Hungary

Car importer

13,500 €

GDPR enforcement action by Hungarian National Authority for Data Protection and the Freedom of Information (NAIH) on 2021-10-27.

Rank · Sector

#196

of 597 in Industry and Commerce

Rank · Hungary

#24

of 75

Rank · All fines

#1,236

of 3,050

Case details

Authority: Hungarian National Authority for Data Protection and the Freedom of Information (NAIH)
Date: 2021-10-27
Controller / Processor: Car importer
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1), (2) GDPR, Art. 6 (1) GDPR, Art. 12 (1) GDPR, Art. 13 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Hungarian DPA imposed a fine of EUR 13,500 on a car importer. A customer of one of the company's authorized repair shops filed a complaint with the DPA due to receiving unsolicited emails related to customer surveys from the company after a car inspection. The Hungarian DPA found that the controller did not have a valid legal basis to contact the data subject. It also found that the controller had not complied with its duty to inform under Art. 12 GDPR and Art. 13 GDPR. The emails did not contain any contact information of the controller, for example.

Open original source Links to the regulator's original publication or another source.