Roularta Media Group

€50,000

Insufficient legal basis for data processing

Ngày ra quyết định

25 tháng 5, 2022

Thẩm quyền

Belgian Data Protection Authority (APD)

BE

Ngành

Media, Telecoms and Broadcasting

Quốc gia

BE

Luật

GDPR

Trạng thái

FINAL

Mô tả

The Belgian DPA has imposed a fine of EUR 50,000 on Roularta Media Group. As part of its investigation, the DPA found that the cookie management on two websites operated by Roularta did not comply with the GDPR. In order to use cookies, controllers must obtain prior consent from the user, except in cases where the cookies are strictly necessary for website operation. The DPA found that consent to the processing of personal data through cookies on websites operated by Roularta was not valid, as not all necessary conditions were met. As such, about 60 cookies that were not required had been placed by the websites on visitors' devices even before they had given their consent. Roularta had also failed to sufficiently inform users about cookies. In addition, the boxes for consent to the placement of cookies by third parties were checked in advance, although users must always actively consent. In addition, the DPA found that users could not revoke their consent to cookie placement as easily as they had given it.

Trích dẫn pháp lý

Art. 5 (1)Art. 5 (2)Art. 6 (1)Art. 7 (1)Art. 12Art. 13Art. 14Art. 24

Vấn đề & Vi phạm

Insufficient legal basis for data processing

Cập nhật thông tin về việc thực thi quy định bảo vệ dữ liệu cá nhân

Chúng tôi tôn trọng quyền riêng tư của bạn. Chỉ một email mỗi tháng, không spam, có thể hủy đăng ký bất cứ lúc nào.