Company
€10,000
Insufficient legal basis for data processing
Datum der Entscheidung
1. Januar 2024
Behörde
Data Protection Authority of Hessen
DE
Sektor
Industry and Commerce
Land
HU
Recht
GDPRStatus
FINALBeschreibung
The DPA of Hessen has imposed a fine of EUR 10,000 on a company. The controller used data for marketing purposes without a legal basis. The company obtained the data through internet research.
Juristische Zitate
Art. 6 (1)Art. 7
Probleme und Verstöße
Insufficient legal basis for data processing