Non-profit organisation

€1,000

Insufficient fulfilment of data subjects rights

Dato for beslutning

29. mai 2020

Myndighet

Belgian Data Protection Authority (APD)

BE

Sektor

Individuals and Private Associations

Land

BE

Lov og rett

GDPR

Status

FINAL

Beskrivelse

The Belgian data protection authority has imposed a fine of EUR 1000 on a non-profit organisation for sending out direct marketing messages, despite the fact that data subjects had exercised their right to erasure and objection. The organisation claimed that it was relying on legitimate interests as a legal basis and not on the explicit consent of the data subjects. The data protection authority, however, denied the existence of any outweighing of legitimate interests.

Juridiske henvisninger

Art. 6Art. 21

Problemer og overtredelser

Insufficient fulfilment of data subjects rights

Hold deg oppdatert om håndheving av personvern

Vi respekterer personvernet ditt. Én e-post per måned, ingen spam, avmelding når som helst.