PIRAEUS BANK S.A.
€20,000
Insufficient fulfilment of information obligations
Ngày ra quyết định
3 tháng 10, 2022
Thẩm quyền
Hellenic Data Protection Authority (HDPA)
GR
Ngành
Finance, Insurance and Consulting
Quốc gia
GR
Luật
GDPRTrạng thái
FINALMô tả
The Hellenic DPA has imposed a fine of EUR 20,000 on PIRAEUS BANK S.A.. In the context of the use of certain debit/credit cards, information of the last 10 transactions were stored on the chip of the card without the customers' explicit consent. This information could be read out later. The DPA found that the bank had failed to inform affected customers about this storage of transaction information and therefore violated Art. 13 GDPR.
Trích dẫn pháp lý
Art. 13
Vấn đề & Vi phạm
Insufficient fulfilment of information obligations