FNAC DARTY PARTICIPATIONS ET SERVICES
GDPR enforcement action by French Data Protection Authority (CNIL) on 2026-10-22.
Case details
- Authority
- French Data Protection Authority (CNIL)
- Date
- 2026-10-22
- Controller / Processor
- FNAC DARTY PARTICIPATIONS ET SERVICES
- Sector
- Industry and Commerce
- Quoted Articles
- Art. 82 French Data Protection Act
- Type of violation
- Insufficient legal basis for data processing
Summary
The French DPA has imposed a fine of EUR 6,000,000 on FNAC DARTY PARTICIPATIONS ET SERVICES. On 15 September 2023, a complaint was filed with the CNIL regarding the controller's app. The complaint stated that the app was using tracking technology without the consent of the data subjects. The CNIL then launched an investigation into the app and found that, even though data subjects had not consented to tracking activities, the app was still tracking their usage behaviour. This data was then used to personalise content and train a recommendation algorithm. FNAC Darty Participations et Services and FNAC Direct are joint controllers regarding the relevant application, as stated in the app's privacy policy. FNAC Darty Participations et Services was also fined (ETid).