UniCredit Bank Czech Republic and Slovakia, a.s.
- Country
- Czech Republic
- Fine
- 80,000 CZK
- Date
- 2019
- Articles
- Art. 5 (1) a) GDPRArt. 5 (1) b) GDPRArt. 5 (1) f) GDPRArt. 6 (1) GDPR
Insufficient legal basis for data processing
The Bank has opened a personal bank account for a person concerned without their consent or knowledge. The bank allegedly had his or her personal data at its disposal because the data subject had access to his or her employer's company account. The bank was not in a position to provide the Czech Data Protection Authority with the documents necessary to prove that the contract with the data subject had been concluded. Authority: Czech Data Protection Auhtority (UOOU)
Reported by: Nielsen Legal, advokátní kancelář, s. r. o.