- Enforcing jurisdiction
- France · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
UBEEQO INTERNATIONAL – €175,000 Fine (France, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
UBEEQO INTERNATIONAL was fined for collecting too much geolocation data from rented vehicles without proper justification. The authority found that the company kept this data for too long and did not adequately inform users about data collection. This case shows the importance of data minimization and transparency in data practices.
What happened
UBEEQO INTERNATIONAL was fined EUR 175,000 for violating data minimization principles by excessively collecting and retaining geolocation data.
Who was affected
Customers who rented vehicles and had their geolocation data collected were affected.
What the authority found
The authority ruled that the company violated Articles 5(1) c) and e) of GDPR by collecting unnecessary data and retaining it for too long.
Why this matters
This case underscores the importance of only collecting data that is necessary for specific purposes. Businesses should ensure they have clear policies on data retention and user information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 6 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The French DPA (CNIL) has fined the company UBEEQO INTERNATIONAL EUR 175,000. The vehicle rental company had collected geolocation data on rented vehicles at every 500 meters. The company stated that they had collected the data to monitor the condition of the fleet, to locate the vehicle in case of theft, and to assist customers in case of an accident, among other reasons. However, the DPA found that none of these purposes justified the collection of geolocation data in such detail. For this reason, the DPA found a violation of the principle of data minimization pursuant to Art. 5 (1) c) GDPR. The DPA also found that the company had stored the vehicle data for an excessively long period of time. The data was kept for the duration of the business relationship with a customer and then for another three years after the termination of the vehicle rental. In addition, personal data of users who had been inactive for more than eight years were still stored in the company's databases. The CNIL found that this long retention constituted a violation of Art. 5 (1) e) GDPR. Finally, the DPA found that users were not adequately informed during the registration process on the company portal, and that the company thus violated Art. 12 GDPR.
Related Enforcement Actions (0)
No other enforcement actions found for UBEEQO INTERNATIONAL in FR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
7 July 2022
Authority
Commission Nationale de l'Informatique et des Libertés
Fine Amount
€175,000
About this data
Cite as: Cookie Fines. UBEEQO INTERNATIONAL - France (2022). Retrieved from cookiefines.eu
Last updated: