Non-profit organisation

€1,000

Insufficient fulfilment of data subjects rights

Data della decisione

29 maggio 2020

Autorità

Belgian Data Protection Authority (APD)

BE

Settore

Individuals and Private Associations

Paese

BE

Legge

GDPR

Stato

FINAL

Descrizione

The Belgian data protection authority has imposed a fine of EUR 1000 on a non-profit organisation for sending out direct marketing messages, despite the fact that data subjects had exercised their right to erasure and objection. The organisation claimed that it was relying on legitimate interests as a legal basis and not on the explicit consent of the data subjects. The data protection authority, however, denied the existence of any outweighing of legitimate interests.

Citazioni legali

Art. 6Art. 21

Problemi e violazioni

Insufficient fulfilment of data subjects rights

Rimanete aggiornati sull'applicazione della privacy

Rispettiamo la vostra privacy. Un'email al mese, niente spam, cancellazione in qualsiasi momento.