Non-profit organisation

€1,000

Insufficient fulfilment of data subjects rights

Fecha de la decisión

29 de mayo de 2020

Autoridad

Belgian Data Protection Authority (APD)

BE

Sector

Individuals and Private Associations

País

BE

Ley

GDPR

Estado

FINAL

Descripción

The Belgian data protection authority has imposed a fine of EUR 1000 on a non-profit organisation for sending out direct marketing messages, despite the fact that data subjects had exercised their right to erasure and objection. The organisation claimed that it was relying on legitimate interests as a legal basis and not on the explicit consent of the data subjects. The data protection authority, however, denied the existence of any outweighing of legitimate interests.

Citas legales

Art. 6Art. 21

Problemas e infracciones

Insufficient fulfilment of data subjects rights

Manténgase al día sobre la aplicación de las normas de protección de la intimidad

Respetamos su intimidad. Un correo electrónico al mes, sin spam, darse de baja en cualquier momento.