Submit a complaint! GDPR violations are serious here in europe!
The Office for Personal Data Protection
Phone:
+420 234 665 800 (GDPR infoline)
+420 234 665 111 (Phone)
+420 234 665 555
+420 234 665 444
WWW:
Ú?ad pro ochranu osobních údaj?: Titulní stránka
E-mail:
[email protected]
Address:
The Office for Personal Data Protection
Pplk. Sochora 27
170 00 Praha 7
Czech Republic
GDPR (General Data Protection Regulation) is an EU regulation that protects the privacy and personal data of individuals within the European Union and the European Economic Area. If you believe that a company is not in compliance with GDPR, you do have rights and can take action. Here are some general points regarding the situation you described:
Lawful Basis for Processing: Under GDPR, a company must have a lawful basis to collect and process personal data. One common basis is "contract", where the data is necessary for the fulfillment of a contract. However, the data requested must be proportionate and strictly necessary for that purpose. Simply asking for all contracts and IDs without a valid reason might be seen as excessive.
Data Protection Principles: GDPR mandates that personal data should be processed lawfully, fairly, and transparently. It should be collected for a specific purpose and not further processed in a manner incompatible with that purpose. Data should be accurate, stored only as long as necessary, and be secured appropriately.
Rights of the Data Subject: Individuals whose data is being processed have various rights under GDPR. They can request access to their data, ask for corrections, object to processing, and in some cases, ask for the data to be deleted. They also have the right to be informed about the collection and use of their personal data.
Data Protection Impact Assessment: If a company plans to process personal data in a way that's likely to result in a high risk to individuals' rights and freedoms, they might be required to conduct a Data Protection Impact Assessment (DPIA). This would assess the potential risks and measures to mitigate them.
Making a Complaint: If you believe that WGCZ Holding or NXvideos is in breach of GDPR, you can make a complaint to The Office for Personal Data Protection in the Czech Republic. You'd generally need to provide evidence of the alleged breach and any communications you've had with the company regarding the matter.
Potential Consequences: If a company is found to be in breach of GDPR, they can face significant fines, often based on a percentage of their annual global turnover or a fixed amount, whichever is higher.