Roularta Media Group

€50,000

Insufficient legal basis for data processing

决定日期

2022年5月25日

权力

Belgian Data Protection Authority (APD)

BE

部门

Media, Telecoms and Broadcasting

国家

BE

法律

GDPR

现状

FINAL

说明

The Belgian DPA has imposed a fine of EUR 50,000 on Roularta Media Group. As part of its investigation, the DPA found that the cookie management on two websites operated by Roularta did not comply with the GDPR. In order to use cookies, controllers must obtain prior consent from the user, except in cases where the cookies are strictly necessary for website operation. The DPA found that consent to the processing of personal data through cookies on websites operated by Roularta was not valid, as not all necessary conditions were met. As such, about 60 cookies that were not required had been placed by the websites on visitors' devices even before they had given their consent. Roularta had also failed to sufficiently inform users about cookies. In addition, the boxes for consent to the placement of cookies by third parties were checked in advance, although users must always actively consent. In addition, the DPA found that users could not revoke their consent to cookie placement as easily as they had given it.

法律引文

Art. 5 (1)Art. 5 (2)Art. 6 (1)Art. 7 (1)Art. 12Art. 13Art. 14Art. 24

问题与违规

Insufficient legal basis for data processing

随时了解隐私执法的最新情况

我们尊重您的隐私。每月一封电子邮件,无垃圾邮件,随时退订。