Sanction RGPD French Data Protection Authority (CNIL) — Nestor SAS : 20 k€ (2021)
- Autorité de contrôle
- French Data Protection Authority (CNIL)
- Pays
- France
- Entreprise / secteur
- Nestor SAS
- Montant de l'amende
- 20 k€
- Date de la décision
- 5 janvier 2021
- Fondement juridique
- Art. 12, Art. 13
- Manquement
- Obligation d'information insuffisante
Résumé des faits
The French DPA (CNIL) fined the company Nestor EUR 20,000. The CNIL notes that the privacy policy provided during the registration process on the company´s website did not contain the necessary information required by the GDPR. In addition, the controller provided insufficient information on data processing during app registration.