Company – €195,000 Fine (Germany, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A company in Germany was fined €195,000 for not properly handling requests from people who wanted to exercise their rights regarding their personal data. This matters because it shows that companies must take these requests seriously and respond appropriately. Failing to do so can lead to significant financial penalties.
What happened
The company failed to adequately respond to requests from individuals to exercise their rights related to personal data.
Who was affected
Individuals who requested to exercise their rights regarding their personal data were affected.
What the authority found
The data protection authority found that the company did not respond properly to requests, violating data protection rules.
Why this matters
This case highlights the importance of companies being responsive to data requests. Small businesses should ensure they have processes in place to handle such inquiries to avoid fines.
The DPA of Hamburg has imposed a fine of EUR 195,000 on a company. The controller was active in direct marketing via post and failed to adequately respond to requests from data subjects to exercise their rights.
Related Enforcement Actions (20)
Other enforcement actions involving Company in DE
Fine
€195K
Details
Fine Date
30 September 2025
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€195,000
About this data
Cite as: Cookie Fines. Company - Germany (2025). Retrieved from cookiefines.eu
Last updated: