Company
€10,000
Insufficient legal basis for data processing
Fecha de la decisión
1 de enero de 2024
Autoridad
Data Protection Authority of Hessen
DE
Sector
Industry and Commerce
País
HU
Ley
GDPREstado
FINALDescripción
The DPA of Hessen has imposed a fine of EUR 10,000 on a company. The controller used data for marketing purposes without a legal basis. The company obtained the data through internet research.
Citas legales
Art. 6 (1)Art. 7
Problemas e infracciones
Insufficient legal basis for data processing