Sanction RGPD Hellenic Data Protection Authority (HDPA) — ONE WAY PRIVATE COMPANY : 80 k€ (2025)
- Autorité de contrôle
- Hellenic Data Protection Authority (HDPA)
- Pays
- Grèce
- Entreprise / secteur
- ONE WAY PRIVATE COMPANY
- Montant de l'amende
- 80 k€
- Date de la décision
- 31 décembre 2025
- Fondement juridique
- Art. 5, Art. 6, Art. 7, Art. 29, Art. 32
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Greek DPA has imposed a fine of EUR 80,000 on ONE WAY PRIVATE COMPANY. The fined entity is the processor of Thessaloniki–Thessaly Gas Supply Company S.A. (ETid-3016). The processor, a call center involved in direct marketing activities, had implemented a system to check whether consent had been given to contact a specific person. However, this system could be bypassed or ignored by the operator, resulting in data subjects being contacted without their consent. Furthermore, the controller had been promoting third-party products without being instructed to do so, resulting in personal data being processed without a sufficient legal basis.