INFINITE STYLES SERVICES CO. LIMITED
€150,000,000
Insufficient legal basis for data processing
Date de décision
1 septembre 2025
Autorité
French Data Protection Authority (CNIL)
FR
Secteur
Industry and Commerce
Pays
FR
Droit
GDPRStatut
FINALDescription
The French DPA has imposed a fine of EUR 150,000,000 on INFINITE STYLES SERVICES CO. LIMITED, which operates under the name 'SHEIN'. The controller used cookies unlawfully on its website. Firstly, the controller failed to obtain the data subject's consent before placing cookies. Second, the controller used incomplete cookie banners. Third, the controller failed to provide adequate second-level information. Finally, the controller's mechanisms for refusing or withdrawing consent were inadequate.
Citations légales
Art. 82
Questions et violations
Insufficient legal basis for data processing