The Netherlands The Netherlands

Coolblue B.V

40,000 €

GDPR enforcement action by Dutch Supervisory Authority for Data Protection (AP) on 2024-12-23.

Rank · Sector
#121
of 597 in Industry and Commerce
Rank · The Netherlands
#28
of 43
Rank · All fines
#834
of 3,050

Case details

Authority
Dutch Supervisory Authority for Data Protection (AP)
Date
2024-12-23
Controller / Processor
Coolblue B.V
Sector
Industry and Commerce
Quoted Articles
Art. 5 (1) a) GDPR, Art. 6 (1) GDPR
Type of violation
Insufficient legal basis for data processing

Summary

The Dutch DPA has imposed a fine of €40,000 on Coolblue. The company collected personal data via cookies without users' explicit consent, relying on pre-ticked consent boxes.

Open original source Links to the regulator's original publication or another source.

Related fines