Greece

ONE WAY PRIVATE COMPANY

80,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2025-12-31.

Rank · Sector

#124

of 369 in Media, Telecoms and Broadcasting

Rank · Greece

#15

of 93

Rank · All fines

#541

of 3,050

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2025-12-31
Controller / Processor: ONE WAY PRIVATE COMPANY
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 29 GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Greek DPA has imposed a fine of EUR 80,000 on ONE WAY PRIVATE COMPANY. The fined entity is the processor of Thessaloniki–Thessaly Gas Supply Company S.A. (ETid-3016). The processor, a call center involved in direct marketing activities, had implemented a system to check whether consent had been given to contact a specific person. However, this system could be bypassed or ignored by the operator, resulting in data subjects being contacted without their consent. Furthermore, the controller had been promoting third-party products without being instructed to do so, resulting in personal data being processed without a sufficient legal basis.

Open original source Links to the regulator's original publication or another source.