# Nestor SAS: Insufficient fulfilment of information obligations

- Type: Enforcement
- Source: French Data Protection Authority (CNIL)
- Date: 2021-01-05
- Original: https://www.enforcementtracker.com/ETid-511
- Canonical: https://overview.legal/posts/46626
- Topics: Controllers, Processing Agreement, Processing, Supervisory Authorities, Data Controller

## Summary

The French DPA (CNIL) fined the company Nestor EUR 20,000. The CNIL notes that the privacy policy provided during the registration process on the company´s website did not contain the necessary information required by the GDPR. In addition, the controller provided insufficient information on data processing during app registration.

## Full text

The French DPA (CNIL) fined the company Nestor EUR 20,000. The CNIL notes that the privacy policy provided during the registration process on the company´s website did not contain the necessary information required by the GDPR. In addition, the controller provided insufficient information on data processing during app registration.

GDPR Articles: Art. 12 GDPR, Art. 13 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/46626 · 2026-08-22