The Authority investigated a complaint by a former employee that data from the geolocation system operating on a vehicle provided by the employer was used to locate the employee during his leave.
The Authority imposed on the complainant company, as the controller, on the basis of Article 58(1)(a) of the GDPR, the right to use the data for the purposes of the application of the data protection rules. 2(i) of the GDPR, an administrative fine of EUR 2,000 for the established breach of the principles of lawfulness of processing under Article 5(2) of the GDPR. 1 a of the GDPR and addressed to it, on the basis of Article 58(1)(a) of the GDPR, an order for a fine of 2,5 million euro. 2(b) of the GDPR, a reprimand for incomplete information in breach of Article 5(2)(b) of the GDPR. 1(a) and Articles 12, 13 and 5(1)(a), 12 and 13 and 5(5)(a). 2(b) of the GDPR.
Penalties: fine of EUR 2 000, reprimand