# Verkkokauppa.com: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Deputy Data Protection Ombudsman
- Date: 2024-03-06
- Original: https://www.enforcementtracker.com/ETid-2243
- Canonical: https://overview.legal/posts/48358
- Topics: Storage Limitation, Retention Period, IP Address, Processing Agreement, Processing, Supervisory Authorities

## Summary

The Finnish DPA has imposed a fine of EUR 856,000 on Verkkokauppa.com Plc for not specifying the retention period of customer account data of e-commerce customers. The DPA also found that in order to make an online purchase, customers were required to create a customer account or register.

## Full text

The Finnish DPA has imposed a fine of EUR 856,000 on Verkkokauppa.com Plc for not specifying the retention period of customer account data of e-commerce customers. The DPA also found that in order to make an online purchase, customers were required to create a customer account or register.

GDPR Articles: Art. 5 (1) e) GDPR, Art. 25 (2) GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48358 · 2026-08-22