Greece

Thessaloniki–Thessaly Gas Supply Company S.A.

10,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2025-12-31.

Rank · Sector

#116

of 167 in Transportation and Energy

Rank · Greece

#53

of 93

Rank · All fines

#1,448

of 3,050

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2025-12-31
Controller / Processor: Thessaloniki–Thessaly Gas Supply Company S.A.
Sector: Transportation and Energy
Quoted Articles: Art. 28 (3) GDPR, Art. 32 (2), (4) GDPR
Type of violation: Insufficient data processing agreement

Summary

The Greek DPA has imposed a fine of EUR 10,000 on Thessaloniki–Thessaly Gas Supply Company S.A. The controller, an energy provider, used external processors for direct marketing via telephone. The controller forwarded complaints by data subjects to the external processors, but failed to ensure, that the processors response was adequate, gernerally failing to adequatly controll processors.

Open original source Links to the regulator's original publication or another source.