Pitagorasz Oktatási Stúdió Kft

What happened

The DPA fined a controller for several infringements in handling the data of minors and parents: no proper and documented legal basis, information was confusing, partly untrue and not properly given, data were retained after consent was withdrawn.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(a) · 5(1)(b) · 5(2)Read →
• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(1)Read →
• Art. 13Information to be provided where personal data are collected from the data subject13(1) · 13(2)Read →
• Art. 14Information to be provided where personal data have not been obtained from the data subject14(2)Read →
• Art. 17Right to erasure (‘right to be forgotten’)17(1)(b)Read →

• Data principles
• Data subject rights
• Transparency