Persónuvernd (Iceland) · 11 September 2020
Creditinfo Lánstraust
About: Data principles, Data subject rights, Unlawful processing
- Regulator
- Persónuvernd (Iceland)
- Decided
- 11 September 2020
- Country
- Iceland
- Sector
- Not given
- Regulator’s reference
- 2020010592
- Fino case number
- 2020/IS/018
What happened
The Icelandic Data Protection Authority (Persónuvernd) held *that Creditinfo Lánstrausti (an Icelandic credit agency) is allowed to process a data subject's personal data from the Icelandic debtors' default register and information on a company owned by the data subject for the calculation of a credit score but *that Creditinfo Lánstrausti is prohibited from processing information on searches in the debtor's default register regarding the data subject and information from the tax register.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 4Definitions4(1) · 4(2) · 4(4)Read →
- Art. 5Principles relating to processing of personal dataRead →
- Art. 6Lawfulness of processingRead →
- Art. 15Right of access by the data subjectRead →
- Data principles
- Data subject rights
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2020/IS/018.