Nestor SAS – €20,000 Fine (France, 2021)

€20,000Commission Nationale de l'Informatique et des Libertés5 January 2021France
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Nestor SAS was fined for sending marketing emails without consent and failing to provide requested personal data. Many people received unwanted emails, and the company did not respond to requests for information. This case stresses the need for businesses to respect user consent and data access rights.

What happened

Nestor SAS sent commercial emails to individuals who had not given consent and ignored requests for personal data.

Who was affected

Individuals who received unsolicited marketing emails from Nestor SAS and those who requested their personal data.

What the authority found

The French data protection authority ruled that Nestor SAS violated data protection rules by not obtaining consent and failing to provide information to users.

Why this matters

This case underscores the importance of obtaining consent before sending marketing communications. Businesses must ensure they respect users' rights to access their personal data and comply with data protection regulations.

GDPR Articles Cited

Art. 12(GDPR)
Art. 13(GDPR)
Full Legal Summary
Detailed

The French DPA (CNIL) fined the company Nestor EUR 20,000. The CNIL notes that the privacy policy provided during the registration process on the company´s website did not contain the necessary information required by the GDPR. In addition, the controller provided insufficient information on data processing during app registration.

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Details

Fine Date

5 January 2021

Authority

Commission Nationale de l'Informatique et des Libertés

Fine Amount

€20,000

Enforcement Tracker ID

ETid-511

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Nestor SAS - France (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: