Data Protection Authority of Bremen · 3 March 2022
BREBAU GmbH
Insufficient legal basis for data processing
Fine€1,900,000Fine issued
- Regulator
- Data Protection Authority of Bremen
- Decided
- 3 March 2022
- Country
- Germany
- Sector
- Real Estate
- Regulator’s reference
- Not recorded
- Fino case number
- 2022/DE/051
What happened
Bremen's DPA issued a €1,900,000 fine against Brebau GmbH (a residential property management company) for unlawfully processing the sensitive data of over 9500 prospective tenants, including aspects like their skin colour, religious affiliation, sexual orientation, health status, hairstyle and body odour.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)Read →
- Art. 6Lawfulness of processing6(1)Read →
- Art. 9Processing of special categories of personal dataRead →
- Data principles
- Special categories
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/DE/051.