Operator of an online shop for alcoholic beverages
GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2026-04-30.
Case details
- Authority
- Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
- Date
- 2026-04-30
- Controller / Processor
- Operator of an online shop for alcoholic beverages
- Sector
- Industry and Commerce
- Quoted Articles
- Art. 5 (1) a) GDPR, Art. 5 (2) GDPR, Art. 12 (1) GDPR, Art. 13 (1) a), c), e) GDPR, Art. 13 (2) a), b), c), d), e) GDPR
- Type of violation
- Insufficient fulfilment of information obligations
Summary
The Hungarian DPA has imposed a fine of EUR 27,319 on the operator of an online shop. In June 2025, the authority carried out an unannounced inspection of the controller's website. This inspection consisted of viewing the website, making a test registration, and saving copies of it. It was found that the website did not have a privacy notice; it had only contained a short statement in 2020 and 2021, and in 2022 it led to a 404 error. The data protection information provided in the general terms and conditions related to outdated Hungarian data protection legislation and failed to comply with GDPR principles adequately.