Belgium

Black Tiger Belgium

174,640 €

GDPR enforcement action by Belgian Data Protection Authority (APD) on 2024-01-16.

Rank · Sector

#67

of 595 in Industry and Commerce

Rank · Belgium

of 50

Rank · All fines

#390

of 3,042

Case details

Authority: Belgian Data Protection Authority (APD)
Date: 2024-01-16
Controller / Processor: Black Tiger Belgium
Sector: Industry and Commerce
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 12 GDPR, Art. 14 GDPR, Art. 15 GDPR Art. 24 GDPR, Art. 25 GDPR, Art. 30 GDPR
Type of violation: Insufficient fulfilment of information obligations

Summary

The Belgian DPA has imposed a fine of EUR 174,640 on Black Tiger Belgium. An individual had filed a complaint with the DPA due to the controller's failure to properly comply with their request to exercise their right of access. During its investigation, the DPA further found that the controller had processed personal data in various databases without sufficiently informing the data subjects. The DPA also found that the data retention period of 15 years was excessively long and not necessary. Finally, the DPA found that the company's register of processing activities lacked information.

Open original source Links to the regulator's original publication or another source.