Non-profit organisation

€1,000

Insufficient fulfilment of data subjects rights

Päätöspäivä

29. toukokuuta 2020

Viranomainen

Belgian Data Protection Authority (APD)

BE

Ala

Individuals and Private Associations

Maa

BE

Laki

GDPR

Tila

FINAL

Kuvaus

The Belgian data protection authority has imposed a fine of EUR 1000 on a non-profit organisation for sending out direct marketing messages, despite the fact that data subjects had exercised their right to erasure and objection. The organisation claimed that it was relying on legitimate interests as a legal basis and not on the explicit consent of the data subjects. The data protection authority, however, denied the existence of any outweighing of legitimate interests.

Oikeudelliset viittaukset

Art. 6Art. 21

Asiat ja rikkomukset

Insufficient fulfilment of data subjects rights

Pysy ajan tasalla yksityisyyden suojan valvonnasta

Kunnioitamme yksityisyyttäsi. Yksi sähköpostiviesti kuukaudessa, ei roskapostia, peruuta tilaus milloin tahansa.