APD/GBA (Belgium) · 17 October 2022
Vacation park owner
Name not published.
About: Data principles, Transparency, Unlawful processing
- Regulator
- APD/GBA (Belgium)
- Decided
- 17 October 2022
- Country
- Belgium
- Sector
- Not given
- Regulator’s reference
- 147/2022
- Fino case number
- 2022/BE/038
What happened
The Belgian DPA ordered a controller, a vacation park owner, to comply with the principle of data minimisation pursuant to Article 5(1)(c) GDPR. The controller legally processed personal data according to Article 6(1)(b) GDPR to prevent the fraudulent abuse of a swimming pool discount card, but unnecessarily requested photos and degree of kinship of the data subject's family members when their names alone would have sufficed.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 2Material scope2(1)Read →
- Art. 5Principles relating to processing of personal data5(1)(b) · 5(1)(c)Read →
- Art. 6Lawfulness of processing6(1)(b) · 6(1)(f)Read →
- Art. 13Information to be provided where personal data are collected from the data subject13(1)(c)Read →
- Data principles
- Transparency
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/BE/038.