The President of the Polish DPA imposed a fine in the amount of over PLN 21 000 (EUR 5 000) on Anwara Sp. Z o.o. company based in Warsaw, which, as the controller of personal data, did not meet the obligation of cooperation with the supervisory authority and did not provide any information it required for the performance of its tasks in the course of proceedings.
With regard to the administrative proceedings conducted in order to examine a complaint of a natural person, the fined company ignored the written requests to provide explanations twice. Despite proper delivery of the letters, the company failed to provide any reasons for not taking action.
In regard to the company’s failure to provide the necessary information to resolve the case, the supervisory authority initiated ex officio administrative proceedings to impose an administrative fine on the company. The fined entity also in this case did not respond in any way to the above mentioned correspondence and did not provide explanations.
It should be emphasized that the entity’s activity (e.g. running post-secondary schools, secondary schools, primary schools and pre-school education facilities) is closely related to obtaining and processing of personal data. The personal data protection regulations and the obligations they impose on controllers should be well known to the company, which is an entity professionally involved in legal and economic transactions. One of such obligations is the cooperation of data controllers or processors with the Personal Data Protection Office (UODO).
For more information please contact the Polish DPA at firstname.lastname@example.org