SIA GZ AUTO – Violation Found (Latvia, 2024)

Violation Found
Datu valsts inspekcija29 January 2024Latvia
final
ePrivacy
Violation Found

The Datu valsts inspekcija found that SIA GZ AUTO's websites used cookies without proper consent from users. This is significant because it highlights the importance of obtaining user permission before tracking their online behavior.

What happened

SIA GZ AUTO's websites placed cookies without obtaining user consent and did not provide a way to reject them.

Who was affected

Website visitors who were tracked by cookies on SIA GZ AUTO's websites without their consent.

What the authority found

The authority found that SIA GZ AUTO violated GDPR by using misleading cookie banners and not allowing users to withdraw consent.

Why this matters

This case underscores the need for clear consent mechanisms for cookies. Website operators should ensure they provide users with easy options to manage their cookie preferences.

GDPR Articles Cited

AI-verified

Art. 7(GDPR)
Art. 5(1)(a) GDPR
Art. 6(1) GDPR
View original scraped data
Art. 5(1)(a) GDPR
Art. 6(1) GDPR
Art. 7(GDPR)

Original data from scraper before AI verification against source document.

Source verified 19 March 2026
date discrepancy
Full Legal Summary
Detailed

The website's cookie banner lacked a reject button, placed cookies before obtaining consent, and used third-party cookies without consent.

Outcome

Violation Found

The DPA found a violation but did not impose a fine.

Violations (6)

No Reject Button
critical

Cookie banner does not provide a clear reject/refuse all button at the same level as the accept button.

Art. 7 GDPR

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Third-Party Cookies Without Consent
critical

Third-party tracking cookies or scripts are loaded without obtaining prior user consent.

Art. 13, 14 GDPR

Unclear Cookie Information
high

The cookie banner or cookie policy provides vague, incomplete, or unclear information about what cookies are used and why.

Art. 12, 13 GDPR

Misleading Banner Messaging
critical

The cookie banner uses misleading language to trick or pressure users into accepting cookies (dark patterns).

Art. 7 GDPR

Cannot Withdraw Cookie Consent
critical

No accessible mechanism exists for users to withdraw previously given cookie consent.

Art. 7(3) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for SIA GZ AUTO in LV

This is the only recorded action for this entity in this jurisdiction.

Similar Cases

Enforcement actions with similar violations

Details

Decision Date

29 January 2024

Authority

Datu valsts inspekcija

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified
Cookie relevance: 100%

Cite as: Cookie Fines. SIA GZ AUTO - Latvia (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: