Family Service / N.D.P.K. nv.

€50,000

Insufficient legal basis for data processing

Ngày ra quyết định

27 tháng 1, 2021

Thẩm quyền

Belgian Data Protection Authority (APD)

BE

Ngành

Industry and Commerce

Quốc gia

BE

Luật

GDPR

Trạng thái

FINAL

Mô tả

The Belgian DPA imposed a fine of EUR 50,000 on Family Service / N.D.P.K. nv. The controller is an advertising agency that, among other things, sends expectant mothers gift boxes containing various discount vouchers, product samples and information about pregnancy and birth. The box items are provided by third parties, to whom the controller subsequently transfers the recipients' contact data for marketing purposes. The consent of the recipients to this transfer and to subsequent advertising measures by the third parties is obtained in advance by the controller for this purpose. A data subject filed a complaint with the Belgian DPA because, although she had revoked her previously given consent, she nevertheless continued to receive advertising calls from third parties to whom the controller had transmitted her data.

Trích dẫn pháp lý

Art. 5Art. 6Art. 7Art. 13Art. 24Art. 25Art. 28

Vấn đề & Vi phạm

Insufficient legal basis for data processing

Cập nhật thông tin về việc thực thi quy định bảo vệ dữ liệu cá nhân

Chúng tôi tôn trọng quyền riêng tư của bạn. Chỉ một email mỗi tháng, không spam, có thể hủy đăng ký bất cứ lúc nào.