France

HUBSIDE.STORE

525,000 €

GDPR enforcement action by French Data Protection Authority (CNIL) on 2024-04-04.

Rank · Sector

#44

of 597 in Industry and Commerce

Rank · France

#32

of 74

Rank · All fines

#237

of 3,050

Case details

Authority: French Data Protection Authority (CNIL)
Date: 2024-04-04
Controller / Processor: HUBSIDE.STORE
Sector: Industry and Commerce
Quoted Articles: Art. 6 GDPR, Art. 14 GDPR, Art. L.34-5 CPCE
Type of violation: Insufficient legal basis for data processing

Summary

The French DPA has imposed a fine of EUR 525,000 on HUBSIDE.STORE. The company had used data from data brokers for commercial acquisition campaigns without ensuring that the data subjects had given their valid consent. The investigations revealed that the data brokers' forms were designed in a misleading way, which prevented valid consent. Furthermore, HUBSIDE.STORE did not provide the contacted individuals with sufficient information about the use of their data.

Open original source Links to the regulator's original publication or another source.