COSMOSPACE – €250,000 Fine (France, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
COSMOSPACE was fined €250,000 for not getting consent to process sensitive customer data. This is significant because it reinforces the need for businesses to ask for permission before handling personal information. The decision serves as a reminder that failing to comply with data protection laws can lead to hefty fines.
What happened
COSMOSPACE processed sensitive customer data without obtaining prior consent.
Who was affected
Customers who sought personalized clairvoyance consultations through COSMOSPACE's services.
What the authority found
The French DPA determined that COSMOSPACE violated GDPR by processing sensitive data without consent and keeping data longer than permitted.
Why this matters
This case underscores the importance of obtaining consent for sensitive data processing. Companies must ensure they follow data protection regulations to avoid significant financial penalties.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The French DPA imposed a fine of EUR 250,000 on COSMOSPACE. The controller is a company that offers personalized clairvoyance consultations by telephone. As part of its services, the controller regularly processed multiple categories of sensitive data (Art. 9 GDPR) without obtaining prior consent. The controller also stored customer data for six years after the end of the business relationship for marketing purposes. According to the French DPA, a maximum of three years would have been admissible. This resulted in a fine of EUR 200,000. The fine was increased by EUR 50,000 because the processor also infringed the French Post and Electronic Communications Code.
Related Enforcement Actions (0)
No other enforcement actions found for COSMOSPACE in FR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
26 September 2024
Authority
Commission Nationale de l'Informatique et des Libertés
Fine Amount
€250,000
Enforcement Tracker ID
ETid-2616
About this data
Cite as: Cookie Fines. COSMOSPACE - France (2024). Retrieved from cookiefines.eu
Last updated: