Company
€10,000
Insufficient legal basis for data processing
Decision Date
January 1, 2024
Authority
Data Protection Authority of Hessen
DE
Sector
Industry and Commerce
Country
HU
Law
GDPRStatus
FINALDescription
The DPA of Hessen has imposed a fine of EUR 10,000 on a company. The controller used data for marketing purposes without a legal basis. The company obtained the data through internet research.
Legal Citations
Art. 6 (1)Art. 7
Issues & Violations
Insufficient legal basis for data processing