SA Rossel & Cie
Insufficient legal basis for data processing
Decision Date
16 de junho de 2022
Authority
Belgian Data Protection Authority (APD)
BE
Sector
Media, Telecoms and Broadcasting
Country
BE
Law
GDPRStatus
FINALDescription
Original fine summary: The Belgian DPA has imposed a fine of EUR 50,000 on the media company SA Rossel & Cie. During its investigation, the DPA found GDPR violations on three websites operated by the company. For instance, the company had placed cookies that were not required without the consent of the website visitors. Also, the company considered visiting other websites as consent for further cookie placement on these pages. In addition, the boxes for the consent of third-party cookies were already pre-ticked. Furthermore, the cookie policy was incomplete and difficult to access for the visitor. Finally, the DPA found that the company was placing new cookies despite users revoking their cookie consent. Update: On February 22th, 2023, the fine has been overturned by the Market Court.