TESCO STORES SR, a.s.
- Country
- Slovakia
- Fine
- 10,000 EUR
- Date
- 2019-12-19
- Sector
- A chain of hypermarkets and department stores
- Articles
- Art. 12 par. 3 GDPR
The proposal's request concerning the exercise of the right of access to his personal data was not compiled with within the time limit set in the GDPR.
The controller violated Art. 12 par. 3 GDPR by failing to comply with the request of the proposer as a data subject submitted by e-mail to otazky@sk.tesco-europe.com on 16.07.2018 regarding the exercise of the right of access to his personal data within the time limit set in the GDPR, without processing the data subject's request within one month of receipt of the request.
Additional information
<ul><li>The Controller is obliged to ensure that the requests of data subjects concerning the processing of personal data are processed in accordance with the principles set out in Art. 5 GDPR, within the period under Art. 12 par. 3 GDPR.</li><li>The controller is obliged to ensure that the persons concerned are provided with correct and up-to-date personal data in requests for access to personal data.</li><li>"The Controller has not fulfilled the legal obligation to inform the proposer within one month from the submission of the application about what information controller processes about him.</li><li>The content of the proposer's request was what personal data are being processed about him, what is the list of third countries to which his personal data have been provided and what is the legal basis for the processing of his personal data."</li></ul>
Reported by: Advokáti Chlipala s.r.o.