Posti Jakelu Oy

€2,400,000

Insufficient legal basis for data processing

Päätöspäivä

13. marraskuuta 2024

Viranomainen

Deputy Data Protection Ombudsman

FI

Ala

Transportation and Energy

Maa

FI

Laki

GDPR

Tila

FINAL

Kuvaus

The Finnish DPA imposed a fine of EUR 2.4 million on Posti Jakelu Oy following an investigation. It was found that Posti had automatically set up an electronic mailbox for customers without their explicit consent. This mailbox was connected to other services, and customers were unable to choose whether to use it, as the services were bundled together in a single contract. Canceling the mailbox would also have resulted in the termination of the other services. The DPA determined that the requested service could have been offered without the automatic creation of the electronic mailbox. Furthermore, Posti failed to properly inform customers about the activation of the mailbox.

Oikeudelliset viittaukset

Art. 6 (1)

Asiat ja rikkomukset

Insufficient legal basis for data processing

Pysy ajan tasalla yksityisyyden suojan valvonnasta

Kunnioitamme yksityisyyttäsi. Yksi sähköpostiviesti kuukaudessa, ei roskapostia, peruuta tilaus milloin tahansa.