Enforcing jurisdiction
France · Geography does not establish applicable law.
Confirmed applicable legislation

TELEMAQUE – €150,000 Fine (France, 2024)

€150,000Commission Nationale de l'Informatique et des Libertés26 September 2024France
final
Fine

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

TELEMAQUE was fined EUR 150,000 for processing sensitive personal data without consent and keeping it too long. This case emphasizes the need for companies to obtain proper consent before handling sensitive information. Organizations should review their data retention policies to comply with regulations.

What happened

TELEMAQUE processed sensitive personal data without obtaining prior consent and stored it for too long.

Who was affected

Customers of TELEMAQUE whose sensitive personal data was processed without consent.

What the authority found

The French DPA ruled that TELEMAQUE violated GDPR by failing to get consent for processing sensitive data and retaining it longer than necessary.

Why this matters

This decision serves as a reminder for companies to ensure they have valid consent for processing sensitive data. It also stresses the importance of having clear data retention policies.

Recorded legal citations
Automatically processed
Art. 9 GDPR
Art. 5(1)(e) GDPR
View original scraped data
Art. 5(1)(e) GDPR
Art. 9 GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Source checks

Linked-source text retrieved.

Review needed — 6 March 2026.

Processing notes: articles corrected, national law identified, entity split needed.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The French DPA imposed a fine of EUR 150,000 on TELEMAQUE. The controller is a company that offers digital services in the field of divinatory arts, including fortune telling by SMS, VAS or online chat. As part of its services, the controller regularly processed multiple categories of sensitive data (Art. 9 GDPR) without obtaining prior consent. The controller also stored customer data for six years after the end of the business relationship for marketing purposes. According to the French DPA, three years would have been admissible. This resulted in a fine of EUR 100,000. The fine increased by EUR 50,000 because the processor also infringed the French Post and Electronic Communications Code.

Related Enforcement Actions (0)

No other enforcement actions found for TELEMAQUE in FR

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

26 September 2024

Authority

Commission Nationale de l'Informatique et des Libertés

Fine Amount

€150,000

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. TELEMAQUE - France (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: