environmental programs for children both in the school environment and outside the school environment.
Articles
Art. 5 par. 1 letter a) GDPR

The controller has not provide necessary information in the scope of Art. The operator continued to publish the photo after withdrawing the proposer's consent to the publication of the photograph.13 GDPR in obtaining the personal data.

On 24 August 2018, the proposer has found out that the controller was violating the protection of personal data of proposer's son by publishing his photograph, to which the proposer had not given consent. The proposer, on August 24, 2018, by e-mail sent to popakademia@gmail.com, claimed the right of deletion from the controller (proposer has requested an immediate deletion of the photo). This was repeated several times without the controller's response. Subsequently, on September 27, 2018, the proposer notified the controller by e-mail that the controller had not complied with her multiple requests to remove a photo of her son. On October 5, 2018, the proposer filed a complaint adressed to the Office for Personal Data Protection of the Slovak Republic.

Additional information

On 16 April 2019, the photograph of the proposer's son was removed within the Facebook network, which also deleted the photograph of the data subject from the official website of the controller, and therefore the Authority did not consider it justified to impose measures to eliminate the identified deficiencies. Measures:<br />The controller is obliged to ensure, in accordance with the principle of transparency, that all data subjects from whom it obtains personal data are provided with the necessary information within the scope of Art. 13 GDPR.