Details:

Summary According to the findings of the Berlin data protection officer, Delivery Hero Germany GmbH had not deleted accounts of former customers in ten cases, even though those data subjects had not been active on the company’s delivery service platform for years – in one case even since 2008. In addition, eight former customers had complained about unsolicited advertising e-mails from the company. A data subject who had expressly objected to the use of his data for advertising purposes nevertheless received further 15 advertising e-mails from the delivery service. In further five cases, the company did not provide the data subjects with the required information or only after the Berlin data protection officer had intervened.
Link: link
Related articles:  Art. 15 GDPR, Art. 17 GDPR, Art. 21 GDPR
Type: Insufficient fulfilment of data subjects rights
Fine: EUR 195,407
Sector Accomodation and Hospitalty

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law