- Enforcing jurisdiction
- Denmark · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
TeeShoppen – Violation Found (Denmark, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
TeeShoppen faced scrutiny after a customer complained about receiving marketing emails despite requesting their data be deleted. The Danish data protection authority found that the company had not complied with the customer's request. This case illustrates the importance of respecting customers' wishes regarding their personal data.
What happened
A customer requested TeeShoppen to delete their personal data but continued to receive marketing emails.
Who was affected
A customer of TeeShoppen who wanted their personal data erased.
What the authority found
The authority determined that TeeShoppen violated data protection rules by not deleting the customer's data as requested.
Why this matters
This case serves as a reminder for businesses to honor customer requests regarding their personal data. It highlights the need for effective data management practices to ensure compliance with data protection laws.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 19 March 2026.
Processing notes: articles corrected, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A data subject who had purchased goods from TeeShoppen, an e-commerce platform (the controller), and was getting marketing messages, asked the controller to delete his personal data. Subsequently, on 24 June 2019, the controller informed the data subject that his data would be deleted. When this was not done, the data subject contacted the Danish DPA. The controller confirmed to the DPA that it had deleted the personal data of the data subject. On 8 October 2020, the DPA reprimanded the controller for not immediately complying with Article 17 GDPR and closed the case. In Autumn of 2021, the data subject started receiving marketing emails again, and thus contacted the Danish DPA. The DPA sought replies from the controller but none was received. The DPA pointed out that as per Article 21(2) GDPR, data subjects have the right to object to the processing of their personal data for direct marketing purposes. In addition, data subjects have the right to have their personal data erased as per Article 17 GDPR. The DPA found that the controller had not deleted the personal data of the data subject, despite its earlier statement. Therefore, the DPA held that the controller had not complied with the data subject's right to erasure of personal data under Article 17(1)(c) GDPR. Consequently, the DPA reprimanded the controller for violating Article 17(1)(c) GDPR and ordered it to delete the personal data of the data subject.
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for TeeShoppen in DK
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
9 August 2022
Authority
Datatilsynet (Norway)
About this data
Cite as: Cookie Fines. TeeShoppen - Denmark (2022). Retrieved from cookiefines.eu
Last updated: