Sanction RGPD Croatian Data Protection Authority (azop) — Company : 20 k€ (2024)
- Autorité de contrôle
- Croatian Data Protection Authority (azop)
- Pays
- Croatie
- Entreprise / secteur
- Company
- Montant de l'amende
- 20 k€
- Date de la décision
- 26 février 2024
- Fondement juridique
- Art. 6 (1), Art. 7, Art. 13 (1), (2)
- Manquement
- Base légale insuffisante pour le traitement
Résumé des faits
The Croatian DPA has imposed a fine of EUR 20,000 on a company. The controller processed personal data through cookies without obtaining valid consent. Data subjects were not given the opportunity to give informed consent before non-essential cookies were used because the cookies were loaded before they could do so via the cookie banner. Additionally, the controller did not provide adequate cookie and privacy information.