Details:

Summary A merchant who provides services in an online store has infringed the ‘right to be forgotten’ pursuant to Art. 17 GDPR when he was repeatedly requested by a data subject to delete all his personal data, in particular his/her mobile phone number, which the merchant had received as part of an order. Nevertheless, the merchant repeatedly sent advertising messages by SMS to the data subjects mobile phone number.
Link: link
Related articles:  Art. 17 GDPR
Type: Insufficient fulfilment of data subjects rights
Fine: EUR 7,000
Sector Industry and Commerce

 

All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/

Tags: case law