Finland

Verkkokauppa.com

856,000 €

GDPR enforcement action by Deputy Data Protection Ombudsman on 2024-03-06.

Rank · Sector

#41

of 658 in Industry and Commerce

Rank · Finland

of 29

Rank · All fines

#205

of 3,275

Case details

Authority: Deputy Data Protection Ombudsman
Date: 2024-03-06
Controller / Processor: Verkkokauppa.com
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) e) GDPR, Art. 25 (2) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Finnish DPA has imposed a fine of EUR 856,000 on Verkkokauppa.com Plc for not specifying the retention period of customer account data of e-commerce customers.
The DPA also found that in order to make an online purchase, customers were required to create a customer account or register.

--Update--
The Helsinki Administrative Court has reduced the fine to EUR 792,639. This decision was upheld by the Supreme Administrative Court.

Open original source Links to the regulator's original publication or another source.