Insufficient privacy policy
A visitor to a Spanish online shop called www.vidogrado.com filed a complaint with the data protection authority. The reason for this was a incomplete privacy policy. For example, it did not contain any information on the processing of personal data. In addition, there was no phone number from the company and the email address provided was invalid.
The online shop operator admitted its guilt to which the fine was reduced from 10,000 EUR to 6,000 EUR.
Entscheidungsdatum:
05.08.2021
Land:
Spain
Art des Verstoßes:
violated duty to inform
Betroffene Datensätze:
unknown
Waren sensible Daten betroffen?:
No
verhängte Geldstrafe:
€ 6,000,-
Violation of GDPR Paragraph:
13. Information to be provided where personal data are collected from the data subject
Quelle:
AEPD fines.