# Online Services: Insufficient fulfilment of data subjects rights

- Type: Enforcement
- Source: Data State Inspectorate (DSI)
- Date: 2019-08-26
- Original: https://www.enforcementtracker.com/ETid-73
- Canonical: https://overview.legal/posts/46188
- Topics: Right to be Forgotten, Personal Data, Direct Marketing

## Summary

A merchant who provides services in an online store has infringed the 'right to be forgotten' pursuant to Art. 17 GDPR when he was repeatedly requested by a data subject to delete all his personal data, in particular his/her mobile phone number, which the merchant had received as part of an order. Nevertheless, the merchant repeatedly sent advertising messages by SMS to the data subjects mobile phone number.

## Full text

A merchant who provides services in an online store has infringed the 'right to be forgotten' pursuant to Art. 17 GDPR when he was repeatedly requested by a data subject to delete all his personal data, in particular his/her mobile phone number, which the merchant had received as part of an order. Nevertheless, the merchant repeatedly sent advertising messages by SMS to the data subjects mobile phone number.

GDPR Articles: Art. 17 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/46188 · 2026-08-22