Black Tiger Belgium
Insufficient fulfilment of information obligations
Data da decisão
16 de janeiro de 2024
Autoridade
Belgian Data Protection Authority (APD)
BE
Setor
Industry and Commerce
País
BE
Lei
GDPRStatus
FINALDescrição
The Belgian DPA has imposed a fine of EUR 174,640 on Black Tiger Belgium. An individual had filed a complaint with the DPA due to the controller's failure to properly comply with their request to exercise their right of access. During its investigation, the DPA further found that the controller had processed personal data in various databases without sufficiently informing the data subjects. The DPA also found that the data retention period of 15 years was excessively long and not necessary. Finally, the DPA found that the company's register of processing activities lacked information.