Company
€20,000
Non-compliance with general data processing principles
Decision Date
April 22, 2025
Authority
Belgian Data Protection Authority (APD)
BE
Sector
Industry and Commerce
Country
HU
Law
GDPRStatus
FINALDescription
The Belgian DPA imposed a fine of EUR 20,000 on a company. The controller is a company engaging in direct marketing activities. During those activies the company failed to comply with multiple data processing principle. In particular the company had no sufficient legal basis for the data processing, failed to inform the data subjects and failed to provide data subjects with lawfully requested informations.
Legal Citations
Art. 5 (1)Art. 6 (1)Art. 12 (1)Art. 14 (1)Art. 15 (1)Art. 24 (1)Art. 25 (1)
Issues & Violations
Non-compliance with general data processing principles