Company
Insufficient fulfilment of data subjects rights
Date de décision
1 janvier 2022
Autorité
Data Protection Authority of Niedersachsen
DE
Secteur
Industry and Commerce
Pays
HU
Droit
GDPRStatut
FINALDescription
The DPA of Niedersachsen has imposed a fine of EUR 50,000 on a company. The company sent out a newsletter by e-mail that could not be unsubscribed from due to technical malfunctions. Since the company had sent newsletters relatively frequently, this led to a significant number of unsolicited emails for some data subjects. Furthermore, the data subjects were also unable to lodge an objection via the company's website. In addition, the DPA found that the company did not sufficiently process some requests for access from data subjects.