Online Services
€7,000
Insufficient fulfilment of data subjects rights
Decision Date
August 26, 2019
Authority
Data State Inspectorate (DSI)
LV
Sector
Industry and Commerce
Country
LV
Law
GDPRStatus
FINALDescription
A merchant who provides services in an online store has infringed the 'right to be forgotten' pursuant to Art. 17 GDPR when he was repeatedly requested by a data subject to delete all his personal data, in particular his/her mobile phone number, which the merchant had received as part of an order. Nevertheless, the merchant repeatedly sent advertising messages by SMS to the data subjects mobile phone number.
Legal Citations
Art. 17
Issues & Violations
Insufficient fulfilment of data subjects rights