- Enforcing jurisdiction
- France · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Spartoo – €250,000 Fine (France, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Spartoo, an online retailer, was fined for improperly handling customer data. They recorded all phone conversations, including sensitive information like bank details, and stored some data without proper encryption. This case highlights the importance of data protection and the need for businesses to follow strict privacy rules.
What happened
Spartoo recorded all telephone hotline conversations and stored bank details partially unencrypted.
Who was affected
Customers who interacted with Spartoo's hotline and whose personal data was recorded.
What the authority found
The authority found that Spartoo violated GDPR principles, including data minimization and incorrect information obligations.
Why this matters
This ruling emphasizes that companies must securely handle personal data and provide accurate information to users. It serves as a reminder for online businesses to review their data protection practices.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 6 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A fine of EUR 250000 was imposed on the online retailer Spartoo. The reason for this was that the company, which has its headquarters in France but supplies a large number of European countries, fully recorded all telephone hotline conversations (including personal data such as address and bank details of orders) and in addition stored bank details partially unencrypted. Among other things, this represents a violation of the principle of data minimization. Furthermore, the supervisory authority also found a violation of the information obligations according to Art. 13 GDPR, as the company's data protection information was partially incorrect.
Related Enforcement Actions (0)
No other enforcement actions found for Spartoo in FR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
5 August 2020
Authority
Commission Nationale de l'Informatique et des Libertés
Fine Amount
€250,000
Enforcement Tracker ID
ETid-362
About this data
Cite as: Cookie Fines. Spartoo - France (2020). Retrieved from cookiefines.eu
Last updated: