A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ – €5,000 Fine (Greece, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Greek company was fined for not responding to a person's request to access and delete their data. The company also used the person's data for a different purpose without telling them. This case shows the importance of respecting people's rights to control their personal information.
What happened
A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ failed to respond to requests for data access and deletion and used data for a new purpose without consent.
Who was affected
The affected person was someone who requested access to and deletion of their personal data, which was used without their consent.
What the authority found
The Hellenic DPA found that the company violated GDPR by not respecting the individual's rights to access and delete their data and by processing data without proper consent.
Why this matters
This ruling emphasizes the need for businesses to promptly address data access and deletion requests and to ensure they have a valid reason for using personal data. Companies should review their data handling practices to avoid similar penalties.
GDPR Articles Cited
The Hellenic DPA has fined A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ EUR 5,000. The controller had not responded to requests for information and deletion from the data subject. During the DPA´s investigation, the controller informed the DPA that it had deleted the data of the data subject. However, the data subject had not been informed of this. Furthermore, the DPA determined that the data subject's data had been collected for a purpose other than the agreed purpose. A corresponding consent of the data subject for this new processing purpose had not been obtained.
Related Enforcement Actions (0)
No other enforcement actions found for A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ in GR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
12 May 2021
Authority
Hellenic Data Protection Authority
Fine Amount
€5,000
Enforcement Tracker ID
ETid-680
About this data
Cite as: Cookie Fines. A. ΕΠΙΛΟΓΗ ΙΔΙΩΤΙΚΗ ΚΕΦΑΛΑΙΟΥΧΙΚΗ ΕΤΑΙΡΕΙΑ - Greece (2021). Retrieved from cookiefines.eu
Last updated: