Norway

Sats ASA

900,000 €

GDPR enforcement action by Norwegian Supervisory Authority (Datatilsynet) on 2023-02-06.

Rank · Sector

#36

of 597 in Industry and Commerce

Rank · Norway

of 53

Rank · All fines

#186

of 3,051

Case details

Authority: Norwegian Supervisory Authority (Datatilsynet)
Date: 2023-02-06
Controller / Processor: Sats ASA
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a), e) GDPR, Art. 6 (1) GDPR, Art. 12 (1), (3) GDPR, Art. 13 GDPR, Art. 15 GDPR, Art. 17 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Norwegian DPA has imposed a fine of EUR 900,000 on the fitness chain "Sats". The DPA had received several complaints from customers who had submitted requests for information as well as deletion of their personal data, which Sats had not complied with. The DPA also found that Sats had processed certain customer data without a valid legal basis.

Open original source Links to the regulator's original publication or another source.