Company
€10,000
Insufficient legal basis for data processing
Date de décision
1 janvier 2024
Autorité
Data Protection Authority of Hessen
DE
Secteur
Industry and Commerce
Pays
HU
Droit
GDPRStatut
FINALDescription
The DPA of Hessen has imposed a fine of EUR 10,000 on a company. The controller used data for marketing purposes without a legal basis. The company obtained the data through internet research.
Citations légales
Art. 6 (1)Art. 7
Questions et violations
Insufficient legal basis for data processing