ALFA BANK S.A.
€20,000
Insufficient fulfilment of information obligations
결정 날짜
2022년 10월 3일
권한
Hellenic Data Protection Authority (HDPA)
GR
섹터
Finance, Insurance and Consulting
국가
GR
법률
GDPR상태
FINAL설명
The Hellenic DPA has imposed a fine of EUR 20,000 on ALFA BANK S.A.. In the context of the use of certain debit/credit cards, information of the last 10 transactions were stored on the chip of the card without the customers' explicit consent. This information could be read out later. The DPA found that the bank had failed to inform affected customers about this storage of transaction information and therefore violated Art. 13 GDPR.
법적 인용
Art. 13
문제 및 위반 사항
Insufficient fulfilment of information obligations