Details:
| Summary | Infringement of Art. 28 (3) g) GDPR, since personal data were further processed after the controller had terminated the contractual relationship with the processor. |
| Link: | link |
| Related articles: | Art. 5 GDPR, Art. 6 GDPR, Art. 28 (3) g) GDPR |
| Type: | Insufficient legal basis for data processing |
| Fine: | EUR 3,000 |
| Sector | Industry and Commerce |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/