Latvia

Online Services

7,000 €

GDPR enforcement action by Data State Inspectorate (DSI) on 2019-08-26.

Rank · Sector

#254

of 597 in Industry and Commerce

Rank · Latvia

of 6

Rank · All fines

#1,553

of 3,050

Case details

Authority: Data State Inspectorate (DSI)
Date: 2019-08-26
Controller / Processor: Online Services
Sector: Industry and Commerce
Quoted Articles: Art. 17 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

A merchant who provides services in an online store has infringed the "right to be forgotten" pursuant to Art. 17 GDPR when he was repeatedly requested by a data subject to delete all his personal data, in particular his/her mobile phone number, which the merchant had received as part of an order. Nevertheless, the merchant repeatedly sent advertising messages by SMS to the data subjects mobile phone number.

Open original source Links to the regulator's original publication or another source.