Thessaloniki–Thessaly Gas Supply Company S.A. – €10,000 Fine (Greece, 2025)

€10,000Hellenic Data Protection Authority31 December 2025Greece
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Thessaloniki–Thessaly Gas Supply Company S.A. was fined EUR 10,000 for not properly managing its external call centers. The Hellenic Data Protection Authority found that the company did not ensure that complaints from people were handled correctly by these processors. This case matters because it shows that companies are responsible for how their partners handle personal data.

What happened

Thessaloniki–Thessaly Gas Supply Company S.A. failed to adequately supervise its external processors handling marketing calls.

Who was affected

Individuals who complained about unsolicited marketing calls were affected.

What the authority found

The authority determined that the company violated Article 28(3) and Article 32(2) of GDPR by not ensuring proper oversight of its processors.

Why this matters

This ruling highlights the need for companies to actively monitor their partners' compliance with data protection laws. It serves as a reminder that companies can be held accountable for their external service providers.

GDPR Articles Cited

AI-verified

Art. 28(3) GDPR
Art. 32(2) GDPR
View original scraped data
Art. 28(3) GDPR
Art. 32(2) GDPR
(4) GDPR

Original data from scraper before AI verification against source document.

Source verified 14 March 2026
articles corrected
national law identified
entity split needed
Full Legal Summary
Detailed

The Greek DPA has imposed a fine of EUR 10,000 on Thessaloniki–Thessaly Gas Supply Company S.A. The controller, an energy provider, used external processors for direct marketing via telephone. The controller forwarded complaints by data subjects to the external processors, but failed to ensure, that the processors response was adequate, gernerally failing to adequatly controll processors.

Related Enforcement Actions (0)

No other enforcement actions found for Thessaloniki–Thessaly Gas Supply Company S.A. in GR

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

31 December 2025

Authority

Hellenic Data Protection Authority

Fine Amount

€10,000

Enforcement Tracker ID

ETid-3016

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Thessaloniki–Thessaly Gas Supply Company S.A. - Greece (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: