Croatia

FAVORIT SPORTSKA KLADIONICA d.o.o.

175,000 €

GDPR enforcement action by Croatian Data Protection Authority (azop) on 2025-07-02.

Rank · Sector

#66

of 595 in Industry and Commerce

Rank · Croatia

#10

of 43

Rank · All fines

#388

of 3,039

Case details

Authority: Croatian Data Protection Authority (azop)
Date: 2025-07-02
Controller / Processor: FAVORIT SPORTSKA KLADIONICA d.o.o.
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) e) GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The Croatian DPA has imposed a fine of EUR 175,000 on a sports betting company. The controller failed to implement sufficient technical and organisational measures to ensure data security. The controller used insecure communication methods like e-mails and HTTP connections. The controller also failed to delete personal data after the retention period expired. Furthermore, the controller intentionally failed to implement backups of personal data in order to reduce costs.

Open original source Links to the regulator's original publication or another source.