Gomera Trail Paradise

What happened

The DPA fined a race organiser €15,000 for unlawfully collecting participants' health data related to COVID-19. The organiser failed properly inform the participants and to collect their explicit consent under Article 9(1)(a) GDPR

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(2)Read →
• Art. 9Processing of special categories of personal data9(2)(a)Read →
• Art. 13Information to be provided where personal data are collected from the data subject13(1) · 13(2)Read →
• Art. 30Records of processing activitiesRead →

• Data principles
• Special categories
• Transparency