National Bank of Greece

€20,000

Insufficient fulfilment of data subjects rights

Date de décision

26 août 2021

Autorité

Hellenic Data Protection Authority (HDPA)

GR

Secteur

Finance, Insurance and Consulting

Pays

GR

Droit

GDPR

Statut

FINAL

Description

The Hellenic DPA has imposed a fine of EUR 20,000 on the National Bank of Greece. A data subject had filed a complaint against a company and the bank after they failed to comply with his right to information. After returning a product he had purchased from a company, the data subject had asked the company via Facebook Messenger to inform him about the request to cancel his credit card statements sent electronically to the bank. However, the controller refused to comply, whereupon the data subject asserted the same right with the bank, which, however, did not provide him with a response.

Citations légales

Art. 12 (1)Art. 15 (1)

Questions et violations

Insufficient fulfilment of data subjects rights

Restez informé sur l'application de la législation en matière de protection de la vie privée

Nous respectons votre vie privée. Un courriel par mois, pas de spam, désabonnement à tout moment.