Online Services – €7,000 Fine (Latvia, 2019)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
An online store in Latvia was fined for not deleting a customer's personal data after being asked repeatedly. The store continued to send marketing texts despite the customer's request. This case shows the importance of respecting users' rights to have their data erased.
What happened
The online store failed to delete a customer's personal data and continued sending marketing messages.
Who was affected
Customers who requested their personal data, like phone numbers, be deleted but continued to receive marketing messages.
What the authority found
The authority found that the online store violated the customer's 'right to be forgotten' by not deleting their data as requested.
Why this matters
This ruling emphasizes the importance of honoring data deletion requests under GDPR. Online businesses must ensure they have processes in place to respect customers' rights to control their personal information.
GDPR Articles Cited
A merchant who provides services in an online store has infringed the 'right to be forgotten' pursuant to Art. 17 GDPR when he was repeatedly requested by a data subject to delete all his personal data, in particular his/her mobile phone number, which the merchant had received as part of an order. Nevertheless, the merchant repeatedly sent advertising messages by SMS to the data subjects mobile phone number.
Related Enforcement Actions (0)
No other enforcement actions found for Online Services in LV
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
26 August 2019
Authority
Datu valsts inspekcija
Fine Amount
€7,000
Enforcement Tracker ID
ETid-73
About this data
Cite as: Cookie Fines. Online Services - Latvia (2019). Retrieved from cookiefines.eu
Last updated: