A.S. Watson Health & Beauty Continental Europe B.V. – €50,000 Fine (Netherlands, 2024)
A.S. Watson was fined for using tracking cookies without proper consent on their Kruidvat.nl website. This is important because it shows that companies must make it easy for users to refuse tracking.
What happened
A.S. Watson tracked visitors on their website using pre-ticked consent boxes for cookies.
Who was affected
Millions of visitors to the Kruidvat.nl website were affected by the tracking practices.
What the authority found
The Dutch DPA found that A.S. Watson violated GDPR by using pre-ticked boxes and making it difficult to refuse cookies.
Why this matters
This case underscores the need for companies to have user-friendly consent mechanisms for cookies. Businesses should review their cookie practices to ensure compliance and protect user privacy.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Dutch DPA has imposed a fine of EUR 600,000 on A.S. Watson Health & Beauty Continental Europe B.V.. The controller had tracked visitors to their drugstore website “Kruidvat.nl” with tracking cookies without their consent. The cookie banner on the website had the boxes for consenting to the placement of tracking software pre-ticked by default. Visitors who nevertheless wanted to reject the cookies could only do so with greater difficulty. This allowed the controller to collect sensitive personal data from millions of website visitors and create profiles. Among other things, the controller collected location data and information on purchased products. Since the products purchased included drugstore products, it was also possible to draw conclusions about health conditions based on the purchase of pregnancy tests or medication, for example. ---UPDATE --- Following an objection filed by the processor, the DPA reduced the fine from EUR 600,000 to a sum of EUR 50,000.
Violations (4)
Refusing cookies requires more clicks or steps than accepting them, or the reject option is less visually prominent.
Art. 7 GDPR
Cookie consent checkboxes are pre-selected by default, violating the requirement for active, affirmative consent.
Art. 4(11) GDPR
Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.
Art. 6(1) GDPR
Third-party tracking cookies or scripts are loaded without obtaining prior user consent.
Art. 13, 14 GDPR
Related Enforcement Actions (0)
No other enforcement actions found for A.S. Watson Health & Beauty Continental Europe B.V. in NL
This is the only recorded action for this entity in this jurisdiction.
Similar Cases
Enforcement actions with similar violations
Details
Fine Date
2 May 2024
Authority
Autoriteit Persoonsgegevens
Fine Amount
€50,000
Enforcement Tracker ID
ETid-2399
About this data
Cite as: Cookie Fines. A.S. Watson Health & Beauty Continental Europe B.V. - Netherlands (2024). Retrieved from cookiefines.eu
Last updated: