Greece

A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ

5,000 €

GDPR enforcement action by Hellenic Data Protection Authority (HDPA) on 2021-05-12.

Rank · Sector

#93

of 218 in Not assigned

Rank · Greece

#64

of 93

Rank · All fines

#1,728

of 3,050

Case details

Authority: Hellenic Data Protection Authority (HDPA)
Date: 2021-05-12
Controller / Processor: A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ
Sector: Not assigned
Quoted Articles: Art. 5 (1) a), b) GDPR, Art. 12 (3) GDPR, Art. 15 GDPR, Art. 17 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Hellenic DPA has fined A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ EUR 5,000. The controller had not responded to requests for information and deletion from the data subject. During the DPA´s investigation, the controller informed the DPA that it had deleted the data of the data subject. However, the data subject had not been informed of this. Furthermore, the DPA determined that the data subject's data had been collected for a purpose other than the agreed purpose. A corresponding consent of the data subject for this new processing purpose had not been obtained.

Open original source Links to the regulator's original publication or another source.