Betting company – €15,000 Fine (Croatia, 2024)

€15,000Agencija za zaštitu osobnih podataka22 April 2024Croatia
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Croatian betting company was fined €15,000 for not properly asking for consent before using cookies to track visitors. This matters because it shows that companies must clearly inform users about cookie usage and give them a choice. Website operators should ensure their cookie banners are clear and allow users to manage their preferences easily.

What happened

The Croatian DPA fined a betting company for collecting personal data through cookies without proper consent.

Who was affected

Website visitors whose data was collected by the betting company's cookies were affected.

What the authority found

The DPA found that the company violated GDPR by not providing clear information and options for consent regarding cookie usage.

Why this matters

This case highlights the importance of transparent cookie policies and consent mechanisms for all online businesses. Companies should review their cookie practices to avoid similar penalties.

GDPR Articles Cited

AI-verified

Art. 7(GDPR)
Art. 6(1)(a) GDPR
Art. 13(1) GDPR
View original scraped data
Art. 6(1) a) GDPR
Art. 7(GDPR)
Art. 13(1) GDPR
(2) GDPR

Original data from scraper before AI verification against source document.

Source verified 5 April 2026
articles corrected
Full Legal Summary
Detailed

Insufficient legal basis for data processing

Violations (4)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Unclear Cookie Information
high

The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.

Art. 12, 13 GDPR

No Granular Cookie Choice
high

Users cannot select or deselect individual cookie categories; consent is presented as all-or-nothing.

Art. 4(11) GDPR

Cannot Withdraw Cookie Consent
critical

No accessible mechanism exists for users to withdraw previously given cookie consent.

Art. 7(3) GDPR

Details

Fine Date

22 April 2024

Authority

Agencija za zaštitu osobnih podataka

Fine Amount

€15,000

Enforcement Tracker ID

2304

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Betting company - Croatia (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: