312 GDPR fines

Enforcement decisions from 21 jurisdictions, reported by INPLP member firms. Each entry links to the authority’s own publication where one is on record.

• Grammar school Nové Zámky

  Slovakia·2020-11-24

  700 EUR
  Art. 5Insufficient legal basis for data processing

• Natural person

  Slovakia·2020-10-29

  300 EUR
  Art. 5Insufficient legal basis for data processing, breach of the principle of transparency

• SENECA TOURS s.r.o.

  Slovakia·2020-10-13

  1,300 EUR
  Art. 13Art. 5Art. 4breach of the principle of transparency, Insufficient legal basis for data processing

• QUALITA s.r.o.

  Slovakia·2020-09-09

  500 EUR
  Art. 12Insufficient legal basis for data processing, unathorized processing of perdonal data , breach of the principle of transparency

• Primary school M.R.Štefánika

  Slovakia·2020-08-18

  6,000 EUR
  Art. 5Art. 6Art. 29Art. 12Art. 15Insufficient legal basis for data processing,absence of consent breach of information obligations, breach of the principles of accountability and transparency

• Transport company Bratislava a.s.

  Slovakia·2020-07-07

  20,000 EUR
  Art. 5Insufficient legal basis for data processing, Breach of the information obligation

• Kaufland SR v.o.s.

  Slovakia·2020-07-07

  3,500 EUR
  Art. 12Art. 5Breach of the principle of transparency

• BeMi real estate agency, s.r.o. as the controller, processor of BeMi real estate agency, s.r.o.

  Slovakia·2020-01-27

  2,580 EUR
  Art. 5Art. 33The processor has violated the principle of data confidentiality and the controller has breached the obligation under Art. 33 GDPR to report the breach of personal data.

• The town of Rajecké Teplice

  Slovakia·2020-01-24

  10,000 EUR
  Art. 5Art. 12Art. 13The Controller processed personal data in an illegal manner, kept camera recordings for longer than the time he had set, did not provide the data subjects with information pursuant to Art.13 GDPR in connection with the camera information system.

• Slovak Fishermen's Association, Municipal Organization of Žilina

  Slovakia·2020-01-24

  The Authority did not impose a measure to remedy the identified deficiencies The Authority did not impose a fine, instead reprimanded the controller for the breach of the principle of legality
  Art. 5The controller published personal data of the proposer without given consent of the proposer

• Stavebné bytové družstvo Trenčín

  Slovakia·2020-01-10

  0 EUR
  Art. 5Without a legal basis, the controller enabled the proposer's surname in connection with the information "returned stamps for action and refunded court fee", which was subsequently delivered by the controller to 32 owners of flats and non - residential pre

• The town of Tesáre

  Slovakia·2020-01-07

  2,500 EUR
  Art. 5The controller published the birth number without the existence of a legal basis in the minutes of the regular meeting of the Municipal Council in Tesáry

• TESCO STORES SR, a.s.

  Slovakia·2019-12-19

  10,000 EUR
  Art. 12The proposal's request concerning the exercise of the right of access to his personal data was not compiled with within the time limit set in the GDPR.

• The town of Rajec

  Slovakia·2019-12-03

  9,000 EUR
  Art. 5In the record of processing activities, the controller did not specify the legal basis for the processing of personal data by the camera information system.

• Aukčný Dom, s.r.o.

  Slovakia·2019-11-04

  3,000 EUR
  Art. 5Aukčný Dom, s.r.o., in the processing of personal data of proposers, violated the principle of legality by publishing photographs of pictorial portraits

• Odborné učilište

  Slovakia·2019-09-24

  0 EUR
  Art. 5Art. 9The controller published the proposer's personal data in the scope of name, surname and address. The controller did not designate or disclose the contact details of the data protection officer, nor did he notify them to the Authority.

• O2 Slovakia, s.r.o.

  Slovakia·2019-09-05

  0 EUR
  Art. 6Controller was creating the orders via the controller's website by pre-filling the consents to send the marketing offers.

• The municipality of Horné Plachtince

  Slovakia·2019-08-09

  4,000 EUR
  Art. 5Without the existence of a legal basis, the controller published the birth number of the two data subjects on the website www.horne-plachtince.eu

• POP Akadémia - Pokora Odvaha Pokoj

  Slovakia·2019-06-17

  0 EUR
  Art. 5The controller has not provide necessary information in the scope of Art. The operator continued to publish the photo after withdrawing the proposer's consent to the publication of the photograph.13 GDPR in obtaining the personal data.

• Social Insurance Agency in Slovakia

  Slovakia·2019-06-13

  50,000 EUR
  Art. 24Art. 32Social Insurance Agency in Slovakia violated the proposer's right to protection of his personal data by sending personal data of applicants to the adress of the holders of social insurance of the EU member states via Slovenská pošta.

• Municipality Bratislava - Ruzinov district

  Slovakia·2019-05-02

  The Authority did not impose a measure to remedy the identified deficiencies
  Art. 5Bratislava Ruzinov City District delivered the decision to the applicant, while the applicant was not an authorized entity to deliver the decision.

• FERPLAST SLOVAKIA, Limited Liability Company

  Slovakia·2019-04-29

  the personal data proceedings have been suspended
  Art. 5The company suspected that as an employer of an xy employee, it had violated the protection of the employee's personal health data.

• Ministry of Interior of the Slovak Republic

  Slovakia·2019-04-17

  The Authority did not impose a measure to remedy the identified deficiencies
  Art. 5The Office for the Protection of Personal Data dealt with a complaint against the Ministry of the Interior of the Slovak Republic for an alleged violation of the legislation on the protection of personal data.

• Municipality Veľká Lomnica

  Slovakia·2019-02-11

  The Authority did not impose a measure to remedy the identified deficiencies
  Art. 10The municipality of Veľká Lomnica violated the proposer's right to protection against unauthorized disclosure of information about the proposer by publishing a statement containing the proposer's personal information.

• Dopravný podnik Bratislava, joint stock company

  Slovakia·2019-02-06

  1,000 EUR
  Art. 15Art. 12Failed to comply with the proposer's request to apply the proposer's right of access to his personal data processed through audiovisual recording media and to provide a copy thereof

• FIN, spol s.r.o.

  Slovakia

  7,000 EUR
  Art. 5Art. 33The controller violated the principle of confidentiality by unauthorized processing and access to the personal data of the data subjects.

• obec Mojtín

  Slovakia

  1,000 EUR
  Art. 87Unlawful processing of personal identification number.

• Prima banka

  Slovakia

  13,300 EUR
  Art. 5Art. 12Art. 15Improper fulfillment of the information obligation, non-transparent processing of the data subject's request for access to data