Sanction RGPD Hellenic Data Protection Authority (HDPA) — A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ : 5 k€ (2021)
- Autorité de contrôle
- Hellenic Data Protection Authority (HDPA)
- Pays
- Grèce
- Entreprise / secteur
- A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ
- Montant de l'amende
- 5 k€
- Date de la décision
- 12 mai 2021
- Fondement juridique
- Art. 5 (1) a), b), Art. 12 (3), Art. 15, Art. 17
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Hellenic DPA has fined A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ EUR 5,000. The controller had not responded to requests for information and deletion from the data subject. During the DPA´s investigation, the controller informed the DPA that it had deleted the data of the data subject. However, the data subject had not been informed of this. Furthermore, the DPA determined that the data subject's data had been collected for a purpose other than the agreed purpose. A corresponding consent of the data subject for this new processing purpose had not been obtained.