Sanction RGPD Hellenic Data Protection Authority (HDPA) — Thessaloniki–Thessaly Gas Supply Company S.A. : 10 k€ (2025)
- Autorité de contrôle
- Hellenic Data Protection Authority (HDPA)
- Pays
- Grèce
- Entreprise / secteur
- Thessaloniki–Thessaly Gas Supply Company S.A.
- Montant de l'amende
- 10 k€
- Date de la décision
- 31 décembre 2025
- Fondement juridique
- Art. 28 (3), Art. 32 (2), (4)
- Manquement
- Contrat de sous-traitance insuffisant
Résumé des faits
The Greek DPA has imposed a fine of EUR 10,000 on Thessaloniki–Thessaly Gas Supply Company S.A. The controller, an energy provider, used external processors for direct marketing via telephone. The controller forwarded complaints by data subjects to the external processors, but failed to ensure, that the processors response was adequate, gernerally failing to adequatly controll processors.