Finland

Verkkokauppa.com

856,000 €

GDPR enforcement action by Deputy Data Protection Ombudsman on 2024-03-06.

Rank · Sector

#37

of 597 in Industry and Commerce

Rank · Finland

of 27

Rank · All fines

#192

of 3,050

Case details

Authority: Deputy Data Protection Ombudsman
Date: 2024-03-06
Controller / Processor: Verkkokauppa.com
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) e) GDPR, Art. 25 (2) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Finnish DPA has imposed a fine of EUR 856,000 on Verkkokauppa.com Plc for not specifying the retention period of customer account data of e-commerce customers.
The DPA also found that in order to make an online purchase, customers were required to create a customer account or register.

Open original source Links to the regulator's original publication or another source.