Spartoo

€250,000

Non-compliance with general data processing principles

결정 날짜

2020년 8월 5일

권한

French Data Protection Authority (CNIL)

FR

섹터

Industry and Commerce

국가

FR

법률

GDPR

상태

FINAL

설명

A fine of EUR 250000 was imposed on the online retailer Spartoo. The reason for this was that the company, which has its headquarters in France but supplies a large number of European countries, fully recorded all telephone hotline conversations (including personal data such as address and bank details of orders) and in addition stored bank details partially unencrypted. Among other things, this represents a violation of the principle of data minimization. Furthermore, the supervisory authority also found a violation of the information obligations according to Art. 13 GDPR, as the company's data protection information was partially incorrect.

법적 인용

Art. 5 (1)Art. 13Art. 14

문제 및 위반 사항

Non-compliance with general data processing principles

개인정보 보호 정책 시행에 대한 최신 정보

당사는 사용자의 개인정보를 존중합니다. 한 달에 한 번, 스팸 없이, 언제든지 구독을 취소할 수 있습니다.