ONE WAY PRIVATE COMPANY – €80,000 Fine (Greece, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
ONE WAY PRIVATE COMPANY was fined for contacting people without their consent while working for a gas supply company. The Greek data protection authority found that their system allowed operators to bypass consent checks. This case highlights the importance of ensuring that consent is properly obtained before contacting individuals.
What happened
ONE WAY PRIVATE COMPANY contacted individuals without their consent due to flaws in their consent-checking system.
Who was affected
Individuals who were contacted by the call center without giving consent were affected.
What the authority found
The Greek data protection authority imposed a fine because the company processed personal data without a valid legal basis.
Why this matters
This ruling stresses the importance of having reliable consent mechanisms in place. Companies should ensure their systems effectively verify consent to avoid hefty fines.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 10 March 2026.
Processing notes: articles corrected, national law identified, amount discrepancy, entity split needed.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Greek DPA has imposed a fine of EUR 80,000 on ONE WAY PRIVATE COMPANY. The fined entity is the processor of Thessaloniki–Thessaly Gas Supply Company S.A. (ETid-3016). The processor, a call center involved in direct marketing activities, had implemented a system to check whether consent had been given to contact a specific person. However, this system could be bypassed or ignored by the operator, resulting in data subjects being contacted without their consent. Furthermore, the controller had been promoting third-party products without being instructed to do so, resulting in personal data being processed without a sufficient legal basis.
Related Enforcement Actions (0)
No other enforcement actions found for ONE WAY PRIVATE COMPANY in GR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
31 December 2025
Authority
Hellenic Data Protection Authority
Fine Amount
€80,000
About this data
Cite as: Cookie Fines. ONE WAY PRIVATE COMPANY - Greece (2025). Retrieved from cookiefines.eu
Last updated: