DPA case 0712-1/2019/2725 – Order (Slovenia, 2020)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Slovenian company asked if a travel agency could send spam emails to its general email address. The authority decided that since the email belongs to a company, it doesn't require consent under data protection rules.
What happened
The authority ruled that the travel agency could send emails to the company's general email address without prior consent.
Who was affected
The Slovenian company that received unsolicited emails from the travel agency.
What the authority found
The authority found that data protection rules do not apply to emails sent to a company, as they are not considered personal data.
Why this matters
This case clarifies that businesses may receive marketing emails without consent if the emails are sent to a company address, not a personal one.
Source checks
Secondary-source text retrieved.
Automated check recorded — 18 October 2026.
No issues were reported by that automated check.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A Slovenian company asked the IP whether a travel agency was allowed to send spams to the company's e-mail "info@..." since it hasn't registered to receive such e-mails. The IP found that the protection of personal data refers to the processing of personal data which relate to an individual. Data relating to an entity are not considered to be personal and, therefore, the data protection rules do not apply to them. In this sense, there is no need for prior informed consent in such cases. Finally, the IP advised the company to refer its complaint to the competent Agency for Communication Networks and Services [https://www.akos-rs.si/ (AKOS)].
Outcome
Order
A binding order requiring the controller to take specific action.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 0712-1/2019/2725 in SI
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 0712-1/2019/2725 - Slovenia (2020). Retrieved from cookiefines.eu
Last updated: