Germany

Delivery Hero

195,407 €

GDPR enforcement action by Data Protection Authority of Berlin on 2019-09-19.

Rank · Sector

of 100 in Accomodation and Hospitality

Rank · Germany

#29

of 116

Rank · All fines

#376

of 3,050

Case details

Authority: Data Protection Authority of Berlin
Date: 2019-09-19
Controller / Processor: Delivery Hero
Sector: Accomodation and Hospitality
Quoted Articles: Art. 15 GDPR, Art. 17 GDPR, Art. 21 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

According to the findings of the Berlin data protection officer, Delivery Hero Germany GmbH had not deleted accounts of former customers in ten cases, even though those data subjects had not been active on the company's delivery service platform for years - in one case even since 2008. In addition, eight former customers had complained about unsolicited advertising e-mails from the company. A data subject who had expressly objected to the use of his data for advertising purposes nevertheless received further 15 advertising e-mails from the delivery service. In further five cases, the company did not provide the data subjects with the required information or only after the Berlin data protection officer had intervened.

Open original source Links to the regulator's original publication or another source.