Details:
Summary | In 2019, after an arbitration procedure, the company agreed to the early termination of a contract with the data subject and to the deletion of the personal data concerned. Nevertheless, the data subject continued to receive e-mails from the company, which constituted processing of personal data without a sufficient legal basis. |
Link: | link |
Related articles: | Art. 5 GDPR, Art. 6 GDPR |
Type: | Insufficient legal basis for data processing |
Fine: | EUR 42,000 |
Sector | Media, Telecoms and Broadcasting |
All data is based on The CMS’s Law GDPR Enforcement Tracker Source: https://www.enforcementtracker.com/