Roularta Media Group

€50,000

Insufficient legal basis for data processing

تاريخ القرار

25 مايو 2022

الهيئة

Belgian Data Protection Authority (APD)

BE

القطاع

Media, Telecoms and Broadcasting

البلد

BE

القانون

GDPR

الحالة

FINAL

الوصف

The Belgian DPA has imposed a fine of EUR 50,000 on Roularta Media Group. As part of its investigation, the DPA found that the cookie management on two websites operated by Roularta did not comply with the GDPR. In order to use cookies, controllers must obtain prior consent from the user, except in cases where the cookies are strictly necessary for website operation. The DPA found that consent to the processing of personal data through cookies on websites operated by Roularta was not valid, as not all necessary conditions were met. As such, about 60 cookies that were not required had been placed by the websites on visitors' devices even before they had given their consent. Roularta had also failed to sufficiently inform users about cookies. In addition, the boxes for consent to the placement of cookies by third parties were checked in advance, although users must always actively consent. In addition, the DPA found that users could not revoke their consent to cookie placement as easily as they had given it.

الاستشهادات القانونية

Art. 5 (1)Art. 5 (2)Art. 6 (1)Art. 7 (1)Art. 12Art. 13Art. 14Art. 24

القضايا والانتهاكات

Insufficient legal basis for data processing

ابق على اطلاع على آخر المستجدات بشأن إنفاذ الخصوصية

نحن نحترم خصوصيتك. بريد إلكتروني واحد في الشهر، لا رسائل غير مرغوب فيها، يمكنك إلغاء الاشتراك في أي وقت.