Non-profit organisation

€1,000

Insufficient fulfilment of data subjects rights

Datum för beslut

29 maj 2020

Myndighet

Belgian Data Protection Authority (APD)

BE

Sektor

Individuals and Private Associations

Land

BE

Lag

GDPR

Status

FINAL

Beskrivning

The Belgian data protection authority has imposed a fine of EUR 1000 on a non-profit organisation for sending out direct marketing messages, despite the fact that data subjects had exercised their right to erasure and objection. The organisation claimed that it was relying on legitimate interests as a legal basis and not on the explicit consent of the data subjects. The data protection authority, however, denied the existence of any outweighing of legitimate interests.

Rättsliga hänvisningar

Art. 6Art. 21

Frågor och överträdelser

Insufficient fulfilment of data subjects rights

Håll dig uppdaterad om efterlevnaden av sekretessreglerna

Vi respekterar din integritet. Ett e-postmeddelande per månad, ingen skräppost, avsluta prenumerationen när som helst.