# Coolblue B.V: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Autoriteit Persoonsgegevens
- Date: 2024-12-23
- Original: https://www.enforcementtracker.com/ETid-2509
- Canonical: https://overview.legal/posts/48624
- Topics: Cookies, Consent, Processing Agreement, Personal Data, Processing, Supervisory Authorities, Supervision

## Summary

The Dutch DPA has imposed a fine of €40,000 on Coolblue. The company collected personal data via cookies without users' explicit consent, relying on pre-ticked consent boxes.

## Full text

The Dutch DPA has imposed a fine of €40,000 on Coolblue. The company collected personal data via cookies without users' explicit consent, relying on pre-ticked consent boxes.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/48624 · 2026-08-22