ONE WAY PRIVATE COMPANY – €80,000 Fine (Greece, 2025)

€80,000Hellenic Data Protection Authority31 December 2025Greece
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

ONE WAY PRIVATE COMPANY was fined for contacting people without their consent while working for a gas supply company. The Greek data protection authority found that their system allowed operators to bypass consent checks. This case highlights the importance of ensuring that consent is properly obtained before contacting individuals.

What happened

ONE WAY PRIVATE COMPANY contacted individuals without their consent due to flaws in their consent-checking system.

Who was affected

Individuals who were contacted by the call center without giving consent were affected.

What the authority found

The Greek data protection authority imposed a fine because the company processed personal data without a valid legal basis.

Why this matters

This ruling stresses the importance of having reliable consent mechanisms in place. Companies should ensure their systems effectively verify consent to avoid hefty fines.

GDPR Articles Cited

AI-verified

Art. 5(GDPR)
Art. 6(GDPR)
Art. 7(GDPR)
Art. 29(GDPR)
Art. 32(GDPR)
View original scraped data
Art. 5(GDPR)
Art. 6(GDPR)
Art. 7(GDPR)
Art. 29(GDPR)
Art. 32(GDPR)

Original data from scraper before AI verification against source document.

Source verified 10 March 2026
articles corrected
national law identified
amount discrepancy
entity split needed
Full Legal Summary
Detailed

The Greek DPA has imposed a fine of EUR 80,000 on ONE WAY PRIVATE COMPANY. The fined entity is the processor of Thessaloniki–Thessaly Gas Supply Company S.A. (ETid-3016). The processor, a call center involved in direct marketing activities, had implemented a system to check whether consent had been given to contact a specific person. However, this system could be bypassed or ignored by the operator, resulting in data subjects being contacted without their consent. Furthermore, the controller had been promoting third-party products without being instructed to do so, resulting in personal data being processed without a sufficient legal basis.

Related Enforcement Actions (0)

No other enforcement actions found for ONE WAY PRIVATE COMPANY in GR

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

31 December 2025

Authority

Hellenic Data Protection Authority

Fine Amount

€80,000

Enforcement Tracker ID

ETid-3017

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. ONE WAY PRIVATE COMPANY - Greece (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: