Verkkokauppa.com: Non-compliance with general data processing principles

The Finnish DPA has imposed a fine of EUR 856,000 on Verkkokauppa.com Plc for not specifying the retention period of customer account data of e-commerce customers. The DPA also found that in order to make an online purchase, customers were required to create a customer account or register.

GDPR Articles: Art. 5 (1) e) GDPR, Art. 25 (2) GDPR
Industry: Industry and Commerce