eCommerce 2020 ApS

€51,000

Insufficient legal basis for data processing

Дата на решението

27 юни 2023 г.

Орган

Icelandic data protection authority ('Persónuvernd')

IS

Сектор

Finance, Insurance and Consulting

Държава

IS

Право

GDPR

Статус

FINAL

Описание

The Icelandic DPA has imposed a fine of EUR 51,000 on eCommerce 2020 ApS. The controller had submitted information on loan defaults for registration even though the required registration conditions for this have not been in place. For instance, unpaid small loans were registered although they were below the required minimum amount. In assessing the fine, the fact that a large number of people were affected by the incident and that the controller was pursuing profits were considered aggravating factors.

Правни цитати

Art. 5 (1)Art. 6 (1)Art. 8Art. 9

Въпроси и нарушения

Insufficient legal basis for data processing

Бъдете информирани за прилагането на поверителността

Уважаваме поверителността ви. Един имейл на месец, без спам, отпишете се по всяко време.