Enforcement
EN Online Services: Insufficient fulfilment of data subjects rights
€7,000 fine - Data State Inspectorate (DSI)
Content
A merchant who provides services in an online store has infringed the 'right to be forgotten' pursuant to Art. 17 GDPR when he was repeatedly requested by a data subject to delete all his personal data, in particular his/her mobile phone number, which the merchant had received as part of an order. Nevertheless, the merchant repeatedly sent advertising messages by SMS to the data subjects mobile phone number.
GDPR Articles: Art. 17 GDPR
Industry: Industry and Commerce