Company
—
GDPR enforcement action by Data Protection Authority of Bremen on 2023.
Case details
- Authority
- Data Protection Authority of Bremen
- Date
- 2023
- Controller / Processor
- Company
- Sector
- Employment
- Quoted Articles
- Art. 6 GDPR
- Type of violation
- Insufficient legal basis for data processing
Summary
The DPA of Bremen has imposed a fine on a company. The controller had stored the contact details of former employees without their prior consent in order to contact them in the future to offer them further job opportunities.
Open original source
Links to the regulator's original publication or another source.
Related fines
Germany
2024
45,000,000 €
ETid-2646
Vodafone GmbH
Media, Telecoms and Broadcasting
Germany
2020-10-01
35,258,708 €
ETid-405
H&M Hennes & Mauritz Online Shop A.B. & Co. KG
Employment
Germany
2024
4,113,486 €
ETid-2638
Unknown
Not assigned
Germany
2019
3,501,000 €
ETid-943
Unknown
Individuals and Private Associations
Germany
2022
2,001,000 €
ETid-1870
Unknown
Individuals and Private Associations
Germany
2022-03-03
1,900,000 €
ETid-1103
BREBAU GmbH
Real Estate