Coolblue B.V
€40,000
Insufficient legal basis for data processing
Decision Date
December 23, 2024
Authority
Dutch Supervisory Authority for Data Protection (AP)
NL
Sector
Industry and Commerce
Country
NL
Law
GDPRStatus
FINALDescription
The Dutch DPA has imposed a fine of €40,000 on Coolblue. The company collected personal data via cookies without users' explicit consent, relying on pre-ticked consent boxes.
Legal Citations
Art. 5 (1)Art. 6 (1)
Issues & Violations
Insufficient legal basis for data processing