Online Services
€10,000
Insufficient fulfilment of information obligations
Ngày ra quyết định
15 tháng 12, 2020
Thẩm quyền
Spanish Data Protection Authority (aepd)
ES
Ngành
Industry and Commerce
Quốc gia
LV
Luật
GDPRTrạng thái
FINALMô tả
The Spanish DPA (AEPD) fined the operator of the online store banderacatalana.cat. EUR 10,000 for a violation of Art. 13 GDPR. The operator stated on its website privacy notices that a minimum age of 13 or sufficient legal capacity was required to subscribe to the newsletter. It was also stated that filling out the newsletter subscription form would be considered as consent to the processing of personal data. This constitutes a violation of the GDPR, as according to Art. 8 GDPR, the processing of personal data of under-16-year-olds requires the consent of the holder of parental responsibility over the child.
Trích dẫn pháp lý
Art. 13Art. 8 (1)Art. 6 (1)
Vấn đề & Vi phạm
Insufficient fulfilment of information obligations