Prima banka
- Country
- Slovakia
- Fine
- 13,300 EUR
- Date
- 16.03.21(16.03.21)
- Sector
- The controller is a private comapny that provides banking services.
- Articles
- Art. 5 par. 1 letter a) GDPRArt. 5 par. 1 letterArt. 12 ods. 1 in conjunction withArt. 15 GDPR
Improper fulfillment of the information obligation, non-transparent processing of the data subject's request for access to data
The Controller violated the principe of fairness and transparency according to art. 5 par. 1 letter a) GDPR by informing data subjects pursuant to art. 14 GDPR on the marketing purpose of processing personal data obtained from a publicly available source - the website of the Office of Geodesy, Cartography and Cadastre of the Slovak Republic, although it has not performed this activity since 25.05.2018. He further the principle of legality by sending marketing offer to the address of the person concerned without a legal basis. Finally, he violated art. 12 par. 1 in conjunction with art. 15 GDPR by non-transparent processing of the data subject's request for access to data because he did not provide relevant information in response to the request.
Reported by: Advokáti Chlipala s.r.o.