Germany

Company

10,000 €

GDPR enforcement action by Data Protection Authority of Hessen on 2024.

Rank · Sector

#234

of 597 in Industry and Commerce

Rank · Germany

#68

of 116

Rank · All fines

#1,431

of 3,050

Case details

Authority: Data Protection Authority of Hessen
Date: 2024
Controller / Processor: Company
Sector: Industry and Commerce
Quoted Articles: Art. 6 (1) GDPR, Art. 7 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The DPA of Hessen has imposed a fine of EUR 10,000 on a company. The controller used data for marketing purposes without a legal basis. The company obtained the data through internet research.

Open original source Links to the regulator's original publication or another source.

Related fines

Media, Telecoms and Broadcasting

H&M Hennes & Mauritz Online Shop A.B. & Co. KG

Individuals and Private Associations

Individuals and Private Associations

Back to all fines