Delivery Hero: Insufficient fulfilment of data subjects rights
€195,407 fine - Data Protection Authority of Berlin
Content
According to the findings of the Berlin data protection officer, Delivery Hero Germany GmbH had not deleted accounts of former customers in ten cases, even though those data subjects had not been active on the company's delivery service platform for years - in one case even since 2008. In addition, eight former customers had complained about unsolicited advertising e-mails from the company. A data subject who had expressly objected to the use of his data for advertising purposes nevertheless received further 15 advertising e-mails from the delivery service. In further five cases, the company did not provide the data subjects with the required information or only after the Berlin data protection officer had intervened.
GDPR Articles: Art. 15 GDPR, Art. 17 GDPR, Art. 21 GDPR
Industry: Accomodation and Hospitality