ALFA BANK S.A.

€20,000

Insufficient fulfilment of information obligations

Dato for beslutning

3. oktober 2022

Myndighet

Hellenic Data Protection Authority (HDPA)

GR

Sektor

Finance, Insurance and Consulting

Land

GR

Lov og rett

GDPR

Status

FINAL

Beskrivelse

The Hellenic DPA has imposed a fine of EUR 20,000 on ALFA BANK S.A.. In the context of the use of certain debit/credit cards, information of the last 10 transactions were stored on the chip of the card without the customers' explicit consent. This information could be read out later. The DPA found that the bank had failed to inform affected customers about this storage of transaction information and therefore violated Art. 13 GDPR.

Juridiske henvisninger

Art. 13

Problemer og overtredelser

Insufficient fulfilment of information obligations

Hold deg oppdatert om håndheving av personvern

Vi respekterer personvernet ditt. Én e-post per måned, ingen spam, avmelding når som helst.