- Enforcing jurisdiction
- Denmark · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Dansk Retursystem – Violation Found (Denmark, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The Norwegian data protection authority found that Dansk Retursystem's app may not have complied with data protection principles. The investigation focused on how the app processed user data. This finding emphasizes the need for companies to ensure their apps follow data protection rules.
What happened
Dansk Retursystem's app was investigated for potentially violating data protection principles in how it processed user information.
Who was affected
Users of the Dansk Retursystem app who provided personal information for deposit payouts.
What the authority found
The authority identified potential issues with how the app handled personal data, particularly regarding legality and transparency.
Why this matters
This case serves as a reminder for companies to ensure their applications comply with data protection regulations. Businesses should regularly assess their apps for compliance.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 March 2026.
Processing notes: authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
On 6 July 2022, the Danish DPA (Datatilsynet) initiated an investigation on its own against Dansk Retursystem (a controller). The controller is an entity managing the system of cans and bottles deposits - pant. The DPA had been made aware that the controller had developed an application called "Pant" (the App) for the payment of deposit. In connection with the App, the controller processed a number of information about, among other things, the users' bank accounts, balances, loans, etc. The investigation showed that the App had a built-in component allowing a user to log in their bank to obtain the user's account information in order to pay out money to the right account. The component was made available by a third party and integrated with the App. The component could also collect information about e.g. user's balances, identity information and transaction history. However, this information was not passed on to the controller. The DPA decided to limit the investigation of the App to the questions of: (i) whether the controller's processing of personal data in connection with the use of the App took place in accordance with the principles for processing personal data, including the principle of legality, reasonableness and transparency in accordance with Article 5(1)(a) GDPR and the data minimization principle in Article 5(1)(c) GDPR; and (ii) whether the processing took place in accordance with Article 25 (1) GDPR, as regards the implementation of the data protection principles. Against this background, the DPA requested the controller for an opinion regarding the App. In his clarifications, the controller affirmed that they have developed the App to modernize the process of deposit payouts, transitioning from physical cards to direct bank transfers. The App required users to register and link a bank account for deposit payments. For this purpose the controller relied on services offered by [https://tink.com/de/ Tink AB], a payment-service-provider. The controller
Outcome
Violation Found
The DPA found a violation but did not impose a fine.
Related Enforcement Actions (0)
No other enforcement actions found for Dansk Retursystem in DK
This is the only recorded action for this entity in this jurisdiction.
Details
Decision Date
26 September 2024
Authority
Datatilsynet (Norway)
About this data
Cite as: Cookie Fines. Dansk Retursystem - Denmark (2024). Retrieved from cookiefines.eu
Last updated: