Sanction RGPD Data State Inspectorate (DSI) — Online Services : 7 k€ (2019)
- Autorité de contrôle
- Data State Inspectorate (DSI)
- Pays
- Lettonie
- Entreprise / secteur
- Online Services
- Montant de l'amende
- 7 k€
- Date de la décision
- 26 août 2019
- Fondement juridique
- Art. 17
- Manquement
- Droits des personnes non respectés
Résumé des faits
A merchant who provides services in an online store has infringed the 'right to be forgotten' pursuant to Art. 17 GDPR when he was repeatedly requested by a data subject to delete all his personal data, in particular his/her mobile phone number, which the merchant had received as part of an order. Nevertheless, the merchant repeatedly sent advertising messages by SMS to the data subjects mobile phone number.