Croatia

Company

20,000 €

GDPR enforcement action by Croatian Data Protection Authority (azop) on 2024-02-26.

Rank · Sector

#33

of 218 in Not assigned

Rank · Croatia

#25

of 43

Rank · All fines

#1,109

of 3,050

Case details

Authority: Croatian Data Protection Authority (azop)
Date: 2024-02-26
Controller / Processor: Company
Sector: Not assigned
Quoted Articles: Art. 6 (1) GDPR, Art. 7 GDPR, Art. 13 (1), (2) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Croatian DPA has imposed a fine of EUR 20,000 on a company. The controller processed personal data through cookies without obtaining valid consent. Data subjects were not given the opportunity to give informed consent before non-essential cookies were used because the cookies were loaded before they could do so via the cookie banner. Additionally, the controller did not provide adequate cookie and privacy information.

Open original source Links to the regulator's original publication or another source.