DPA case 111/2025 – Complaint Upheld (Belgium, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Belgian company continued to send marketing emails to a person even after they asked to stop. This is significant because it shows that businesses must respect users' requests regarding their personal data.
What happened
The controller failed to stop sending direct marketing emails after the user objected.
Who was affected
The individual who received unwanted marketing emails from the company.
What the authority found
The DPA warned the controller for not informing the user about the actions taken after their objection within the required timeframe.
Why this matters
This case serves as a reminder for businesses to promptly address user requests regarding marketing communications. Companies should ensure they have effective systems to manage unsubscribe requests.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 October 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
Between 14 and 20 January 2025, the data subject received several emails for direct marketing purposes from the controller. On 15 and 20 January 2025, the data subject exercised his right to object but the controller failed to respond. On 4 February 2025, the data subject lodged a complaint with the DPA against the controller. On 13 February 2025, the data subject informed the DPA that he continued to receive direct marketing emails from the controller. The controller claimed that he had unsubscribed the data subject from his direct marketing email platform on 14 January 2025 and deleted his email address from his contact file on 20 January 2025. The DPA found that the controller may have failed to comply with Article 12(3) GDPR by not informing the data subject on the measures taken following his objection request within one month. The DPA decided to issue a warning to the controller.
Outcome
Complaint Upheld
A data subject complaint that was upheld by the DPA.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case 111/2025 in BE
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case 111/2025 - Belgium (2025). Retrieved from cookiefines.eu
Last updated: