Nestor SAS – €20,000 Fine (France, 2021)

€20,000Commission Nationale de l'Informatique et des Libertés5 January 2021France
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Nestor SAS sent commercial emails to people who never signed up for them, violating privacy rules. This is important because it shows that companies must respect people's choices about receiving marketing messages.

What happened

Nestor SAS sent marketing emails without consent from recipients.

Who was affected

Individuals who received unsolicited commercial emails from Nestor SAS.

What the authority found

The French data protection authority ruled that Nestor SAS failed to comply with GDPR by not obtaining consent for sending marketing emails and not providing adequate information to users.

Why this matters

This ruling emphasizes that businesses must obtain clear consent before sending marketing communications. It also stresses the importance of responding to user requests regarding their data.

GDPR Articles Cited

AI-verified

Art. 12(GDPR)
Art. 13(GDPR)
View original scraped data
Art. 12(GDPR)
Art. 13(GDPR)

Original data from scraper before AI verification against source document.

Source verified 13 March 2026
verified correct
Full Legal Summary
Detailed

The French DPA (CNIL) fined the company Nestor EUR 20,000. The CNIL notes that the privacy policy provided during the registration process on the company´s website did not contain the necessary information required by the GDPR. In addition, the controller provided insufficient information on data processing during app registration.

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Details

Fine Date

5 January 2021

Authority

Commission Nationale de l'Informatique et des Libertés

Fine Amount

€20,000

Enforcement Tracker ID

ETid-511

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Nestor SAS - France (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: