Company
€20,000
Non-compliance with general data processing principles
Date de décision
22 avril 2025
Autorité
Belgian Data Protection Authority (APD)
BE
Secteur
Industry and Commerce
Pays
HU
Droit
GDPRStatut
FINALDescription
The Belgian DPA imposed a fine of EUR 20,000 on a company. The controller is a company engaging in direct marketing activities. During those activies the company failed to comply with multiple data processing principle. In particular the company had no sufficient legal basis for the data processing, failed to inform the data subjects and failed to provide data subjects with lawfully requested informations.
Citations légales
Art. 5 (1)Art. 6 (1)Art. 12 (1)Art. 14 (1)Art. 15 (1)Art. 24 (1)Art. 25 (1)
Questions et violations
Non-compliance with general data processing principles