National Bank of Greece

€20,000

Insufficient fulfilment of data subjects rights

Fecha de la decisión

26 de agosto de 2021

Autoridad

Hellenic Data Protection Authority (HDPA)

GR

Sector

Finance, Insurance and Consulting

País

GR

Ley

GDPR

Estado

FINAL

Descripción

The Hellenic DPA has imposed a fine of EUR 20,000 on the National Bank of Greece. A data subject had filed a complaint against a company and the bank after they failed to comply with his right to information. After returning a product he had purchased from a company, the data subject had asked the company via Facebook Messenger to inform him about the request to cancel his credit card statements sent electronically to the bank. However, the controller refused to comply, whereupon the data subject asserted the same right with the bank, which, however, did not provide him with a response.

Citas legales

Art. 12 (1)Art. 15 (1)

Problemas e infracciones

Insufficient fulfilment of data subjects rights

Manténgase al día sobre la aplicación de las normas de protección de la intimidad

Respetamos su intimidad. Un correo electrónico al mes, sin spam, darse de baja en cualquier momento.