Details:
| Summary | The individual requested the deletion of his contact data (including his telephone number), however the controller further processed his contact data for claim enforcement purposes on the basis of its legitimate interest. NAIH determined that the controller had no compelling legitimate grounds for processing the telephone number of the data subject, since his address was also at hand, which is sufficient for claim enforcement purposes and for concerning communication with the data subject. |
| Link: | link |
| Related articles: | Art. 5 GDPR, Art. 6 GDPR, Art. 17 GDPR |
| Type: | Insufficient legal basis for data processing |
| Fine: | EUR 2,850 |
| Sector | Not assigned |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/