Germany

Company

50,000 €

GDPR enforcement action by Data Protection Authority of Niedersachsen on 2022.

Rank · Sector

#14

of 218 in Not assigned

Rank · Germany

#47

of 116

Rank · All fines

#724

of 3,042

Case details

Authority: Data Protection Authority of Niedersachsen
Date: 2022
Controller / Processor: Company
Sector: Not assigned
Quoted Articles: Art. 15 GDPR, Art. 21 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The DPA of Niedersachsen has imposed a fine of EUR 50,000 on a company. The company sent out a newsletter by e-mail that could not be unsubscribed from due to technical malfunctions.
Since the company had sent newsletters relatively frequently, this led to a significant number of unsolicited emails for some data subjects. Furthermore, the data subjects were also unable to lodge an objection via the company's website. In addition, the DPA found that the company did not sufficiently process some requests for access from data subjects.

Open original source Links to the regulator's original publication or another source.