Betting company – €20,000 Fine (Croatia, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A betting company in Croatia was fined €20,000 for collecting personal data from website visitors without proper consent. The ruling is significant because it reinforces the need for clear cookie consent practices. Website operators should ensure they provide detailed information about cookies and allow users to choose their preferences.
What happened
The betting company collected and processed personal data from website visitors through cookies without a valid legal basis.
Who was affected
Website visitors who interacted with the betting company's site were affected by the improper data collection.
What the authority found
The Croatian DPA found that the company violated GDPR by not obtaining valid consent and failing to provide clear information about cookie usage.
Why this matters
This ruling sets a precedent for cookie consent practices, emphasizing that users must have the option to give separate consent for different types of cookies. Website operators should review their cookie policies to comply with these requirements.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
Insufficient legal basis for data processing
Violations (5)
Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.
Art. 6(1) GDPR
Third-party tracking cookies or scripts are loaded without obtaining prior user consent.
Art. 13, 14 GDPR
The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.
Art. 12, 13 GDPR
Users cannot select or deselect individual cookie categories; consent is presented as all-or-nothing.
Art. 4(11) GDPR
No accessible mechanism exists for users to withdraw previously given cookie consent.
Art. 7(3) GDPR
Related Enforcement Actions (3)
Other enforcement actions involving Betting company in HR
Fine
€20K
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
14 September 2023
Authority
Agencija za zaštitu osobnih podataka
Fine Amount
€20,000
Enforcement Tracker ID
2061
About this data
Cite as: Cookie Fines. Betting company - Croatia (2023). Retrieved from cookiefines.eu
Last updated: